Function at 0x4443d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ed778
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x510
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x49c], edi
push 3
push str.Service_Manager
call fcn.0045f680
mov dword [ebp - 0x4ac], eax
mov ecx, edi
mov eax, dword [edi + 0x1f70]
mov dword [ebp - 0x4a8], eax
mov dword [edi + 0x1f70], 0
call fcn.0043e530
test al, al
je 0x446c0f
push 1
push str.https:__www.carifred.com_uvk_help_services_drivers.php
lea ecx, [edi + 0x119c]
call fcn.005dc260
mov esi, dword [edi + 0x14e4]
lea eax, [ebp - 0x430]
push 0x270
push 0
push eax
mov dword [ebp - 0x484], esi
call fcn.00420090
add esp, 0xc
lea eax, [edi + 0x14a8]
lea ecx, [ebp - 0x430]
push eax
call fcn.005c6300
push 0xffffffffffffffff
lea ecx, [ebp - 0x430]
mov dword [ebp - 4], 0
call fcn.005c4720
movsd xmm1, qword [0x6edb20]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.005c42b0
push 0x37
push 0x50
push 3
push 0xa
mov ecx, edi
call fcn.0045fec0
push str.Service_Manager
lea ecx, [edi + 0x1448]
call fcn.005dc510
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x5f
push 0x3c
push 5
lea ecx, [edi + 0x1448]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005c0890
push dword [edi + 0x1438]
mov ecx, esi
push 0xffffffffffffffff
call fcn.005bec70
movsd xmm1, qword [0x6edaf8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Delete_the_selected_service._Check__Also_delete_file__if_you_wish_to_delete_the_corresponding_file.
push 0x5f
push 0x73
push 0xa
push 0x69
push 0x72
push str.Delete_service_r_n_r_n
call fcn.0045fdf0
push eax
mov ecx, esi
mov dword [ebp - 0x494], eax
call fcn.005c5730
push eax
lea ecx, [ebp - 0x430]
call fcn.005c5fe0
mov ecx, dword [edi + 0x1404]
push 0xfffffffffffffffe
push ecx
push ecx
lea eax, [ebp - 0x430]
push eax
push str.Check_this_option_if_you_wish_to_delete_the_corresponding_file_when_deleting_a_service.
push 0
push ecx
push 0x6e
push 0x49
push 5
push str._Also_delete_file
mov ecx, edi
call fcn.0045fc60
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Show_information_on_the_selected_service_and_file__like_its_file_description_or_digital_signature.
push 0x5f
push 0x50
push 0xa
push 0xe1
push 0x8b
push str.Service_properties
mov dword [ebp - 0x51c], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Stop_service_s_
push 0x23
push 0x23
push 0xf
push 0x136
push 0x9d
push 0
mov dword [ebp - 0x510], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Start_service_s_
push 0x23
push 0x23
push 0xf
push 0x15e
push 0x9b
push 0
mov dword [ebp - 0x508], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Pause_service_s_
push 0x23
push 0x23
push 0xf
push 0x186
push 0x89
push 0
mov dword [ebp - 0x4f8], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Resume_service_s_
push 0x23
push 0x23
push 0x41
push 0x136
push 0x96
push 0
mov dword [ebp - 0x4f0], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [ebp - 0x4cc], eax
mov dword [esp], 0x41500000
push str.Set_startup_type
push 0x23
push 0x23
push 0x41
push 0x15e
push 0xa0
push 0
mov ecx, edi
call fcn.0045fdf0
mov ecx, eax
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x4a4], ecx
cmp eax, ecx
jg 0x4446e9
mov edi, eax
nop dword [eax]
push 0x40
push edi
mov ecx, esi
call fcn.005bd3f0
inc edi
cmp edi, dword [ebp - 0x4a4]
jle 0x4446d0
mov edi, dword [ebp - 0x49c]
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Refresh_the_list__F5_.
push 0x23
push 0x23
push 0x41
push 0x186
push 0x8d
push 0
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Choose_which_files_to_display_in_the_list._Several_filters_can_be_specified.
push 0x5f
push 0x4b
push 0xa
push 0x1ae
push 0xa4
push str.List_settings
mov dword [ebp - 0x4fc], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Create_a_new_startup_entry__or_restore_previously_deleted_autorun_entries.
push 0x5f
push 0x4b
push 0xa
push 0x1fe
push 0x81
push str.Stop_all___Restore
mov dword [ebp - 0x514], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Show_online_help__F1_
push 0x5f
push 0x4b
push 0xa
push 0x24e
push 0x7d
push str.Help
mov dword [ebp - 0x50c], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Go_back_to_the_Home_page__Esc_
push 0x5f
push 0x4b
push 0xa
push 0x29e
push 0xb3
push str.Home
mov dword [edi + 0x11bc], eax
call fcn.0045fdf0
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push str.Find_a_service__CtrlF_
mov ecx, esi
mov dword [edi + 0x11c0], eax
call fcn.005c0a40
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x4a0], eax
call fcn.005bec70
movsd xmm0, qword [0x6edb08]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, esi
call fcn.005beb10
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bd3f0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.List_menu
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push str.List_menu
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Find_next__F3_
push 0x28
push 0x5a
push 0x41
push 0x352
push 0x99
push str.Find_next
mov dword [ebp - 0x480], eax
call fcn.0045fd50
push 0
push 0x6e7ba8
mov ecx, edi
mov dword [ebp - 0x4b4], eax
call fcn.0045f4d0
mov ecx, edi
call fcn.0045f300
push 0
lea ecx, [ebp - 0x180]
mov byte [ebp - 0x472], 0
mov byte [ebp - 0x471], 0
call fcn.005d0610
movsd xmm1, qword [0x6edaf8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov dword [ebp - 0x470], 0xffffffff
call fcn.005c42b0
push dword [ebp - 0x4a8]
lea eax, [ebp - 0x470]
mov ecx, edi
push eax
call fcn.00443fa0
push dword [ebp - 0x470]
mov ecx, esi
call fcn.005c5730
push 0x48
mov dword [ebp - 0x490], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
movsd xmm0, qword [0x6edab8]
mov ecx, eax
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x46c], ecx
jb 0x44494e
push 4
call dword [sym.imp.USER32.dll_GetSysColor]
mov ecx, dword [ebp - 0x46c]
or eax, 0xff000000
jmp 0x444950
xor eax, eax
push eax
push ecx
push ecx
push 0x8b
mov ecx, edi
mov dword [ebp - 0x84], eax
call fcn.00436420
push eax
lea ecx, [ebp - 0x43c]
call fcn.005c6520
mov byte [ebp - 4], 1
mov ecx, esi
push dword [ebp - 0x43c]
push str.Service_properties_tCtrlEnter
push dword [ebp - 0x480]
call fcn.005c1450
push 0
push eax
push dword [ebp - 0x480]
mov ecx, esi
mov dword [ebp - 0x4b0], eax
call fcn.005c56e0
push eax
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
push dword [ebp - 0x84]
mov eax, dword [ebp - 0x46c]
mov ecx, edi
push eax
push eax
push 0x72
call fcn.00436420
push eax
lea ecx, [ebp - 0x440]
call fcn.005c6520
push 0
mov byte [ebp - 4], 2
mov ecx, esi
push dword [ebp - 0x440]
push 0
push 0x32
push str.Delete_service_tDel
push dword [ebp - 0x480]
call fcn.005c0400
push dword [ebp - 0x84]
mov dword [ebp - 0x4e0], eax
mov ecx, edi
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0x81
call fcn.00436420
push eax
lea ecx, [ebp - 0x444]
call fcn.005c6520
push 0
mov byte [ebp - 4], 3
mov ecx, esi
push dword [ebp - 0x444]
push 0
push 0x32
push str.Delete_service_and_file_tCtrlDel
push dword [ebp - 0x480]
call fcn.005c0400
push dword [ebp - 0x84]
mov dword [ebp - 0x4c8], eax
mov ecx, edi
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0x80
call fcn.00436420
push eax
lea ecx, [ebp - 0x438]
call fcn.005c6520
push 0
mov byte [ebp - 4], 4
push dword [ebp - 0x438]
push 0
push 0x32
push str.Verify_file_signature_tAltV
push dword [ebp - 0x480]
mov ecx, esi
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x480]
mov ecx, esi
mov dword [ebp - 0x4e4], eax
call fcn.005c0400
push dword [ebp - 0x84]
mov eax, dword [ebp - 0x46c]
mov ecx, edi
push eax
push eax
push 0x75
call fcn.00436420
push eax
lea ecx, [ebp - 0x448]
call fcn.005c6520
push 0
mov byte [ebp - 4], 5
mov ecx, esi
push dword [ebp - 0x448]
push 4
push 0x32
push str.Service_control_options
push dword [ebp - 0x480]
call fcn.005c0400
push dword [ebp - 0x84]
mov esi, eax
mov ecx, edi
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0x9d
call fcn.00436420
push eax
lea ecx, [ebp - 0x450]
call fcn.005c6520
mov ecx, dword [ebp - 0x484]
push 0
mov byte [ebp - 4], 6
push dword [ebp - 0x450]
push 0
push 0x32
push str.Stop_service
push esi
call fcn.005c0400
push dword [ebp - 0x84]
mov dword [ebp - 0x504], eax
mov ecx, edi
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0x9b
call fcn.00436420
push eax
lea ecx, [ebp - 0x44c]
call fcn.005c6520
mov ecx, dword [ebp - 0x484]
push 0
mov byte [ebp - 4], 7
push dword [ebp - 0x44c]
push 0
push 0x32
push str.Start_service
push esi
call fcn.005c0400
push dword [ebp - 0x84]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0x89
mov ecx, edi
call fcn.00436420
push eax
lea ecx, [ebp - 0x454]
call fcn.005c6520
mov ecx, dword [ebp - 0x484]
push 0
mov byte [ebp - 4], 8
push dword [ebp - 0x454]
push 0
push 0x32
push str.Pause_service
push esi
call fcn.005c0400
push dword [ebp - 0x84]
mov dword [ebp - 0x4ec], eax
mov ecx, edi
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0x96
call fcn.00436420
push eax
lea ecx, [ebp - 0x458]
call fcn.005c6520
mov ecx, dword [ebp - 0x484]
push 0
mov byte [ebp - 4], 9
push dword [ebp - 0x458]
push 0
push 0x32
push str.Resume_service
push esi
call fcn.005c0400
push dword [ebp - 0x84]
mov dword [ebp - 0x4e8], eax
mov ecx, edi
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0xa0
call fcn.00436420
push eax
lea ecx, [ebp - 0x45c]
call fcn.005c6520
mov edi, dword [ebp - 0x484]
mov ecx, edi
push 0
mov byte [ebp - 4], 0xa
push dword [ebp - 0x45c]
push 0
push 0x32
push str.Set_startup_type
push esi
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x480]
mov ecx, edi
mov dword [ebp - 0x518], eax
call fcn.005c0400
push dword [ebp - 0x84]
mov eax, dword [ebp - 0x46c]
mov esi, dword [ebp - 0x49c]
mov ecx, esi
push eax
push eax
push 0x7c
call fcn.00436420
push eax
lea ecx, [ebp - 0x468]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xb
mov ecx, edi
push dword [ebp - 0x468]
push 0
push 0x32
push str.Google_file_name_tCtrlG
push dword [ebp - 0x480]
call fcn.005c0400
push dword [ebp - 0x84]
mov dword [ebp - 0x4d0], eax
mov ecx, esi
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0xac
call fcn.00436420
push eax
lea ecx, [ebp - 0x460]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xc
mov ecx, edi
push dword [ebp - 0x460]
push 0
push 0x32
push str.Open_file_location_tCtrlL
push dword [ebp - 0x480]
call fcn.005c0400
push 0
push dword [ebp - 0x43c]
mov ecx, edi
mov dword [ebp - 0x4dc], eax
push 0
push 0x32
push str.File_properties_tCtrlP
push dword [ebp - 0x480]
call fcn.005c0400
push dword [ebp - 0x84]
mov dword [ebp - 0x500], eax
mov ecx, esi
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0x94
call fcn.00436420
push eax
lea ecx, [ebp - 0x464]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xd
mov ecx, edi
push dword [ebp - 0x464]
push 0
push 0x32
push str.Refresh_F5
push dword [ebp - 0x480]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x480]
mov ecx, edi
mov dword [ebp - 0x4b8], eax
call fcn.005c0400
push 0
push dword [ebp - 0x438]
mov ecx, edi
push 0
push 0x32
push str.VirusTotal_report_tCtrlM
push dword [ebp - 0x480]
call fcn.005c0400
push dword [ebp - 0x84]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x46c]
push eax
push eax
push 0xb1
mov ecx, esi
call fcn.00436420
push eax
lea ecx, [ebp - 0x434]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xe
mov ecx, edi
push dword [ebp - 0x434]
push 0
push 0x32
push str.Update_VirusTotal_results_tCtrlU
push dword [ebp - 0x480]
call fcn.005c0400
push 0
push dword [ebp - 0x434]
mov ecx, edi
mov dword [ebp - 0x4c0], eax
push 0
push 0x32
push str.Hide_VirusTotal_clean_results_tCtrlH
push dword [ebp - 0x480]
call fcn.005c0400
push 0
mov ecx, esi
mov dword [ebp - 0x4bc], eax
call fcn.0045f170
mov edx, eax
mov cx, word [esi + 0x11c0]
mov eax, 0x74
mov word [ebp - 0x6e], cx
mov word [ebp - 0x76], ax
mov ecx, 0x2e
mov eax, dword [ebp - 0x4fc]
mov word [ebp - 0x74], ax
mov eax, 0x1b
mov word [ebp - 0x70], ax
mov eax, 0x70
mov word [ebp - 0x6a], ax
mov ax, word [esi + 0x11bc]
mov word [ebp - 0x68], ax
mov eax, 0x72
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x4b4]
mov word [ebp - 0x62], ax
mov eax, 0x46
mov word [ebp - 0x5e], ax
mov eax, 0xd
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x4b0]
mov word [ebp - 0x56], ax
mov eax, dword [ebp - 0x4e0]
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x4c8]
mov word [ebp - 0x4a], ax
mov eax, 0x47
mov word [ebp - 0x46], ax
mov eax, dword [ebp - 0x4d0]
mov word [ebp - 0x44], ax
mov eax, 0x56
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x4d8], edx
mov byte [ebp - 0x78], 1
mov byte [ebp - 0x72], 1
mov byte [ebp - 0x6c], 1
mov byte [ebp - 0x66], 1
mov byte [ebp - 0x60], 9
mov word [ebp - 0x5c], dx
mov byte [ebp - 0x5a], 9
mov byte [ebp - 0x54], 1
mov word [ebp - 0x52], cx
mov byte [ebp - 0x4e], 9
mov word [ebp - 0x4c], cx
mov byte [ebp - 0x48], 9
mov byte [ebp - 0x42], 0x11
mov word [ebp - 0x3e], ax
mov byte [ebp - 0x3c], 9
mov eax, 0x4c
mov byte [ebp - 0x36], 9
mov word [ebp - 0x3a], ax
mov ecx, edi
mov eax, dword [ebp - 0x4dc]
mov word [ebp - 0x38], ax
mov eax, 0x50
mov word [ebp - 0x34], ax
mov eax, dword [ebp - 0x500]
mov word [ebp - 0x32], ax
mov eax, 0x4d
mov word [ebp - 0x2e], ax
mov eax, dword [ebp - 0x4c4]
mov word [ebp - 0x2c], ax
mov eax, 0x55
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x4c0]
mov word [ebp - 0x26], ax
mov eax, 0x48
mov word [ebp - 0x22], ax
mov eax, dword [ebp - 0x4bc]
mov word [ebp - 0x20], ax
lea eax, [ebp - 0x78]
push 0xf
push eax
mov byte [ebp - 0x30], 9
mov byte [ebp - 0x2a], 9
mov byte [ebp - 0x24], 9
call fcn.005c47a0
push dword [ebp - 0x490]
call dword [sym.imp.USER32.dll_SetFocus]
push 0x20
push dword [ebp - 0x4a0]
mov ecx, edi
call fcn.005bd3f0
xorps xmm0, xmm0
mov dword [ebp - 0x4d4], 0xffffffff
lea ecx, [ebp - 0x94]
movq qword [ebp - 0x94], xmm0
mov dword [ebp - 0x8c], 0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x12c], 0
lea ecx, [ebp - 0x134]
movq qword [ebp - 0x134], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x114], 0
lea ecx, [ebp - 0x11c]
movq qword [ebp - 0x11c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x108], 0
lea ecx, [ebp - 0x110]
movq qword [ebp - 0x110], xmm0
call fcn.005dc5e0
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0
call fcn.005d6aa0
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xd8], 0
call fcn.005d6aa0
push dword [ebp - 0x4b4]
mov ecx, edi
mov byte [ebp - 4], 0x14
call fcn.005c4370
push dword [ebp - 0x4a4]
mov ecx, esi
push dword [ebp - 0x494]
push dword [ebp - 0x470]
call fcn.0046af40
push 0
mov ecx, esi
call fcn.004771c0
test eax, eax
je 0x446aef
nop
mov eax, dword [esi + 0x14d8]
lea ecx, [ebp - 0x430]
mov edx, dword [ebp - 0x494]
cmp eax, ecx
lea ecx, [esi + 0x14a8]
jne 0x4450eb
cmp dword [ecx], 0xfffffff5
jne 0x4450eb
mov dword [esi + 0x14d8], edi
mov eax, edi
mov dword [ecx], edx
mov ecx, dword [ecx]
mov dword [ebp - 0x47c], ecx
cmp ecx, 0xfffffffa
je 0x446aef
cmp eax, edi
jne 0x446ac6
cmp ecx, dword [esi + 0x11c0]
je 0x446ae8
cmp byte [ebp - 0x472], 1
jne 0x445138
cmp ecx, 0xffffff31
jne 0x445138
lea ecx, [ebp - 0x180]
call fcn.005d05f0
mov byte [ebp - 0x472], 2
jmp 0x446ad5
mov eax, dword [ebp - 0x470]
cmp ecx, 0xffffffea
jne 0x44514b
cmp dword [esi + 0x14b4], eax
je 0x445157
cmp ecx, dword [ebp - 0x480]
jne 0x4452aa
cmp ecx, dword [ebp - 0x480]
jne 0x4451a3
push dword [ebp - 0x490]
call dword [sym.imp.USER32.dll_SetFocus]
cmp byte [ebp - 0x472], 2
jne 0x44519c
xorps xmm1, xmm1
lea ecx, [ebp - 0x180]
call fcn.005d05a0
movsd xmm1, qword [0x6edb98]
comisd xmm1, xmm0
jbe 0x44519c
mov byte [ebp - 0x472], 0
jmp 0x446ad5
mov byte [ebp - 0x472], 1
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebp - 0x490]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
mov ecx, 0x20
mov eax, 0x40
cmove ecx, eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x488], ecx
cmp eax, dword [ebp - 0x4b8]
jge 0x4451fe
mov esi, eax
nop
push ecx
push esi
mov ecx, edi
call fcn.005bd3f0
mov ecx, dword [ebp - 0x488]
inc esi
cmp esi, dword [ebp - 0x4b8]
jl 0x4451e0
mov esi, dword [ebp - 0x49c]
push ecx
push dword [ebp - 0x4c4]
mov ecx, edi
call fcn.005bd3f0
push 0
mov ecx, esi
call fcn.004356c0
test al, al
mov esi, 0x20
mov eax, 0x40
mov ecx, edi
cmovne esi, eax
push esi
push dword [ebp - 0x4c0]
call fcn.005bd3f0
push esi
push dword [ebp - 0x4bc]
mov ecx, edi
call fcn.005bd3f0
mov esi, dword [ebp - 0x480]
cmp dword [ebp - 0x47c], esi
jne 0x445291
lea eax, [ebp - 0x164]
mov ecx, edi
push eax
push esi
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x445291
mov eax, dword [ebp - 0x160]
mov ecx, esi
mov esi, dword [ebp - 0x164]
add eax, 0x2d
push eax
add esi, 0x5a
mov edx, 8
push esi
push edx
push ecx
mov ecx, edi
call fcn.005bbfd0
jmp 0x446ac6
mov ecx, esi
xor edx, edx
or esi, 0xffffffff
or eax, esi
push eax
push esi
push edx
push ecx
mov ecx, edi
call fcn.005bbfd0
jmp 0x446ac6
cmp ecx, 0xffffffb3
jne 0x4452bd
mov ecx, dword [ebp - 0x4a0]
cmp dword [esi + 0x14b4], ecx
je 0x4452cf
mov ecx, dword [esi + 0x14a8]
cmp ecx, dword [ebp - 0x4d8]
jne 0x445361
mov ecx, esi
call fcn.0046c220
mov esi, dword [ebp - 0x4a0]
mov ecx, edi
push 0x80
push esi
call fcn.005bd3f0
push esi
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0x94]
call fcn.005dc1c0
push str.Find_a_service__CtrlF_
lea ecx, [ebp - 0x94]
call fcn.005dc4c0
mov ecx, edi
test al, al
je 0x44534d
push 0
push 0
push esi
call fcn.005bcd30
push 0
push esi
mov ecx, edi
call fcn.005bec70
movsd xmm0, qword [0x6edb20]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push esi
mov ecx, edi
call fcn.005beb10
jmp 0x446ac6
push 0xffffffffffffffff
push 0
push 0xb1
push esi
call fcn.005befd0
jmp 0x446ac6
cmp ecx, 0xffffffb4
jne 0x4453ca
mov edi, dword [ebp - 0x4a0]
cmp dword [esi + 0x14b4], edi
mov edi, dword [ebp - 0x484]
jne 0x4453ca
push dword [ebp - 0x4a0]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0x94]
call fcn.005dc1c0
lea ecx, [ebp - 0x94]
call fcn.005dc3a0
cmp eax, 3
jl 0x446ad5
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
lea ecx, [ebp - 0x94]
call fcn.005dc190
mov ecx, dword [ebp - 0x490]
mov edx, eax
call fcn.005c9ea0
jmp 0x446ac6
cmp ecx, dword [ebp - 0x4b4]
jne 0x445490
push dword [ebp - 0x4a0]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0x94]
call fcn.005dc1c0
push str.Find_a_service__CtrlF_
lea ecx, [ebp - 0x94]
call fcn.005dc4c0
test al, al
je 0x44541e
push 0
push 0
push 0x201
push dword [ebp - 0x4d8]
mov ecx, edi
call fcn.005befd0
jmp 0x446ad5
push dword [ebp - 0x4d4]
lea ecx, [ebp - 0x94]
push 0x1e
push 0xffffffffffffffff
call fcn.005dc190
mov ecx, dword [ebp - 0x490]
mov edx, eax
call fcn.005c9ea0
mov dword [ebp - 0x4d4], eax
mov ecx, edi
push 0x80
cmp eax, 0xffffffff
je 0x445462
push dword [ebp - 0x470]
call fcn.005bd3f0
jmp 0x446ac6
push dword [ebp - 0x4a0]
call fcn.005bd3f0
sub esp, 8
mov ecx, esi
push 0x8c
push 0x190
push 0
push edi
push 4
push str.Find_reached_the_end_of_the_list.
call fcn.0043e2e0
jmp 0x446ac6
cmp ecx, 0xffffffeb
jne 0x4454b0
cmp dword [esi + 0x14b4], eax
jne 0x4454c2
push dword [ebp - 0x4a0]
mov ecx, esi
push eax
call fcn.0043e280
jmp 0x446ac6
cmp ecx, 0xffffffd3
je 0x446ab7
cmp ecx, 0xffffffd2
je 0x446ab7
cmp ecx, dword [ebp - 0x510]
je 0x446a5c
cmp ecx, dword [ebp - 0x4b0]
je 0x446a5c
mov ecx, dword [esi + 0x14a8]
cmp ecx, 0xfffffff2
jne 0x4454f1
cmp dword [esi + 0x14b4], eax
je 0x446a5c
cmp ecx, dword [ebp - 0x508]
je 0x4464d5
cmp ecx, dword [ebp - 0x4f8]
je 0x4464d5
cmp ecx, dword [ebp - 0x4f0]
je 0x4464d5
cmp ecx, dword [ebp - 0x4cc]
je 0x4464d5
cmp ecx, dword [ebp - 0x4f4]
je 0x4464d5
cmp ecx, dword [ebp - 0x504]
je 0x4464d5
cmp ecx, dword [ebp - 0x4ec]
je 0x4464d5
cmp ecx, dword [ebp - 0x4e8]
je 0x4464d5
mov ecx, dword [esi + 0x14a8]
cmp ecx, dword [ebp - 0x4a4]
je 0x446073
cmp ecx, dword [ebp - 0x518]
je 0x446073
cmp ecx, dword [ebp - 0x514]
jne 0x445607
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x1a0]
push eax
push edx
push edi
movups xmmword [ebp - 0x1a0], xmm0
movups xmmword [ebp - 0x190], xmm0
call fcn.005b8800
mov ecx, esi
mov byte [ebp - 4], 0x22
call fcn.00441ad0
test al, al
jne 0x4455ba
cmp dword [ebp - 0x4a8], 0
je 0x4455dd
push 0
lea eax, [ebp - 0x470]
mov ecx, esi
push eax
call fcn.00443fa0
push dword [ebp - 0x470]
mov ecx, edi
call fcn.005c5730
mov dword [ebp - 0x490], eax
push dword [ebp - 0x4ac]
call dword [sym.imp.USER32.dll_BringWindowToTop]
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x4a8], 0
mov byte [ebp - 4], 0x14
call fcn.005b8790
jmp 0x446ac6
cmp ecx, dword [ebp - 0x50c]
jne 0x445696
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x1c0]
push eax
push edx
push edi
movups xmmword [ebp - 0x1c0], xmm0
movups xmmword [ebp - 0x1b0], xmm0
call fcn.005b8800
mov ecx, esi
mov byte [ebp - 4], 0x23
call fcn.00440ec0
test al, al
je 0x44566c
push 0
lea eax, [ebp - 0x470]
mov ecx, esi
push eax
call fcn.00443fa0
push dword [ebp - 0x470]
mov ecx, edi
call fcn.005c5730
mov dword [ebp - 0x490], eax
push dword [ebp - 0x4ac]
call dword [sym.imp.USER32.dll_BringWindowToTop]
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x4a8], 0
mov byte [ebp - 4], 0x14
call fcn.005b8790
jmp 0x446ac6
cmp ecx, dword [ebp - 0x4e0]
je 0x445bf6
cmp ecx, dword [ebp - 0x4c8]
je 0x445bf6
cmp ecx, edx
je 0x445bf6
cmp ecx, dword [ebp - 0x4d0]
jne 0x445769
xorps xmm0, xmm0
mov ecx, edi
push eax
movlpd qword [ebp - 0x80], xmm0
call fcn.005bb360
mov ecx, eax
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x80], ecx
mov byte [ebp - 4], 0x28
mov edx, dword [ecx]
test edx, edx
jne 0x4456fa
push ecx
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ad5
mov eax, 1
mov dword [ebp - 0x488], eax
cmp edx, eax
jl 0x445757
nop dword [eax]
push 1
push dword [ecx + eax*4]
mov ecx, edi
push dword [ebp - 0x470]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x94]
call fcn.005dc1c0
push 2
lea ecx, [ebp - 0x94]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0045ee00
mov eax, dword [ebp - 0x488]
mov ecx, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x488], eax
cmp eax, dword [ecx]
jle 0x445710
push ecx
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ac6
cmp ecx, dword [ebp - 0x4e4]
jne 0x445a02
xorps xmm0, xmm0
mov ecx, edi
push eax
movlpd qword [ebp - 0x80], xmm0
call fcn.005bb360
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], 0
mov byte [ebp - 4], 0x29
cmp dword [eax], 0
jne 0x4457aa
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ad5
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
push dword [ebp - 0x470]
movups xmmword [ebp - 0xf8], xmm0
push dword [ebp - 0x494]
movups xmmword [ebp - 0xe8], xmm0
push edi
call fcn.005b8800
push 0
push str.Cancel
sub esp, 8
mov byte [ebp - 4], 0x2a
mov ecx, esi
push 0x50
push 0x258
push 0
push 0x62439c
call fcn.0043da60
mov ecx, eax
call fcn.005b64a0
push 1
lea ecx, [esi + 0x14f0]
push str.Next_service
call fcn.005b64a0
xorps xmm0, xmm0
mov dword [ebp - 0xcc], 0
lea ecx, [ebp - 0xd4]
movq qword [ebp - 0xd4], xmm0
call fcn.005dc5e0
mov byte [ebp - 4], 0x2b
mov eax, 1
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x478], eax
mov ecx, dword [ecx]
cmp ecx, eax
jl 0x4459cb
mov dword [ebp - 0x47c], 0x64
cmp eax, ecx
jne 0x445888
push 2
push 2
lea ecx, [esi + 0x14f0]
call fcn.005b61c0
push str.Close
push 1
lea ecx, [esi + 0x14f0]
call fcn.005b6150
mov eax, dword [ebp - 0x478]
mov ecx, dword [ebp - 0x80]
push 1
push dword [ecx + eax*4]
mov ecx, edi
push dword [ebp - 0x470]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x94]
call fcn.005dc1c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x635758
lea ecx, [ebp - 0x94]
call fcn.005dc190
push eax
push str.Verifying
lea ecx, [ebp - 0xd4]
call fcn.005dc200
lea ecx, [ebp - 0xd4]
call fcn.005dc190
mov ecx, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x47c]
cdq
idiv dword [ecx]
lea ecx, [esi + 0x14f0]
push eax
call fcn.005b66e0
push 0
push 1
mov ecx, esi
call fcn.0043d720
lea ecx, [ebp - 0x94]
call fcn.005dc190
xor edx, edx
mov ecx, eax
call fcn.00594240
push eax
lea ecx, [ebp - 0xd4]
call fcn.005dc1c0
lea ecx, [esi + 0x14f0]
call fcn.005b6220
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0x94]
call fcn.0058e5e0
sub esp, 0xc
lea ecx, [ebp - 0x94]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62781c
call fcn.005dc190
push eax
lea ecx, [ebp - 0xd4]
call fcn.005da510
lea ecx, [ebp - 0xd4]
call fcn.005dc190
push eax
push 0xffffffffffffffff
lea ecx, [esi + 0x14f0]
call fcn.005b66e0
push 3
mov ecx, esi
call fcn.0043d8e0
push 0
push 0
mov ecx, esi
call fcn.0043d720
test eax, eax
je 0x445996
cmp eax, 1
jg 0x4459cb
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x478]
add dword [ebp - 0x47c], 0x64
inc eax
mov dword [ebp - 0x478], eax
mov ecx, dword [ecx]
cmp eax, ecx
jle 0x44585f
push 2
lea ecx, [esi + 0x14f0]
call fcn.005b6250
lea ecx, [ebp - 0xd4]
call fcn.005dc430
lea ecx, [ebp - 0xf8]
call fcn.005b8790
mov byte [ebp - 4], 0x14
push dword [ebp - 0x80]
call fcn.0041e1c3
add esp, 4
jmp 0x446ac6
cmp ecx, dword [ebp - 0x4dc]
jne 0x445a9c
xorps xmm0, xmm0
mov ecx, edi
push eax
movlpd qword [ebp - 0x80], xmm0
call fcn.005bb360
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], 0
mov byte [ebp - 4], 0x2c
mov ecx, dword [eax]
test ecx, ecx
jne 0x445a44
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ad5
mov esi, 1
cmp ecx, esi
jl 0x445a8a
nop dword [eax]
push 1
push dword [eax + esi*4]
mov ecx, edi
push dword [ebp - 0x470]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x94]
call fcn.005dc1c0
lea ecx, [ebp - 0x94]
call fcn.005dc190
xor edx, edx
mov ecx, eax
call fcn.00590c10
mov eax, dword [ebp - 0x80]
inc esi
cmp esi, dword [eax]
jle 0x445a50
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ac6
mov ecx, dword [esi + 0x14a8]
cmp ecx, dword [ebp - 0x500]
jne 0x445b44
xorps xmm0, xmm0
mov ecx, edi
push eax
movlpd qword [ebp - 0x80], xmm0
call fcn.005bb360
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], 0
mov byte [ebp - 4], 0x2d
mov ecx, dword [eax]
test ecx, ecx
jne 0x445ae4
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ad5
mov esi, 1
cmp ecx, esi
jl 0x445b32
nop dword [eax]
push 1
push dword [eax + esi*4]
mov ecx, edi
push dword [ebp - 0x470]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x94]
call fcn.005dc1c0
push 0
lea ecx, [ebp - 0x94]
call fcn.005dc190
push eax
push 2
push dword [ebp - 0x4ac]
call dword [sym.imp.SHELL32.dll_SHObjectProperties]
mov eax, dword [ebp - 0x80]
inc esi
cmp esi, dword [eax]
jle 0x445af0
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ac6
cmp ecx, dword [ebp - 0x4c4]
jne 0x445b60
push 1
push dword [ebp - 0x490]
mov ecx, esi
call fcn.00435a20
jmp 0x446ac6
cmp ecx, dword [ebp - 0x4c0]
jne 0x445b82
push 4
push 0x20
push 7
push 1
push dword [ebp - 0x490]
mov ecx, esi
call fcn.00435710
jmp 0x446ac6
cmp ecx, dword [ebp - 0x4bc]
jne 0x445ba4
push 4
push 0
push 7
push 1
push dword [ebp - 0x490]
mov ecx, esi
call fcn.00435710
jmp 0x446ac6
cmp ecx, dword [ebp - 0x4b8]
je 0x445bb8
cmp ecx, dword [ebp - 0x4fc]
jne 0x446ac6
push dword [ebp - 0x4a8]
lea eax, [ebp - 0x470]
mov ecx, esi
push eax
call fcn.00443fa0
push dword [ebp - 0x470]
mov ecx, edi
call fcn.005c5730
push dword [ebp - 0x4a4]
mov dword [ebp - 0x490], eax
push dword [ebp - 0x494]
push dword [ebp - 0x470]
jmp 0x446abf
xorps xmm0, xmm0
mov ecx, edi
push eax
movlpd qword [ebp - 0x88], xmm0
call fcn.005bb360
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], 0
mov byte [ebp - 4], 0x24
cmp dword [eax], 1
jge 0x445c34
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ad5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, 0x648020
mov byte [ebp - 0x489], 0
push 0
mov eax, 0x62439c
cmovne eax, ecx
lea ecx, [ebp - 0x94]
push eax
push str.Are_you_sure_you_want_to_delete_the_selected_service
call fcn.005dc200
mov eax, dword [esi + 0x14a8]
cmp eax, dword [ebp - 0x4c8]
je 0x445ca1
cmp eax, dword [ebp - 0x494]
jne 0x445c9a
push 4
push dword [ebp - 0x51c]
lea ecx, [ebp - 0x430]
call fcn.005bc500
test eax, eax
jne 0x445ca1
mov eax, 0x624a00
jmp 0x445cad
mov byte [ebp - 0x489], 1
mov eax, str._and_associated_files_
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push eax
lea ecx, [ebp - 0x94]
call fcn.005da780
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
push dword [ebp - 0x470]
movups xmmword [ebp - 0xf8], xmm0
push dword [ebp - 0x494]
movups xmmword [ebp - 0xe8], xmm0
push edi
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x94]
push 0x8c
push 0x8c
push 0
push 0
push 1
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0043e2e0
test eax, eax
jne 0x445d51
lea ecx, [ebp - 0xf8]
call fcn.005b8790
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x88]
push ecx
call fcn.0041e1c3
add esp, 4
jmp 0x446ad5
xorps xmm0, xmm0
mov dword [ebp - 0xb4], 0
movq qword [ebp - 0xbc], xmm0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0
sub esp, 8
mov byte [ebp - 4], 0x26
mov ecx, esi
push 0x50
push 0x1c2
push 0
push str.Deleting_selected_itmes__please_wait...
call fcn.0043da60
push 1
push str.Cancel
push 0
lea ecx, [esi + 0x14f0]
push 0xffffffffffffffb0
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x46c], 0
mov eax, dword [ecx]
mov dword [ebp - 0x47c], eax
test eax, eax
je 0x445f77
jmp 0x445de6
mov ecx, dword [ebp - 0x88]
lea edx, [ebp - 0xbc]
push edx
push dword [ecx + eax*4]
push dword [ebp - 0x470]
push edi
call fcn.0045afd0
cmp eax, 6
jbe 0x445f62
mov eax, dword [ebp - 0xbc]
mov ecx, 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
push 0
cmove eax, ecx
mov ecx, dword [ebp - 0xb4]
push str._service...
mov dword [ebp - 0x478], eax
mov dword [ebp - 0xbc], eax
call fcn.005dc190
push eax
push str.Deleting_the_
lea ecx, [ebp - 0x94]
call fcn.005dc200
lea ecx, [ebp - 0x94]
call fcn.005dc190
push eax
push 0xffffffffffffffff
lea ecx, [esi + 0x14f0]
call fcn.005b66e0
push 0
push 1
mov ecx, esi
call fcn.0043d720
test eax, eax
jne 0x445f77
cmp byte [ebp - 0x489], al
je 0x445ec7
mov eax, dword [ebp - 0x478]
mov ecx, 2
cmp eax, 1
push 0
cmovbe eax, ecx
mov ecx, dword [ebp - 0xb4]
push 0xc
mov dword [ebp - 0x478], eax
mov dword [ebp - 0xbc], eax
lea ecx, [ecx + 0xc]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0045a0e0
mov byte [ebp - 0x495], al
jmp 0x445ece
mov byte [ebp - 0x495], 1
mov eax, dword [ebp - 0x478]
mov ecx, 1
test eax, eax
cmove eax, ecx
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0xbc], eax
call fcn.005dc190
push eax
mov ecx, esi
call fcn.00437a80
movzx ecx, byte [ebp - 0x495]
xorps xmm0, xmm0
movzx eax, al
imul eax, ecx
lea ecx, [ebp - 0x128]
movq qword [ebp - 0x128], xmm0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x488], eax
call fcn.005dc5e0
cmp byte [ebp - 0x488], 0
je 0x445f57
mov eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x88]
inc dword [ebp - 0x46c]
push 0
push dword [ecx + eax*4]
mov ecx, edi
push dword [ebp - 0x470]
call fcn.005bb970
lea ecx, [ebp - 0x128]
call fcn.005dc430
mov eax, dword [ebp - 0x47c]
sub eax, 1
mov dword [ebp - 0x47c], eax
jne 0x445de0
push 2
lea ecx, [esi + 0x14f0]
call fcn.005b6250
cmp byte [ebp - 0x489], 0
je 0x445ff7
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x46c]
cmp ecx, dword [eax]
jne 0x445ff7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp ecx, 1
lea ecx, [ebp - 0x94]
push str._were_successfully_deleted.
jne 0x445fc8
push str.The_seletcted_service_and_the_associated_file
jmp 0x445fcd
push str.The_seletcted_services_and_associated_files
call fcn.005dc200
sub esp, 8
lea ecx, [ebp - 0x94]
push 0x8c
push 0x190
push 0
push edi
push 4
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0043e2e0
lea ecx, [ebp - 0xf8]
call fcn.005b8600
push dword [ebp - 0x4a4]
mov ecx, esi
push dword [ebp - 0x494]
push dword [ebp - 0x470]
call fcn.0046af40
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x446051
push fcn.005dc430
lea esi, [eax - 4]
mov byte [ebp - 4], 0x27
push dword [esi]
push 0xc
push eax
call fcn.0041e45b
mov eax, dword [esi]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
add esp, 8
lea ecx, [ebp - 0xf8]
call fcn.005b8790
mov byte [ebp - 4], 0x14
push dword [ebp - 0x88]
call fcn.0041e1c3
add esp, 4
jmp 0x446ac6
xorps xmm0, xmm0
mov ecx, edi
push eax
movlpd qword [ebp - 0x80], xmm0
call fcn.005bb360
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], 0
mov byte [ebp - 4], 0x1c
cmp dword [eax], 1
jge 0x4460a8
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ad5
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x154]
push dword [ebp - 0x470]
movups xmmword [ebp - 0x154], xmm0
push dword [ebp - 0x494]
movups xmmword [ebp - 0x144], xmm0
push edi
call fcn.005b8800
xorps xmm0, xmm0
mov dword [ebp - 0xa4], 0
movq qword [ebp - 0xac], xmm0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
push 0
push 0x627824
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xf0]
push str.Automatic_nAutomatic__delayed__nManual_nDisabled_nBoot_nSystem
movups xmmword [ebp - 0xf0], xmm0
movq qword [ebp - 0xe0], xmm0
call fcn.005d92a0
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0
lea ecx, [ebp - 0x104]
movq qword [ebp - 0x104], xmm0
call fcn.005dc5e0
mov byte [ebp - 4], 0x20
mov eax, 1
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x47c], eax
cmp dword [ecx], eax
jl 0x446469
lea edx, [ebp - 0xac]
push edx
push dword [ecx + eax*4]
push dword [ebp - 0x470]
push edi
call fcn.0045afd0
cmp eax, 6
jbe 0x446451
xor edx, edx
mov dword [ebp - 0x488], 0
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x478], edx
call fcn.005d9210
mov edi, dword [ebp - 0xac]
test eax, eax
je 0x446221
mov eax, dword [ebp - 0xa4]
add eax, 0x3c
mov dword [ebp - 0x46c], eax
nop word [eax + eax]
cmp edi, 5
lea ecx, [ebp - 0xf0]
mov eax, 6
push edx
cmovbe edi, eax
call fcn.005d9220
mov ecx, dword [ebp - 0x46c]
push eax
call fcn.005dc4c0
test al, al
jne 0x446215
mov edx, dword [ebp - 0x478]
lea ecx, [ebp - 0xf0]
inc edx
mov dword [ebp - 0x478], edx
call fcn.005d9210
cmp edx, eax
jb 0x4461d0
jmp 0x446221
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp - 0xa4]
test edi, edi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, 1
push 0
cmove edi, eax
push str._service.
mov dword [ebp - 0xac], edi
call fcn.005dc190
push eax
push str.Please_select_the_new_start_type_for_the
lea ecx, [ebp - 0x94]
call fcn.005dc200
push 0x96
push 0x190
push dword [ebp - 0x484]
lea ecx, [ebp - 0x94]
call fcn.005dc190
push eax
push dword [ebp - 0x488]
mov ecx, esi
push str.Automatic_nAutomatic__delayed__nManual_nDisabled_nBoot_nSystem
call fcn.0043d3f0
mov edx, eax
test edx, edx
js 0x44644b
lea ecx, [ebp - 0xf0]
call fcn.005d9210
cmp edx, eax
jge 0x44644b
xor ecx, ecx
mov eax, 2
mov dword [ebp - 0x46c], eax
cmp edx, 1
jne 0x4462c5
mov ecx, edx
jmp 0x446304
cmp edx, eax
jne 0x4462d5
mov dword [ebp - 0x46c], 3
jmp 0x446304
cmp edx, 3
jne 0x4462e6
mov dword [ebp - 0x46c], 4
jmp 0x446304
cmp edx, 4
jne 0x4462f3
mov dword [ebp - 0x46c], ecx
jmp 0x446304
cmp edx, 5
mov edx, 1
cmove eax, edx
mov dword [ebp - 0x46c], eax
test edi, edi
mov eax, 1
push ecx
mov ecx, dword [ebp - 0xa4]
cmove edi, eax
mov dword [ebp - 0xac], edi
call fcn.005dc190
movsd xmm3, qword [esi + 8]
mov ecx, eax
mov edx, dword [ebp - 0x46c]
call fcn.0058f7a0
test al, al
mov eax, 1
je 0x4463df
test edi, edi
cmove edi, eax
mov eax, 6
cmp edi, 5
cmovbe edi, eax
mov eax, dword [ebp - 0xa4]
mov ecx, eax
mov dword [ebp - 0xac], edi
lea esi, [eax + 0x3c]
call fcn.005dc190
mov ecx, dword [ebp - 0x49c]
movsd xmm1, qword [ecx + 8]
mov ecx, eax
call fcn.0058f8c0
push eax
mov ecx, esi
call fcn.005dc1c0
cmp edi, 5
mov eax, 6
push 5
cmovbe edi, eax
mov ecx, esi
mov dword [ebp - 0xac], edi
call fcn.005dc190
mov ecx, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x47c]
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x484]
push dword [ebp - 0x470]
call fcn.005ba4f0
mov ecx, dword [ebp - 0xa4]
test edi, edi
mov eax, 1
cmove edi, eax
mov dword [ebp - 0xac], edi
call fcn.005dc190
mov esi, dword [ebp - 0x49c]
mov ecx, str._service_was_successfully_configured.
jmp 0x4463fa
mov ecx, dword [ebp - 0xa4]
test edi, edi
cmove edi, eax
mov dword [ebp - 0xac], edi
call fcn.005dc190
mov ecx, str._service_could_not_be_configured.
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push eax
push str.The
lea ecx, [ebp - 0x104]
call fcn.005dc200
mov edi, dword [ebp - 0x484]
lea ecx, [ebp - 0x104]
sub esp, 8
push 0x8c
push 0x190
push 0
push edi
push 4
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0043e2e0
jmp 0x446451
mov edi, dword [ebp - 0x484]
mov eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x47c], eax
cmp eax, dword [ecx]
jle 0x446170
lea ecx, [ebp - 0x104]
call fcn.005dc430
lea ecx, [ebp - 0xf0]
call fcn.005d9280
mov eax, dword [ebp - 0xa4]
test eax, eax
je 0x4464b5
push fcn.005dc430
lea esi, [eax - 4]
mov byte [ebp - 4], 0x21
push dword [esi]
push 0xc
push eax
call fcn.0041e45b
mov eax, dword [esi]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
add esp, 8
lea ecx, [ebp - 0x154]
call fcn.005b8790
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.0041e1c3
add esp, 4
jmp 0x446ac6
xorps xmm0, xmm0
mov ecx, edi
push eax
movlpd qword [ebp - 0x80], xmm0
call fcn.005bb360
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], 0
mov byte [ebp - 4], 0x16
cmp dword [eax], 1
jge 0x44650a
push eax
mov byte [ebp - 4], 0x14
call fcn.0041e1c3
add esp, 4
jmp 0x446ad5
mov eax, dword [esi + 0x14a8]
mov dword [ebp - 0x46c], str.stopped
mov dword [ebp - 0x84], str.Stopping
mov dword [ebp - 0x47c], 1
cmp eax, dword [ebp - 0x4f8]
je 0x44659e
cmp eax, dword [ebp - 0x4f4]
je 0x44659e
cmp eax, dword [ebp - 0x4f0]
je 0x44657e
cmp eax, dword [ebp - 0x4ec]
je 0x44657e
cmp eax, dword [ebp - 0x4cc]
je 0x44655e
cmp eax, dword [ebp - 0x4e8]
jne 0x4465bc
mov dword [ebp - 0x46c], str.resumed
mov dword [ebp - 0x84], str.Resuming
mov dword [ebp - 0x47c], 3
jmp 0x4465bc
mov dword [ebp - 0x46c], str.paused
mov dword [ebp - 0x84], str.Pausing
mov dword [ebp - 0x47c], 2
jmp 0x4465bc
mov dword [ebp - 0x46c], str.started
mov dword [ebp - 0x84], str.Starting
mov dword [ebp - 0x47c], 0x80
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
push dword [ebp - 0x470]
movups xmmword [ebp - 0xf8], xmm0
push dword [ebp - 0x494]
movups xmmword [ebp - 0xe8], xmm0
push edi
call fcn.005b8800
push 1
push str.Cancel
push 0
push 0xffffffffffffffb0
sub esp, 8
mov byte [ebp - 4], 0x17
mov ecx, esi
push 0x50
push 0x1c2
push 0
push 0x62439c
call fcn.0043da60
mov ecx, eax
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 0
lea ecx, [ebp - 0xc8]
movq qword [ebp - 0xc8], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x98], 0
xor edi, edi
movq qword [ebp - 0xa0], xmm0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
mov byte [ebp - 4], 0x19
mov eax, 1
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x488], eax
cmp dword [ecx], eax
jl 0x446876
lea edx, [ebp - 0xa0]
push edx
push dword [ecx + eax*4]
push dword [ebp - 0x470]
push dword [ebp - 0x484]
call fcn.0045afd0
mov edi, dword [ebp - 0xa0]
cmp eax, 6
jbe 0x44685e
mov ecx, dword [ebp - 0x98]
test edi, edi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, 1
push 0
cmove edi, eax
push str.__service...
mov dword [ebp - 0xa0], edi
call fcn.005dc190
push eax
push str._the__
push dword [ebp - 0x84]
lea ecx, [ebp - 0xc8]
call fcn.005dc200
lea ecx, [ebp - 0xc8]
call fcn.005dc190
push eax
push 0xffffffffffffffff
lea ecx, [esi + 0x14f0]
call fcn.005b66e0
push 0
push 1
mov ecx, esi
call fcn.0043d720
test eax, eax
jne 0x446876
push ecx
push dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x98]
test edi, edi
mov eax, 1
cmove edi, eax
mov dword [ebp - 0xa0], edi
call fcn.005dc190
push eax
mov ecx, esi
call fcn.00437d40
cmp eax, 1
jne 0x446767
inc dword [ebp - 0x478]
jmp 0x4467d7
test edi, edi
mov ecx, dword [ebp - 0x98]
mov eax, 1
cmove edi, eax
sub esp, 8
mov dword [ebp - 0xa0], edi
push 0x8c
push 0x190
push 0
push dword [ebp - 0x484]
push 4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._or_may_need_more_time_to_complete_the_action.
push dword [ebp - 0x46c]
push str._service_could_not_be
call fcn.005dc190
push eax
push str.The
lea ecx, [ebp - 0x94]
call fcn.005dc200
mov ecx, eax
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0043e2e0
cmp edi, 3
mov eax, 4
mov ecx, 1
cmovbe edi, eax
mov eax, dword [ebp - 0x98]
test edi, edi
cmove edi, ecx
mov ecx, eax
lea esi, [eax + 0x24]
mov dword [ebp - 0xa0], edi
call fcn.005dc190
mov ecx, eax
call fcn.0058fba0
push eax
mov ecx, esi
call fcn.005dc1c0
cmp edi, 3
mov eax, 4
push 3
cmovbe edi, eax
mov ecx, esi
mov dword [ebp - 0xa0], edi
call fcn.005dc190
mov ecx, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x488]
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x484]
push dword [ebp - 0x470]
call fcn.005ba4f0
mov esi, dword [ebp - 0x49c]
mov ecx, esi
push 0
push 1
call fcn.0043d720
test eax, eax
jne 0x446876
mov eax, dword [ebp - 0x488]
mov ecx, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x488], eax
cmp eax, dword [ecx]
jle 0x446693
push 2
lea ecx, [esi + 0x14f0]
call fcn.005b6250
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
cmp eax, 1
jne 0x4468dc
cmp dword [ebp - 0x478], 0
je 0x4469f3
mov ecx, dword [ebp - 0x98]
test edi, edi
cmove edi, eax
mov dword [ebp - 0xa0], edi
mov edi, str.The
call fcn.005dc190
mov ecx, eax
mov dword [ebp - 0x478], 0x624288
mov eax, dword [ebp - 0x46c]
mov edx, str._service_was_successfully
mov dword [ebp - 0x47c], eax
xor eax, eax
mov dword [ebp - 0x488], eax
jmp 0x44693d
jle 0x4469f3
push eax
lea ecx, [ebp - 0xc8]
call fcn.005db320
lea ecx, [ebp - 0xc8]
call fcn.005dc190
push dword [ebp - 0x478]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x47c], eax
mov edi, str.Operation_compete.
call fcn.005db320
mov ecx, eax
call fcn.005dc190
mov ecx, eax
mov dword [ebp - 0x478], str._services
mov eax, dword [ebp - 0x46c]
mov edx, str._of
mov dword [ebp - 0x488], 0x624288
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x488]
push eax
push dword [ebp - 0x478]
push dword [ebp - 0x47c]
push edx
push ecx
push edi
lea ecx, [ebp - 0xc8]
call fcn.005dc200
mov edi, dword [ebp - 0x484]
lea ecx, [ebp - 0xc8]
sub esp, 8
push 0x8c
push 0x190
push 0
push edi
push 4
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0043e2e0
mov eax, dword [ebp - 0x98]
test eax, eax
je 0x4469c9
push fcn.005dc430
lea esi, [eax - 4]
mov byte [ebp - 4], 0x1b
push dword [esi]
push 0xc
push eax
call fcn.0041e45b
mov eax, dword [esi]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
add esp, 8
lea ecx, [ebp - 0xc8]
call fcn.005dc430
lea ecx, [ebp - 0xf8]
call fcn.005b8790
mov byte [ebp - 4], 0x14
push dword [ebp - 0x80]
call fcn.0041e1c3
add esp, 4
jmp 0x446ac6
mov eax, dword [ebp - 0x98]
test eax, eax
je 0x446a2f
push fcn.005dc430
lea esi, [eax - 4]
mov byte [ebp - 4], 0x1a
push dword [esi]
push 0xc
push eax
call fcn.0041e45b
mov eax, dword [esi]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
mov esi, dword [ebp - 0x49c]
add esp, 8
lea ecx, [ebp - 0xc8]
call fcn.005dc430
lea ecx, [ebp - 0xf8]
call fcn.005b8790
mov byte [ebp - 4], 0x14
push dword [ebp - 0x80]
call fcn.0041e1c3
mov edi, dword [ebp - 0x484]
add esp, 4
jmp 0x446ad5
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x154]
push eax
push edx
push edi
movups xmmword [ebp - 0x154], xmm0
movups xmmword [ebp - 0x144], xmm0
call fcn.005b8800
mov byte [ebp - 4], 0x15
mov ecx, esi
push dword [ebp - 0x470]
call fcn.00442090
push dword [ebp - 0x4ac]
mov byte [ebp - 0x471], al
call dword [sym.imp.USER32.dll_BringWindowToTop]
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x14
call fcn.005b8790
jmp 0x446ac6
push dword [ebp - 0x4a4]
push edx
push eax
mov ecx, esi
call fcn.0046af40
cmp byte [ebp - 0x471], 0
mov esi, dword [ebp - 0x49c]
jne 0x446aef
push 0
mov ecx, esi
call fcn.004771c0
test eax, eax
jne 0x4450c0
jmp 0x446aef
mov byte [ebp - 0x471], 1
push dword [ebp - 0x490]
push 0x6e7ba8
call fcn.0045b060
push 0
push 0x6e7ba8
mov ecx, esi
call fcn.0045f380
cmp byte [ebp - 0x471], 0
mov ecx, esi
sete al
movzx eax, al
push eax
call fcn.0045f260
lea ecx, [ebp - 0xd8]
call fcn.005d69e0
lea ecx, [ebp - 0xb0]
call fcn.005d69e0
lea ecx, [ebp - 0x110]
call fcn.005dc430
lea ecx, [ebp - 0x11c]
call fcn.005dc430
lea ecx, [ebp - 0x134]
call fcn.005dc430
lea ecx, [ebp - 0x94]
call fcn.005dc430
lea ecx, [ebp - 0x434]
call fcn.005c6500
lea ecx, [ebp - 0x464]
call fcn.005c6500
lea ecx, [ebp - 0x460]
call fcn.005c6500
lea ecx, [ebp - 0x468]
call fcn.005c6500
lea ecx, [ebp - 0x45c]
call fcn.005c6500
lea ecx, [ebp - 0x458]
call fcn.005c6500
lea ecx, [ebp - 0x454]
call fcn.005c6500
lea ecx, [ebp - 0x44c]
call fcn.005c6500
lea ecx, [ebp - 0x450]
call fcn.005c6500
lea ecx, [ebp - 0x448]
call fcn.005c6500
lea ecx, [ebp - 0x438]
call fcn.005c6500
lea ecx, [ebp - 0x444]
call fcn.005c6500
lea ecx, [ebp - 0x440]
call fcn.005c6500
lea ecx, [ebp - 0x43c]
call fcn.005c6500
lea ecx, [ebp - 0x430]
call fcn.005c1c60
mov al, byte [ebp - 0x471]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret