Function at 0x514ec0
Capabilities:
Contain obfuscated stackstrings
Delete service
Stop service

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1488
call fcn.0053e900
mov eax, dword [0x5c0290]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x1410], ecx
mov dword [ebp - 0x1314], 0x39734445
mov dword [ebp - 0x1310], 0x31345450
mov dword [ebp - 0x130c], 0x67387a4b
mov dword [ebp - 0x1308], 0x6d744763
mov dword [ebp - 0x1304], 0x39457943
mov dword [ebp - 0x1300], 0x676b4449
mov dword [ebp - 0x12fc], 0x5a55574a
mov dword [ebp - 0x12f8], 0x34387a4e
mov dword [ebp - 0x12f4], 0x7a30794f
mov dword [ebp - 0x12f0], 0x5945694c
mov dword [ebp - 0x12ec], 0x74634466
mov dword [ebp - 0x12e8], 0x44596961
mov dword [ebp - 0x12e4], 0x6c45774f
mov dword [ebp - 0x12e0], 0x2f4d4149
mov dword [ebp - 0x12dc], 0x39594165
mov dword [ebp - 0x12d8], 0x6b34794e
mov dword [ebp - 0x12d4], 0x756f524a
mov dword [ebp - 0x12d0], 0x47414450
mov dword [ebp - 0x12cc], 0x674e4150
mov dword [ebp - 0x12c8], 0x4d637843
mov dword [ebp - 0x12c4], 0x5a675850
mov dword [ebp - 0x12c0], 0x65735242
mov dword [ebp - 0x12bc], 0x35516a45
mov dword [ebp - 0x12b8], 0x56346742
mov dword [ebp - 0x12b4], 0x395a4449
mov dword [ebp - 0x12b0], 0x7a6f4442
mov dword [ebp - 0x12ac], 0x3930544e
mov dword [ebp - 0x12a8], 0x50516a45
mov dword [ebp - 0x12a4], 0x5a41324a
mov dword [ebp - 0x12a0], 0x30316a47
mov dword [ebp - 0x129c], 0x63774242
mov dword [ebp - 0x1298], 0x52556859
mov dword [ebp - 0x1294], 0x306f7745
mov dword [ebp - 0x1290], 0x45494141
mov dword [ebp - 0x128c], 0x6434694f
mov dword [ebp - 0x1288], 0x52775143
mov dword [ebp - 0x1284], 0x5055584f
mov dword [ebp - 0x1280], 0x42344447
mov dword [ebp - 0x127c], 0x52777a4a
mov dword [ebp - 0x1278], 0x7973684b
mov dword [ebp - 0x1274], 0x73347846
mov dword [ebp - 0x1270], 0x766f6a49
mov dword [ebp - 0x126c], 0x5959794f
mov dword [ebp - 0x1268], 0x53597847
mov dword [ebp - 0x1264], 0x4c59784f
mov dword [ebp - 0x1260], 0x4b6f6e4a
mov dword [ebp - 0x125c], 0x506f6963
mov dword [ebp - 0x1258], 0x50456746
mov dword [ebp - 0x1254], 0x6d707865
mov dword [ebp - 0x1250], 0x784a534d
mov dword [ebp - 0x124c], 0x46414750
mov dword [ebp - 0x1248], 0x73415149
mov dword [ebp - 0x1244], 0x46416747
mov dword [ebp - 0x1240], 0x314d774a
mov dword [ebp - 0x123c], 0x395a7a66
mov dword [ebp - 0x1238], 0x57494242
mov dword [ebp - 0x1234], 0x42494865
mov dword [ebp - 0x1230], 0x47553243
mov dword [ebp - 0x122c], 0x63344765
mov dword [ebp - 0x1228], 0x45454344
mov dword [ebp - 0x1224], 0x66516a45
mov dword [ebp - 0x1220], 0x5773694f
mov dword [ebp - 0x121c], 0x34356845
mov dword [ebp - 0x1218], 0x52386a42
mov dword [ebp - 0x1214], 0x4141774c
mov word [ebp - 0x1210], 0x4b41
mov byte [ebp - 0x120e], 0x51
mov dword [ebp - 0x11fc], 0x6e415441
mov dword [ebp - 0x11f8], 0x756b444f
mov dword [ebp - 0x11f4], 0x34306e4f
mov dword [ebp - 0x11f0], 0x7749444b
mov dword [ebp - 0x11ec], 0x43774347
mov dword [ebp - 0x11e8], 0x63386943
mov dword [ebp - 0x11e4], 0x67496743
mov dword [ebp - 0x11e0], 0x47415744
mov dword [ebp - 0x11dc], 0x6667784a
mov dword [ebp - 0x11d8], 0x304a524a
mov dword [ebp - 0x11d4], 0x614d5746
mov dword [ebp - 0x11d0], 0x3273524e
mov dword [ebp - 0x11cc], 0x35526741
mov dword [ebp - 0x11c8], 0x51455445
mov dword [ebp - 0x11c4], 0x2b5a7a44
mov dword [ebp - 0x11c0], 0x6b386e4a
mov dword [ebp - 0x11bc], 0x4441514b
mov dword [ebp - 0x11b8], 0x7363424d
mov dword [ebp - 0x11b4], 0x57675142
mov dword [ebp - 0x11b0], 0x51675842
mov dword [ebp - 0x11ac], 0x314d6943
mov dword [ebp - 0x11a8], 0x33634259
mov dword [ebp - 0x11a4], 0x45776841
mov dword [ebp - 0x11a0], 0x48677741
mov dword [ebp - 0x119c], 0x78345365
mov dword [ebp - 0x1198], 0x334e514e
mov dword [ebp - 0x1194], 0x67415865
mov dword [ebp - 0x1190], 0x6c4e7a43
mov dword [ebp - 0x118c], 0x78416d50
mov dword [ebp - 0x1188], 0x796f6743
mov dword [ebp - 0x1184], 0x6d6c6864
mov dword [ebp - 0x1180], 0x77735241
mov dword [ebp - 0x117c], 0x4f417747
mov dword [ebp - 0x1178], 0x416b794e
mov dword [ebp - 0x1174], 0x4930414f
mov dword [ebp - 0x1170], 0x30686a41
mov dword [ebp - 0x116c], 0x4c41584a
mov dword [ebp - 0x1168], 0x6e674246
mov dword [ebp - 0x1164], 0x39675266
mov dword [ebp - 0x1160], 0x34344264
mov dword [ebp - 0x115c], 0x51455141
mov dword [ebp - 0x1158], 0x6d594350
mov dword [ebp - 0x1154], 0x39746d48
mov dword [ebp - 0x1150], 0x2b6c6745
mov dword [ebp - 0x114c], 0x77687966
mov dword [ebp - 0x1148], 0x56454444
mov dword [ebp - 0x1144], 0x34787a63
mov dword [ebp - 0x1140], 0x37306848
mov dword [ebp - 0x113c], 0x66387950
mov dword [ebp - 0x1138], 0x506f4863
mov dword [ebp - 0x1134], 0x35516d41
mov dword [ebp - 0x1130], 0x31395341
mov dword [ebp - 0x112c], 0x37523242
mov dword [ebp - 0x1128], 0x7655694a
mov dword [ebp - 0x1124], 0x4e636964
mov dword [ebp - 0x1120], 0x39734849
mov dword [ebp - 0x111c], 0x31465144
mov dword [ebp - 0x1118], 0x63387962
mov dword [ebp - 0x1114], 0x5851424a
mov dword [ebp - 0x1110], 0x58517964
mov dword [ebp - 0x110c], 0x57597863
mov dword [ebp - 0x1108], 0x32565243
mov dword [ebp - 0x1104], 0x56414365
mov dword [ebp - 0x1100], 0x45495141
mov dword [ebp - 0x10fc], 0x48384841
mov dword [ebp - 0x10f8], 0x3856434a
mov dword [ebp - 0x10f4], 0x4c734143
mov dword [ebp - 0x10f0], 0x6d4a4145
mov dword [ebp - 0x10ec], 0x6b414765
mov dword [ebp - 0x10e8], 0x5149514a
mov dword [ebp - 0x10e4], 0x66415749
mov dword [ebp - 0x10e0], 0x3355424e
mov dword [ebp - 0x10dc], 0x5963684d
mov dword [ebp - 0x10d8], 0x3063425a
mov dword [ebp - 0x10d4], 0x71304246
mov dword [ebp - 0x10d0], 0x76414143
mov dword [ebp - 0x10cc], 0x72777a4f
mov dword [ebp - 0x10c8], 0x374d794f
mov dword [ebp - 0x10c4], 0x69746748
mov dword [ebp - 0x10c0], 0x56514264
mov dword [ebp - 0x10bc], 0x3430414e
mov dword [ebp - 0x10b8], 0x50457743
mov dword [ebp - 0x10b4], 0x564d474b
mov dword [ebp - 0x10b0], 0x5a59334d
mov dword [ebp - 0x10ac], 0x4d597841
mov dword [ebp - 0x10a8], 0x63675846
mov dword [ebp - 0x10a4], 0x5749524d
mov dword [ebp - 0x10a0], 0x6d45574c
mov dword [ebp - 0x109c], 0x65456d45
mov dword [ebp - 0x1098], 0x6e4d694e
mov dword [ebp - 0x1094], 0x74784345
sub esp, 0xc
mov dword [ebp - 0x1090], 0x5577534d
mov ecx, esp
mov dword [ebp - 0x108c], 0x71734750
lea eax, [ebp - 0x120d]
mov dword [ebp - 0x1088], 0x74777745
mov dword [ebp - 0x1084], 0x78736966
push dword [ebp - 0x140c]
mov dword [ebp - 0x1080], 0x69774149
push eax
lea eax, [ebp - 0x1314]
mov dword [ebp - 0x107c], 0x34467a4a
mov dword [ebp - 0x1078], 0x5438424d
mov dword [ebp - 0x1074], 0x51306941
mov dword [ebp - 0x1070], 0x3463544c
mov dword [ebp - 0x106c], 0x59597a46
mov dword [ebp - 0x1068], 0x77515846
mov dword [ebp - 0x1064], 0x74594244
mov dword [ebp - 0x1060], 0x4b384842
mov dword [ebp - 0x105c], 0x57634242
mov dword [ebp - 0x1058], 0x32777a42
mov dword [ebp - 0x1054], 0x676b5342
mov dword [ebp - 0x1050], 0x6956794b
mov dword [ebp - 0x104c], 0x54674442
mov dword [ebp - 0x1048], 0x4a677a64
mov dword [ebp - 0x1044], 0x46457944
mov dword [ebp - 0x1040], 0x566f684d
mov dword [ebp - 0x103c], 0x42594741
mov dword [ebp - 0x1038], 0x79384350
mov dword [ebp - 0x1034], 0x6c494747
mov dword [ebp - 0x1030], 0x41415144
mov word [ebp - 0x102c], 0x5541
mov byte [ebp - 0x102a], 0x38
push eax
push 0
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x141c]
push eax
call fcn.0047fb90
add esp, 0x10
mov esi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1404], esi
sub eax, esi
je 0x519d98
sub esp, 0xc
lea eax, [ebp - 0x1029]
mov ecx, esp
push dword [ebp - 0x140c]
mov dword [ecx], 0
push eax
lea eax, [ebp - 0x11fc]
mov dword [ecx + 4], 0
push eax
push 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x1484]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
je 0x519da2
xor eax, eax
xor edi, edi
mov dword [ebp - 0x1208], eax
xor ecx, ecx
mov dword [ebp - 0x1204], eax
xor edx, edx
mov dword [ebp - 0x1200], eax
xor ebx, ebx
lea eax, [esi + 1]
mov dword [ebp - 0x1208], edi
mov dword [ebp - 0x1204], ecx
mov dword [ebp - 0x1200], edx
mov dword [ebp - 0x1408], ebx
mov dword [ebp - 0x1424], eax
mov al, byte [esi]
inc esi
test al, al
jne 0x5156f3
sub esi, dword [ebp - 0x1424]
je 0x515842
jmp 0x515710
mov esi, dword [ebp - 0x1404]
lea eax, [ebp - 0x13fd]
mov bl, byte [ebx + esi]
xor bl, 0x8b
mov byte [ebp - 0x13fd], bl
cmp eax, ecx
jae 0x51579b
cmp edi, eax
ja 0x51579b
mov ebx, eax
sub ebx, edi
cmp ecx, edx
jne 0x515790
mov eax, edx
sub eax, ecx
cmp eax, 1
jae 0x515790
mov eax, edi
sub eax, ecx
dec eax
cmp eax, 1
jb 0x519dac
sub edx, edi
or eax, 0xffffffff
mov esi, edx
sub ecx, edi
shr esi, 1
inc ecx
sub eax, esi
cmp eax, edx
jae 0x515765
xor edx, edx
jmp 0x515767
add edx, esi
cmp edx, ecx
cmovb edx, ecx
lea ecx, [ebp - 0x1208]
push edx
call fcn.0046ae20
mov edx, dword [ebp - 0x1200]
mov ecx, dword [ebp - 0x1204]
mov edi, dword [ebp - 0x1208]
mov esi, dword [ebp - 0x1404]
test ecx, ecx
je 0x5157fd
mov al, byte [edi + ebx]
mov byte [ecx], al
jmp 0x5157fd
cmp ecx, edx
jne 0x5157f7
mov eax, edx
sub eax, ecx
cmp eax, 1
jae 0x5157f7
mov eax, edi
sub eax, ecx
dec eax
cmp eax, 1
jb 0x519dac
sub edx, edi
or eax, 0xffffffff
mov esi, edx
sub ecx, edi
shr esi, 1
inc ecx
sub eax, esi
cmp eax, edx
jae 0x5157cc
xor edx, edx
jmp 0x5157ce
add edx, esi
cmp edx, ecx
cmovb edx, ecx
lea ecx, [ebp - 0x1208]
push edx
call fcn.0046ae20
mov edx, dword [ebp - 0x1200]
mov ecx, dword [ebp - 0x1204]
mov edi, dword [ebp - 0x1208]
mov esi, dword [ebp - 0x1404]
test ecx, ecx
je 0x5157fd
mov byte [ecx], bl
mov ebx, dword [ebp - 0x1408]
lea eax, [esi + 1]
inc ecx
mov dword [ebp - 0x1424], eax
inc ebx
mov dword [ebp - 0x1204], ecx
mov dword [ebp - 0x1408], ebx
lea ebx, [ebx]
mov al, byte [esi]
inc esi
test al, al
jne 0x515820
sub esi, dword [ebp - 0x1424]
cmp ebx, esi
jb 0x515710
test edi, edi
je 0x515842
push edi
call fcn.0053c1e0
add esp, 4
mov eax, dword [ebp - 0x1484]
test eax, eax
je 0x515873
push eax
call fcn.0053c1e0
add esp, 4
mov dword [ebp - 0x1484], 0
mov dword [ebp - 0x1480], 0
mov dword [ebp - 0x147c], 0
mov eax, dword [ebp - 0x141c]
test eax, eax
je 0x515886
push eax
call fcn.0053c1e0
add esp, 4
mov edi, dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
xor ebx, ebx
push 0xf003f
push ebx
push ebx
call edi
mov esi, eax
test esi, esi
je 0x519d82
mov eax, dword [ebp - 0x1410]
push 1
add eax, 0x2c
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov ecx, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test eax, eax
je 0x5158cc
push eax
mov ebx, 1
call ecx
mov ecx, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push esi
call ecx
test ebx, ebx
je 0x519d82
push 0xf003f
push 0
push 0
call edi
mov edi, eax
mov dword [ebp - 0x1424], edi
test edi, edi
jne 0x515ba2
push 0x400
lea eax, [ebp - 0x804]
push eax
push 0xd80a
call fcn.004be950
add esp, 0xc
test eax, eax
jne 0x515b74
push eax
sub esp, 0xc
mov dword [ebp - 0x12d4], 0x686f6a42
mov ecx, esp
mov dword [ebp - 0x12d0], 0x686c7950
mov dword [ebp - 0x12cc], 0x3477444a
mov dword [ebp - 0x12c8], 0x326b4363
push dword [ebp - 0x140c]
mov dword [ebp - 0x12c4], 0x7046794b
mov dword [ebp - 0x12c0], 0x33346946
mov dword [ebp - 0x12bc], 0x7677794e
mov dword [ebp - 0x12b8], 0x62594850
mov dword [ebp - 0x12b4], 0x7a63544b
mov dword [ebp - 0x12b0], 0x7767534a
mov dword [ebp - 0x12ac], 0x31675263
mov dword [ebp - 0x12a8], 0x31564146
mov dword [ebp - 0x12a4], 0x2f4a684c
mov dword [ebp - 0x12a0], 0x74496a42
mov dword [ebp - 0x129c], 0x68634849
mov dword [ebp - 0x1298], 0x444d3345
mov dword [ebp - 0x1294], 0x69514363
mov dword [ebp - 0x1290], 0x59774445
mov dword [ebp - 0x128c], 0x5177774b
mov dword [ebp - 0x1288], 0x73345348
mov dword [ebp - 0x1284], 0x4e38444d
mov dword [ebp - 0x1280], 0x796c5143
mov dword [ebp - 0x127c], 0x38465750
mov dword [ebp - 0x1278], 0x76386943
mov dword [ebp - 0x1274], 0x5049534b
mov dword [ebp - 0x1270], 0x58497a42
mov dword [ebp - 0x126c], 0x3267534c
mov dword [ebp - 0x1268], 0x6874424e
mov dword [ebp - 0x1264], 0x45495244
mov dword [ebp - 0x1260], 0x6f554441
mov dword [ebp - 0x125c], 0x4359694a
mov dword [ebp - 0x1258], 0x3349675a
mov dword [ebp - 0x1254], 0x36737a50
mov dword [ebp - 0x1250], 0x57676750
mov dword [ebp - 0x124c], 0x7745674b
mov dword [ebp - 0x1248], 0x71454150
mov dword [ebp - 0x1244], 0x6e415365
mov dword [ebp - 0x1240], 0x6159514e
mov dword [ebp - 0x123c], 0x56775241
mov dword [ebp - 0x1238], 0x7573784f
mov dword [ebp - 0x1234], 0x34594363
mov dword [ebp - 0x1230], 0x35516950
mov dword [ebp - 0x122c], 0x446b4465
mov dword [ebp - 0x1228], 0x4845584b
mov dword [ebp - 0x1224], 0x39677759
mov dword [ebp - 0x1220], 0x6f68514b
mov dword [ebp - 0x121c], 0x56674744
mov dword [ebp - 0x1218], 0x47345349
mov dword [ebp - 0x1214], 0x2b514845
mov dword [ebp - 0x1210], 0x41414141
mov word [ebp - 0x120c], 0x5164
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea eax, [ebp - 0x120a]
push eax
lea eax, [ebp - 0x12d4]
push eax
push edi
call fcn.004660a0
lea eax, [ebp - 0x141c]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, eax
call fcn.0046bf80
push eax
lea eax, [ebp - 0x804]
push 0x400
push eax
call fcn.0053ee58
push eax
call fcn.00468850
add esp, 0x10
lea ecx, [ebp - 0x141c]
call fcn.00467b80
mov eax, dword [ebp - 0x1410]
push 0
add eax, 0x2c
push eax
lea eax, [ebp - 0x804]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 0x1410]
push 0xf01ff
add esi, 0x2c
push esi
push edi
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov ebx, eax
mov dword [ebp - 0x1408], ebx
test ebx, ebx
jne 0x51609d
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call edi
push 0x400
lea eax, [ebp - 0x804]
push eax
push 0xd80c
call fcn.004be950
add esp, 0xc
test eax, eax
jne 0x516078
mov dword [ebp - 0x11d0], 0x686f6a42
mov dword [ebp - 0x11cc], 0x686c7950
mov dword [ebp - 0x11c8], 0x3477444a
mov dword [ebp - 0x11c4], 0x326b4363
mov dword [ebp - 0x11c0], 0x7046794b
mov dword [ebp - 0x11bc], 0x3334694e
mov dword [ebp - 0x11b8], 0x7677794e
mov dword [ebp - 0x11b4], 0x50344150
mov dword [ebp - 0x11b0], 0x69683242
mov dword [ebp - 0x11ac], 0x4f6f7946
mov dword [ebp - 0x11a8], 0x446f5166
mov dword [ebp - 0x11a4], 0x32786749
mov dword [ebp - 0x11a0], 0x356b414f
mov dword [ebp - 0x119c], 0x6b49774d
mov dword [ebp - 0x1198], 0x4c34434c
mov dword [ebp - 0x1194], 0x38305443
mov dword [ebp - 0x1190], 0x32456743
mov dword [ebp - 0x118c], 0x7377694d
mov dword [ebp - 0x1188], 0x694d544a
mov dword [ebp - 0x1184], 0x30525342
mov dword [ebp - 0x1180], 0x6b645250
mov dword [ebp - 0x117c], 0x6f6b7948
mov dword [ebp - 0x1178], 0x6d6f7744
mov dword [ebp - 0x1174], 0x2f305366
mov dword [ebp - 0x1170], 0x376c6941
mov dword [ebp - 0x116c], 0x41493350
mov dword [ebp - 0x1168], 0x55493363
mov dword [ebp - 0x1164], 0x37356a42
mov dword [ebp - 0x1160], 0x6d316965
mov dword [ebp - 0x115c], 0x33784149
mov dword [ebp - 0x1158], 0x374d784e
mov dword [ebp - 0x1154], 0x77646950
mov dword [ebp - 0x1150], 0x35737a5a
mov dword [ebp - 0x114c], 0x49385147
mov dword [ebp - 0x1148], 0x51637a59
mov dword [ebp - 0x1144], 0x4477524c
mov dword [ebp - 0x1140], 0x68516e49
mov dword [ebp - 0x113c], 0x37704445
mov dword [ebp - 0x1138], 0x6e4e7946
mov dword [ebp - 0x1134], 0x47344864
mov dword [ebp - 0x1130], 0x7a636a63
mov dword [ebp - 0x112c], 0x546b4349
mov dword [ebp - 0x1128], 0x71734448
mov dword [ebp - 0x1124], 0x4f517a59
mov dword [ebp - 0x1120], 0x37595449
mov dword [ebp - 0x111c], 0x706f584c
mov dword [ebp - 0x1118], 0x72457845
mov dword [ebp - 0x1114], 0x39383250
mov dword [ebp - 0x1110], 0x6f636a44
mov dword [ebp - 0x110c], 0x736b6a47
mov dword [ebp - 0x1108], 0x6d494349
mov dword [ebp - 0x1104], 0x31526759
mov dword [ebp - 0x1100], 0x34706d49
mov dword [ebp - 0x10fc], 0x79636949
mov dword [ebp - 0x10f8], 0x4763534a
mov dword [ebp - 0x10f4], 0x58594766
mov dword [ebp - 0x10f0], 0x6d384465
mov dword [ebp - 0x10ec], 0x59554464
mov dword [ebp - 0x10e8], 0x2b674247
mov dword [ebp - 0x10e4], 0x70516742
mov dword [ebp - 0x10e0], 0x31416742
mov dword [ebp - 0x10dc], 0x4e553348
mov dword [ebp - 0x10d8], 0x74557948
mov dword [ebp - 0x10d4], 0x4c345842
mov dword [ebp - 0x10d0], 0x4e55514b
mov dword [ebp - 0x10cc], 0x7067444e
mov dword [ebp - 0x10c8], 0x63636e4d
mov dword [ebp - 0x10c4], 0x644d4348
mov dword [ebp - 0x10c0], 0x38597765
mov dword [ebp - 0x10bc], 0x30707746
mov dword [ebp - 0x10b8], 0x45454145
mov dword [ebp - 0x10b4], 0x77397850
mov dword [ebp - 0x10b0], 0x61416a4c
mov dword [ebp - 0x10ac], 0x416f5342
mov dword [ebp - 0x10a8], 0x365a534f
mov dword [ebp - 0x10a4], 0x326f434b
mov dword [ebp - 0x10a0], 0x4577684c
mov dword [ebp - 0x109c], 0x5938794d
mov dword [ebp - 0x1098], 0x6d68674c
mov dword [ebp - 0x1094], 0x6b77434d
mov dword [ebp - 0x1090], 0x4c6b6a41
push eax
sub esp, 0xc
mov dword [ebp - 0x108c], 0x31317a42
mov ecx, esp
mov dword [ebp - 0x1088], 0x7641784f
lea eax, [ebp - 0x1025]
mov dword [ebp - 0x1084], 0x6e51524a
lea edx, [ebp - 0x1029]
mov dword [ebp - 0x1080], 0x45385245
push eax
push edx
lea edi, [ebp - 0x11d0]
mov dword [ebp - 0x107c], 0x69454166
push edi
mov dword [ebp - 0x1078], 0x74306e64
mov dword [ebp - 0x1074], 0x33515344
mov dword [ebp - 0x1070], 0x725a7847
mov dword [ebp - 0x106c], 0x4759514c
mov dword [ebp - 0x1068], 0x6c637a50
mov dword [ebp - 0x1064], 0x52773347
mov dword [ebp - 0x1060], 0x646f534c
mov dword [ebp - 0x105c], 0x4f456847
mov dword [ebp - 0x1058], 0x35397a48
mov dword [ebp - 0x1054], 0x6b593241
mov dword [ebp - 0x1050], 0x384a534f
mov dword [ebp - 0x104c], 0x4f595341
mov dword [ebp - 0x1048], 0x59494241
mov dword [ebp - 0x1044], 0x56773346
mov dword [ebp - 0x1040], 0x6c30414b
mov dword [ebp - 0x103c], 0x6e55544b
mov dword [ebp - 0x1038], 0x4e733247
mov dword [ebp - 0x1034], 0x7a784348
mov dword [ebp - 0x1030], 0x4141414b
mov word [ebp - 0x102c], 0x5341
mov byte [ebp - 0x102a], 0x4d
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, eax
call fcn.0046bf80
push eax
lea eax, [ebp - 0x804]
push 0x400
push eax
call fcn.0053ee58
push eax
call fcn.00468850
add esp, 0x10
lea ecx, [ebp - 0x141c]
call fcn.00467b80
push 0
push esi
lea eax, [ebp - 0x804]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x13c8], 0x39734445
mov dword [ebp - 0x13c4], 0x31345450
mov dword [ebp - 0x13c0], 0x67387a4b
mov dword [ebp - 0x13bc], 0x6d744763
mov dword [ebp - 0x13b8], 0x736f7a48
mov dword [ebp - 0x13b4], 0x73497a4e
mov dword [ebp - 0x13b0], 0x734a794c
mov dword [ebp - 0x13ac], 0x6b4d6a4b
mov dword [ebp - 0x13a8], 0x78416a50
mov dword [ebp - 0x13a4], 0x6830324a
mov dword [ebp - 0x13a0], 0x79736a4b
mov dword [ebp - 0x139c], 0x576f694f
mov dword [ebp - 0x1398], 0x4f734741
mov dword [ebp - 0x1394], 0x4b67774f
mov dword [ebp - 0x1390], 0x74347a47
mov dword [ebp - 0x138c], 0x74734461
mov dword [ebp - 0x1388], 0x30457a64
mov dword [ebp - 0x1384], 0x6a557761
mov dword [ebp - 0x1380], 0x6c46784c
mov dword [ebp - 0x137c], 0x34387747
mov dword [ebp - 0x1378], 0x75415264
mov dword [ebp - 0x1374], 0x35515259
mov dword [ebp - 0x1370], 0x4149434c
mov dword [ebp - 0x136c], 0x4255514e
mov dword [ebp - 0x1368], 0x756b6943
mov dword [ebp - 0x1364], 0x4a455466
mov dword [ebp - 0x1360], 0x374a7a44
mov dword [ebp - 0x135c], 0x7541794f
mov dword [ebp - 0x1358], 0x42777749
mov dword [ebp - 0x1354], 0x32675246
mov dword [ebp - 0x1350], 0x35494344
mov dword [ebp - 0x134c], 0x7841574a
mov dword [ebp - 0x1348], 0x34744442
mov dword [ebp - 0x1344], 0x4c4d6750
mov dword [ebp - 0x1340], 0x34317a4a
mov dword [ebp - 0x133c], 0x77303346
mov dword [ebp - 0x1338], 0x2b774249
mov dword [ebp - 0x1334], 0x6b734847
mov dword [ebp - 0x1330], 0x776b774f
mov dword [ebp - 0x132c], 0x36346a47
mov dword [ebp - 0x1328], 0x6d454145
mov dword [ebp - 0x1324], 0x52517859
mov dword [ebp - 0x1320], 0x6c34444d
mov dword [ebp - 0x131c], 0x556b784d
mov dword [ebp - 0x1318], 0x34455349
mov dword [ebp - 0x1314], 0x314e774b
mov dword [ebp - 0x1310], 0x2f596846
mov dword [ebp - 0x130c], 0x61496d4c
mov dword [ebp - 0x1308], 0x6b6c5344
mov dword [ebp - 0x1304], 0x4830444a
mov dword [ebp - 0x1300], 0x67357a4e
mov dword [ebp - 0x12fc], 0x4a304459
mov dword [ebp - 0x12f8], 0x31316842
mov dword [ebp - 0x12f4], 0x30565849
mov dword [ebp - 0x12f0], 0x69594347
mov dword [ebp - 0x12ec], 0x7a307a41
mov dword [ebp - 0x12e8], 0x3639794a
mov dword [ebp - 0x12e4], 0x68644247
mov dword [ebp - 0x12e0], 0x6b45684f
mov dword [ebp - 0x12dc], 0x4b775341
mov dword [ebp - 0x12d8], 0x64556945
mov dword [ebp - 0x12d4], 0x6e41574a
mov dword [ebp - 0x12d0], 0x70734343
mov dword [ebp - 0x12cc], 0x4b416e48
mov dword [ebp - 0x12c8], 0x4b6f6864
mov dword [ebp - 0x12c4], 0x486b4443
mov dword [ebp - 0x12c0], 0x76347944
mov dword [ebp - 0x12bc], 0x6d785159
mov dword [ebp - 0x12b8], 0x3034444f
mov dword [ebp - 0x12b4], 0x57675342
mov dword [ebp - 0x12b0], 0x52497841
mov dword [ebp - 0x12ac], 0x6e59694e
mov dword [ebp - 0x12a8], 0x38454344
mov dword [ebp - 0x12a4], 0x57556a4a
mov dword [ebp - 0x12a0], 0x4673584c
mov dword [ebp - 0x129c], 0x79707a63
mov dword [ebp - 0x1298], 0x31426e63
mov dword [ebp - 0x1294], 0x675a4347
mov dword [ebp - 0x1290], 0x35777941
mov dword [ebp - 0x128c], 0x366f7844
mov dword [ebp - 0x1288], 0x6864544d
mov dword [ebp - 0x1284], 0x4d6f6e61
mov dword [ebp - 0x1280], 0x37747843
mov dword [ebp - 0x127c], 0x4b4d5461
mov dword [ebp - 0x1278], 0x3873334b
mov dword [ebp - 0x1274], 0x614d584b
mov dword [ebp - 0x1270], 0x2b4d5445
mov dword [ebp - 0x126c], 0x36777961
mov dword [ebp - 0x1268], 0x7834434d
mov dword [ebp - 0x1264], 0x73497747
mov dword [ebp - 0x1260], 0x68524246
mov dword [ebp - 0x125c], 0x5a6f6a4b
mov dword [ebp - 0x1258], 0x6c59324b
mov dword [ebp - 0x1254], 0x2b704148
mov dword [ebp - 0x1250], 0x38317a48
mov dword [ebp - 0x124c], 0x33515346
mov dword [ebp - 0x1248], 0x374a5346
mov dword [ebp - 0x1244], 0x6e31544b
mov dword [ebp - 0x1240], 0x7156545a
mov dword [ebp - 0x123c], 0x6851794d
mov dword [ebp - 0x1238], 0x77637841
mov dword [ebp - 0x1234], 0x62637861
mov dword [ebp - 0x1230], 0x6955574f
mov dword [ebp - 0x122c], 0x784e4450
mov dword [ebp - 0x1228], 0x6334534f
mov dword [ebp - 0x1224], 0x71346e42
mov dword [ebp - 0x1220], 0x62514364
mov dword [ebp - 0x121c], 0x6e385245
mov dword [ebp - 0x1218], 0x2b41794a
mov dword [ebp - 0x1214], 0x4159434d
mov dword [ebp - 0x1210], 0x6d454141
mov dword [ebp - 0x1180], 0x6e415441
mov dword [ebp - 0x117c], 0x756b444f
mov dword [ebp - 0x1178], 0x34306e4f
mov dword [ebp - 0x1174], 0x4a49444b
mov dword [ebp - 0x1170], 0x4c6f6850
mov dword [ebp - 0x116c], 0x32384261
mov dword [ebp - 0x1168], 0x4f49484e
mov dword [ebp - 0x1164], 0x6467444c
mov dword [ebp - 0x1160], 0x6e307848
mov dword [ebp - 0x115c], 0x784d5142
mov dword [ebp - 0x1158], 0x56634343
mov dword [ebp - 0x1154], 0x6b55585a
mov dword [ebp - 0x1150], 0x38637747
mov dword [ebp - 0x114c], 0x4445774f
mov dword [ebp - 0x1148], 0x3578424c
mov dword [ebp - 0x1144], 0x30706e63
mov dword [ebp - 0x1140], 0x44387941
mov dword [ebp - 0x113c], 0x78634444
mov dword [ebp - 0x1138], 0x34675745
mov dword [ebp - 0x1134], 0x74775146
mov dword [ebp - 0x1130], 0x536f6a4c
mov dword [ebp - 0x112c], 0x534d434e
mov dword [ebp - 0x1128], 0x71737744
mov dword [ebp - 0x1124], 0x7655334e
mov dword [ebp - 0x1120], 0x59734243
mov dword [ebp - 0x111c], 0x746b5464
mov dword [ebp - 0x1118], 0x4545534e
mov dword [ebp - 0x1114], 0x75345246
mov dword [ebp - 0x1110], 0x4241324b
mov dword [ebp - 0x110c], 0x44514863
mov dword [ebp - 0x1108], 0x6d49544b
mov dword [ebp - 0x1104], 0x6c51424d
mov dword [ebp - 0x1100], 0x5049524b
mov dword [ebp - 0x10fc], 0x304e7747
mov dword [ebp - 0x10f8], 0x43774447
mov dword [ebp - 0x10f4], 0x4b457763
mov dword [ebp - 0x10f0], 0x4f494449
mov dword [ebp - 0x10ec], 0x5a345244
mov dword [ebp - 0x10e8], 0x71343244
mov dword [ebp - 0x10e4], 0x7a776e44
mov dword [ebp - 0x10e0], 0x5645524e
mov dword [ebp - 0x10dc], 0x67735143
mov dword [ebp - 0x10d8], 0x69457949
mov dword [ebp - 0x10d4], 0x41384241
mov dword [ebp - 0x10d0], 0x6e676941
mov dword [ebp - 0x10cc], 0x4f454261
mov dword [ebp - 0x10c8], 0x6441544a
mov dword [ebp - 0x10c4], 0x45345444
mov dword [ebp - 0x10c0], 0x6645794c
mov dword [ebp - 0x10bc], 0x344d5343
mov dword [ebp - 0x10b8], 0x68684443
sub esp, 0xc
mov dword [ebp - 0x10b4], 0x7a706945
mov ecx, esp
mov dword [ebp - 0x10b0], 0x6a41414f
lea eax, [ebp - 0x1025]
mov dword [ebp - 0x10ac], 0x306b6847
lea edx, [ebp - 0x120c]
mov dword [ebp - 0x10a8], 0x52304248
push eax
push edx
lea esi, [ebp - 0x13c8]
mov dword [ebp - 0x10a4], 0x386f5848
push esi
mov dword [ebp - 0x10a0], 0x76495843
mov dword [ebp - 0x109c], 0x4f45684e
mov dword [ebp - 0x1098], 0x34304263
mov dword [ebp - 0x1094], 0x4b4d6945
mov dword [ebp - 0x1090], 0x73304161
mov dword [ebp - 0x108c], 0x5a306e41
mov dword [ebp - 0x1088], 0x30345249
mov dword [ebp - 0x1084], 0x51596a43
mov dword [ebp - 0x1080], 0x6c774147
mov dword [ebp - 0x107c], 0x44346a43
mov dword [ebp - 0x1078], 0x2b356745
mov dword [ebp - 0x1074], 0x37637745
mov dword [ebp - 0x1070], 0x3241525a
mov dword [ebp - 0x106c], 0x49345445
mov dword [ebp - 0x1068], 0x4530444a
mov dword [ebp - 0x1064], 0x77494345
mov dword [ebp - 0x1060], 0x684d6944
mov dword [ebp - 0x105c], 0x3867674e
mov dword [ebp - 0x1058], 0x78684241
mov dword [ebp - 0x1054], 0x77347842
mov dword [ebp - 0x1050], 0x32456a44
mov dword [ebp - 0x104c], 0x6746524c
mov dword [ebp - 0x1048], 0x6c42684a
mov dword [ebp - 0x1044], 0x7955784a
mov dword [ebp - 0x1040], 0x3149424a
mov dword [ebp - 0x103c], 0x4351784a
mov dword [ebp - 0x1038], 0x2b6c784f
mov dword [ebp - 0x1034], 0x52635249
mov dword [ebp - 0x1030], 0x41415144
mov word [ebp - 0x102c], 0x5041
mov byte [ebp - 0x102a], 0x49
call fcn.004676d0
lea eax, [ebp - 0x1484]
push eax
call fcn.0047fb90
add esp, 0x10
mov edi, dword [eax]
mov eax, dword [eax + 4]
sub eax, edi
je 0x519db6
sub esp, 0xc
lea eax, [ebp - 0x1025]
mov ecx, esp
lea edx, [ebp - 0x1029]
lea esi, [ebp - 0x1180]
push eax
push edx
push esi
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
je 0x519dc0
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x1208], eax
xor esi, esi
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x1208], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5168f6
sub ecx, edx
je 0x516944
mov al, byte [esi + edi]
lea ecx, [ebp - 0x1208]
xor al, 0x8b
mov byte [ebp - 0x1025], al
lea eax, [ebp - 0x1025]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x516924
sub ecx, edx
cmp esi, ecx
jb 0x516901
mov eax, dword [ebp - 0x1208]
test eax, eax
je 0x516944
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x141c]
call fcn.00467ae0
lea ecx, [ebp - 0x1484]
call fcn.00467ae0
mov esi, dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
lea eax, [ebp - 0x1024]
push eax
push 0
push 0
push ebx
call esi
push dword [ebp - 0x1024]
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, eax
lea eax, [ebp - 0x1024]
push eax
push dword [ebp - 0x1024]
mov dword [ebp - 0x1404], edi
push edi
push ebx
call esi
test eax, eax
jne 0x5171e9
mov dword [ebp - 0x1390], 0x39734445
mov dword [ebp - 0x138c], 0x31345450
mov dword [ebp - 0x1388], 0x67387a4b
mov dword [ebp - 0x1384], 0x6d744763
mov dword [ebp - 0x1380], 0x67344343
mov dword [ebp - 0x137c], 0x6834534b
mov dword [ebp - 0x1378], 0x35515259
mov dword [ebp - 0x1374], 0x76514350
mov dword [ebp - 0x1370], 0x31635449
mov dword [ebp - 0x136c], 0x6e346a59
mov dword [ebp - 0x1368], 0x394d794e
mov dword [ebp - 0x1364], 0x6868434d
mov dword [ebp - 0x1360], 0x6977544b
mov dword [ebp - 0x135c], 0x6838694e
mov dword [ebp - 0x1358], 0x47306750
mov dword [ebp - 0x1354], 0x75456a64
mov dword [ebp - 0x1350], 0x64554243
mov dword [ebp - 0x134c], 0x5a597945
mov dword [ebp - 0x1348], 0x31636a66
mov dword [ebp - 0x1344], 0x51675848
mov dword [ebp - 0x1340], 0x7751474a
mov dword [ebp - 0x133c], 0x3763694e
mov dword [ebp - 0x1338], 0x72734266
mov dword [ebp - 0x1334], 0x58456748
mov dword [ebp - 0x1330], 0x77704350
mov dword [ebp - 0x132c], 0x7055794b
mov dword [ebp - 0x1328], 0x7645694a
mov dword [ebp - 0x1324], 0x35346945
mov dword [ebp - 0x1320], 0x726f544f
mov dword [ebp - 0x131c], 0x59557a42
mov dword [ebp - 0x1318], 0x35416745
mov dword [ebp - 0x1314], 0x74414350
mov dword [ebp - 0x1310], 0x72457a45
mov dword [ebp - 0x130c], 0x32355848
mov dword [ebp - 0x1308], 0x61516948
mov dword [ebp - 0x1304], 0x39594766
mov dword [ebp - 0x1300], 0x6f495145
mov dword [ebp - 0x12fc], 0x67734464
mov dword [ebp - 0x12f8], 0x7734424f
mov dword [ebp - 0x12f4], 0x44636946
mov dword [ebp - 0x12f0], 0x41303263
mov dword [ebp - 0x12ec], 0x6c513350
mov dword [ebp - 0x12e8], 0x2f73324f
mov dword [ebp - 0x12e4], 0x6a414349
mov dword [ebp - 0x12e0], 0x786c7a4c
mov dword [ebp - 0x12dc], 0x796c424a
mov dword [ebp - 0x12d8], 0x744d4247
mov dword [ebp - 0x12d4], 0x2b41534b
mov dword [ebp - 0x12d0], 0x7755444d
mov dword [ebp - 0x12cc], 0x61776846
mov dword [ebp - 0x12c8], 0x73416842
mov dword [ebp - 0x12c4], 0x70555242
mov dword [ebp - 0x12c0], 0x35554745
mov dword [ebp - 0x12bc], 0x3052514b
mov dword [ebp - 0x12b8], 0x2f6f334a
mov dword [ebp - 0x12b4], 0x4d77784b
mov dword [ebp - 0x12b0], 0x2f51434d
mov dword [ebp - 0x12ac], 0x6577444b
mov dword [ebp - 0x12a8], 0x696c5363
mov dword [ebp - 0x12a4], 0x4d555342
mov dword [ebp - 0x12a0], 0x3230444a
mov dword [ebp - 0x129c], 0x314e7761
mov dword [ebp - 0x1298], 0x6e6b7765
mov dword [ebp - 0x1294], 0x6545424f
mov dword [ebp - 0x1290], 0x786b7765
mov dword [ebp - 0x128c], 0x426f5266
mov dword [ebp - 0x1288], 0x3031534b
mov dword [ebp - 0x1284], 0x6e38784d
mov dword [ebp - 0x1280], 0x42494263
mov dword [ebp - 0x127c], 0x58387763
mov dword [ebp - 0x1278], 0x735a5166
mov dword [ebp - 0x1274], 0x77344142
mov dword [ebp - 0x1270], 0x39705449
mov dword [ebp - 0x126c], 0x77466859
mov dword [ebp - 0x1268], 0x62456941
mov dword [ebp - 0x1264], 0x3334794e
mov dword [ebp - 0x1260], 0x63675747
mov dword [ebp - 0x125c], 0x35515750
mov dword [ebp - 0x1258], 0x5a77544a
mov dword [ebp - 0x1254], 0x54775849
mov dword [ebp - 0x1250], 0x37673341
mov dword [ebp - 0x124c], 0x31517a49
mov dword [ebp - 0x1248], 0x4573794b
mov dword [ebp - 0x1244], 0x464d7746
mov dword [ebp - 0x1240], 0x395a6a4a
mov dword [ebp - 0x123c], 0x305a514d
mov dword [ebp - 0x1238], 0x39304146
mov dword [ebp - 0x1234], 0x2b51434b
mov dword [ebp - 0x1230], 0x366b5365
mov dword [ebp - 0x122c], 0x4d415349
mov dword [ebp - 0x1228], 0x34347841
mov dword [ebp - 0x1224], 0x4e63794f
mov dword [ebp - 0x1220], 0x69597a48
mov dword [ebp - 0x121c], 0x78465266
mov dword [ebp - 0x1218], 0x46387a42
mov dword [ebp - 0x1214], 0x41494342
mov dword [ebp - 0x1210], 0x31444141
mov dword [ebp - 0x1178], 0x6e415441
mov dword [ebp - 0x1174], 0x756b444f
mov dword [ebp - 0x1170], 0x34306e4f
mov dword [ebp - 0x116c], 0x7a4a444b
mov dword [ebp - 0x1168], 0x47777a47
mov dword [ebp - 0x1164], 0x4d63794e
mov dword [ebp - 0x1160], 0x38455243
mov dword [ebp - 0x115c], 0x6a675441
mov dword [ebp - 0x1158], 0x4438794a
mov dword [ebp - 0x1154], 0x79787847
mov dword [ebp - 0x1150], 0x43596941
mov dword [ebp - 0x114c], 0x496b4846
mov dword [ebp - 0x1148], 0x38347850
mov dword [ebp - 0x1144], 0x33464149
mov dword [ebp - 0x1140], 0x39306746
mov dword [ebp - 0x113c], 0x434d414d
mov dword [ebp - 0x1138], 0x6e734141
mov dword [ebp - 0x1134], 0x54453246
mov dword [ebp - 0x1130], 0x57345342
mov dword [ebp - 0x112c], 0x46773347
mov dword [ebp - 0x1128], 0x69593264
mov dword [ebp - 0x1124], 0x74775859
mov dword [ebp - 0x1120], 0x31704447
mov dword [ebp - 0x111c], 0x72566a48
mov dword [ebp - 0x1118], 0x5941534c
mov dword [ebp - 0x1114], 0x6e4d6e49
mov dword [ebp - 0x1110], 0x6649794f
mov dword [ebp - 0x110c], 0x6d63794e
mov dword [ebp - 0x1108], 0x6a67324f
mov dword [ebp - 0x1104], 0x566b584e
mov dword [ebp - 0x1100], 0x6b396a4b
mov dword [ebp - 0x10fc], 0x5334694e
mov dword [ebp - 0x10f8], 0x31316a44
mov dword [ebp - 0x10f4], 0x5867674e
mov dword [ebp - 0x10f0], 0x45734466
mov dword [ebp - 0x10ec], 0x53496764
mov dword [ebp - 0x10e8], 0x6d736744
mov dword [ebp - 0x10e4], 0x6d556a45
mov dword [ebp - 0x10e0], 0x4c6b414f
mov dword [ebp - 0x10dc], 0x44385844
mov dword [ebp - 0x10d8], 0x79416963
mov dword [ebp - 0x10d4], 0x6c677949
mov dword [ebp - 0x10d0], 0x36356e4d
mov dword [ebp - 0x10cc], 0x49455142
mov dword [ebp - 0x10c8], 0x6b59484a
mov dword [ebp - 0x10c4], 0x68496764
mov dword [ebp - 0x10c0], 0x6c557864
mov dword [ebp - 0x10bc], 0x336f444f
mov dword [ebp - 0x10b8], 0x4c413247
mov dword [ebp - 0x10b4], 0x6767424d
mov dword [ebp - 0x10b0], 0x6c494266
mov dword [ebp - 0x10ac], 0x57383342
mov dword [ebp - 0x10a8], 0x49385241
mov dword [ebp - 0x10a4], 0x65633341
mov dword [ebp - 0x10a0], 0x34464149
mov dword [ebp - 0x109c], 0x786f424b
mov dword [ebp - 0x1098], 0x50776e4c
mov dword [ebp - 0x1094], 0x7a495150
mov dword [ebp - 0x1090], 0x6a4d524a
mov dword [ebp - 0x108c], 0x36675464
mov dword [ebp - 0x1088], 0x78386843
mov dword [ebp - 0x1084], 0x5638434e
mov dword [ebp - 0x1080], 0x4f346863
mov dword [ebp - 0x107c], 0x6a515350
mov dword [ebp - 0x1078], 0x73775347
push eax
sub esp, 0xc
mov dword [ebp - 0x1074], 0x3242414d
mov ecx, esp
mov dword [ebp - 0x1070], 0x3273414c
lea eax, [ebp - 0x1025]
mov dword [ebp - 0x106c], 0x77734262
lea edx, [ebp - 0x120c]
mov dword [ebp - 0x1068], 0x49347966
push eax
push edx
lea esi, [ebp - 0x1390]
mov dword [ebp - 0x1064], 0x6149434d
push esi
mov dword [ebp - 0x1060], 0x64417a41
mov dword [ebp - 0x105c], 0x7241434f
mov dword [ebp - 0x1058], 0x43557945
mov dword [ebp - 0x1054], 0x5a516946
mov dword [ebp - 0x1050], 0x386f5866
mov dword [ebp - 0x104c], 0x3938524d
mov dword [ebp - 0x1048], 0x35314841
mov dword [ebp - 0x1044], 0x66494345
mov dword [ebp - 0x1040], 0x71386a48
mov dword [ebp - 0x103c], 0x4a6f7a4e
mov dword [ebp - 0x1038], 0x614d6946
mov dword [ebp - 0x1034], 0x35315847
mov dword [ebp - 0x1030], 0x41414141
mov word [ebp - 0x102c], 0x7736
call fcn.004676d0
lea eax, [ebp - 0x1484]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push 0
sub esp, 0xc
mov edi, eax
mov ecx, esp
lea eax, [ebp - 0x1025]
push eax
lea eax, [ebp - 0x102a]
push eax
lea eax, [ebp - 0x1178]
push eax
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x1208], eax
xor esi, esi
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x1208], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x517150
sub ecx, edx
je 0x5171a3
jmp 0x517160
mov al, byte [esi + edi]
lea ecx, [ebp - 0x1208]
xor al, 0x8b
mov byte [ebp - 0x1025], al
lea eax, [ebp - 0x1025]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x517183
sub ecx, edx
cmp esi, ecx
jb 0x517160
mov eax, dword [ebp - 0x1208]
test eax, eax
je 0x5171a3
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x141c]
call fcn.00467ae0
lea ecx, [ebp - 0x1484]
call fcn.00467ae0
push dword [ebp - 0x1404]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push ebx
call edi
push dword [ebp - 0x1424]
call edi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
push dword [edi + 0xc]
lea ecx, [ebp - 0x1428]
mov dword [ebp - 0x1428], 0
call fcn.004672d0
lea ecx, [ebp - 0x1428]
call fcn.004feb10
lea ecx, [ebp - 0x1428]
call fcn.0051fe20
mov dword [ebp - 0x13fc], 0x39734445
mov dword [ebp - 0x13f8], 0x31345450
mov dword [ebp - 0x13f4], 0x67387a4b
mov dword [ebp - 0x13f0], 0x6d744763
mov dword [ebp - 0x13ec], 0x376f5348
mov dword [ebp - 0x13e8], 0x6d49794d
mov dword [ebp - 0x13e4], 0x3855474a
mov dword [ebp - 0x13e0], 0x2b49434f
mov dword [ebp - 0x13dc], 0x68414461
mov dword [ebp - 0x13d8], 0x4577684a
mov dword [ebp - 0x13d4], 0x4638674a
mov dword [ebp - 0x13d0], 0x78556747
mov dword [ebp - 0x13cc], 0x4849784a
mov dword [ebp - 0x13c8], 0x50453344
mov dword [ebp - 0x13c4], 0x4b344246
mov dword [ebp - 0x13c0], 0x6f70584d
mov dword [ebp - 0x13bc], 0x2b674164
mov dword [ebp - 0x13b8], 0x77557a61
mov dword [ebp - 0x13b4], 0x47557a4f
mov dword [ebp - 0x13b0], 0x746b4241
mov dword [ebp - 0x13ac], 0x7863544d
mov dword [ebp - 0x13a8], 0x67596761
mov dword [ebp - 0x13a4], 0x61635144
mov dword [ebp - 0x13a0], 0x6f387847
mov dword [ebp - 0x139c], 0x34355844
mov dword [ebp - 0x1398], 0x416b414d
mov dword [ebp - 0x1394], 0x6938534a
mov dword [ebp - 0x1390], 0x63677a43
mov dword [ebp - 0x138c], 0x47734449
mov dword [ebp - 0x1388], 0x3178584c
mov dword [ebp - 0x1384], 0x6b6c6a4c
mov dword [ebp - 0x1380], 0x30397a4e
mov dword [ebp - 0x137c], 0x37305242
mov dword [ebp - 0x1378], 0x32416a47
mov dword [ebp - 0x1374], 0x6b354265
mov dword [ebp - 0x1370], 0x384e4446
mov dword [ebp - 0x136c], 0x2b63514e
mov dword [ebp - 0x1368], 0x69775359
mov dword [ebp - 0x1364], 0x55307843
mov dword [ebp - 0x1360], 0x71343362
mov dword [ebp - 0x135c], 0x57307845
mov dword [ebp - 0x1358], 0x716b6947
mov dword [ebp - 0x1354], 0x2b4d6d45
mov dword [ebp - 0x1350], 0x30317747
mov dword [ebp - 0x134c], 0x73383341
mov dword [ebp - 0x1348], 0x58676a64
mov dword [ebp - 0x1344], 0x6a6b5165
mov dword [ebp - 0x1340], 0x4f635344
mov dword [ebp - 0x133c], 0x57515841
mov dword [ebp - 0x1338], 0x5955484c
mov dword [ebp - 0x1334], 0x54774449
mov dword [ebp - 0x1330], 0x3077334f
mov dword [ebp - 0x132c], 0x32306842
mov dword [ebp - 0x1328], 0x3046684a
mov dword [ebp - 0x1324], 0x376b7a44
mov dword [ebp - 0x1320], 0x554d4461
mov dword [ebp - 0x131c], 0x59517a44
mov dword [ebp - 0x1318], 0x2b4d7841
mov dword [ebp - 0x1314], 0x6a395750
mov dword [ebp - 0x1310], 0x4d345841
mov dword [ebp - 0x130c], 0x6d78444c
mov dword [ebp - 0x1308], 0x43513342
mov dword [ebp - 0x1304], 0x2b4a5443
mov dword [ebp - 0x1300], 0x7034484a
mov dword [ebp - 0x12fc], 0x71674147
mov dword [ebp - 0x12f8], 0x77357743
mov dword [ebp - 0x12f4], 0x355a6e43
mov dword [ebp - 0x12f0], 0x6b4a6a45
mov dword [ebp - 0x12ec], 0x35736742
mov dword [ebp - 0x12e8], 0x77345442
mov dword [ebp - 0x12e4], 0x69415750
mov dword [ebp - 0x12e0], 0x37554845
mov dword [ebp - 0x12dc], 0x3178674c
mov dword [ebp - 0x12d8], 0x304e5361
mov dword [ebp - 0x12d4], 0x3531674b
mov dword [ebp - 0x12d0], 0x4c557946
mov dword [ebp - 0x12cc], 0x37776848
mov dword [ebp - 0x12c8], 0x48415444
mov dword [ebp - 0x12c4], 0x69514841
mov dword [ebp - 0x12c0], 0x64674444
mov dword [ebp - 0x12bc], 0x6a306a4c
mov dword [ebp - 0x12b8], 0x756b435a
mov dword [ebp - 0x12b4], 0x6f41424f
mov dword [ebp - 0x12b0], 0x66515443
mov dword [ebp - 0x12ac], 0x4c494146
mov dword [ebp - 0x12a8], 0x43736846
mov dword [ebp - 0x12a4], 0x30774441
mov dword [ebp - 0x12a0], 0x7551444f
mov dword [ebp - 0x129c], 0x68316d48
mov dword [ebp - 0x1298], 0x46347a47
mov dword [ebp - 0x1294], 0x586f7742
mov dword [ebp - 0x1290], 0x5173514f
mov dword [ebp - 0x128c], 0x72737748
mov dword [ebp - 0x1288], 0x2b706749
mov dword [ebp - 0x1284], 0x61517741
mov dword [ebp - 0x1280], 0x5459474d
mov dword [ebp - 0x127c], 0x2f424447
mov dword [ebp - 0x1278], 0x7a6b414d
mov dword [ebp - 0x1274], 0x4c6f4249
mov dword [ebp - 0x1270], 0x6e596764
mov dword [ebp - 0x126c], 0x794d4243
mov dword [ebp - 0x1268], 0x74384844
mov dword [ebp - 0x1264], 0x43596841
mov dword [ebp - 0x1260], 0x49557959
mov dword [ebp - 0x125c], 0x6951794e
mov dword [ebp - 0x1258], 0x4d386842
mov dword [ebp - 0x1254], 0x31425164
mov dword [ebp - 0x1250], 0x654d324f
mov dword [ebp - 0x124c], 0x2f345449
mov dword [ebp - 0x1248], 0x44345845
mov dword [ebp - 0x1244], 0x354d3244
mov dword [ebp - 0x1240], 0x3535584b
mov dword [ebp - 0x123c], 0x2f4d414f
mov dword [ebp - 0x1238], 0x2b35514b
mov dword [ebp - 0x1234], 0x736b484c
mov dword [ebp - 0x1230], 0x694d5346
mov dword [ebp - 0x122c], 0x4359514f
mov dword [ebp - 0x1228], 0x5a414750
mov dword [ebp - 0x1224], 0x38456850
mov dword [ebp - 0x1220], 0x7163774a
mov dword [ebp - 0x121c], 0x4349774c
mov dword [ebp - 0x1218], 0x4d6b7a61
mov dword [ebp - 0x1214], 0x766b5247
mov dword [ebp - 0x1210], 0x42414141
mov word [ebp - 0x120c], 0x6756
mov dword [ebp - 0x11e8], 0x6e415441
mov dword [ebp - 0x11e4], 0x756b444f
mov dword [ebp - 0x11e0], 0x34306e4f
mov dword [ebp - 0x11dc], 0x5a49444b
mov dword [ebp - 0x11d8], 0x4577484f
mov dword [ebp - 0x11d4], 0x516b6a47
mov dword [ebp - 0x11d0], 0x47304247
mov dword [ebp - 0x11cc], 0x686b7a49
mov dword [ebp - 0x11c8], 0x6c417744
mov dword [ebp - 0x11c4], 0x7177514b
mov dword [ebp - 0x11c0], 0x6b42574b
mov dword [ebp - 0x11bc], 0x43387947
mov dword [ebp - 0x11b8], 0x56636a4c
mov dword [ebp - 0x11b4], 0x68556a43
mov dword [ebp - 0x11b0], 0x6c775847
mov dword [ebp - 0x11ac], 0x79516742
mov dword [ebp - 0x11a8], 0x66306e41
mov dword [ebp - 0x11a4], 0x4177784c
mov dword [ebp - 0x11a0], 0x67736747
mov dword [ebp - 0x119c], 0x7541474a
mov dword [ebp - 0x1198], 0x69344266
mov dword [ebp - 0x1194], 0x6c45675a
mov dword [ebp - 0x1190], 0x2b5a684a
mov dword [ebp - 0x118c], 0x4d674343
mov dword [ebp - 0x1188], 0x35745444
mov dword [ebp - 0x1184], 0x7a556943
mov dword [ebp - 0x1180], 0x2f424847
mov dword [ebp - 0x117c], 0x55347a48
mov dword [ebp - 0x1178], 0x6b6f5363
mov dword [ebp - 0x1174], 0x7238434a
mov dword [ebp - 0x1170], 0x6c775449
mov dword [ebp - 0x116c], 0x4b77534e
mov dword [ebp - 0x1168], 0x6c6b6741
mov dword [ebp - 0x1164], 0x2b6c6949
mov dword [ebp - 0x1160], 0x38645342
mov dword [ebp - 0x115c], 0x77524346
mov dword [ebp - 0x1158], 0x4445514d
mov dword [ebp - 0x1154], 0x38517941
mov dword [ebp - 0x1150], 0x4138694b
mov dword [ebp - 0x114c], 0x52385848
mov dword [ebp - 0x1148], 0x68306949
mov dword [ebp - 0x1144], 0x3356524a
mov dword [ebp - 0x1140], 0x67636845
mov dword [ebp - 0x113c], 0x79426e59
mov dword [ebp - 0x1138], 0x35645143
mov dword [ebp - 0x1134], 0x775a4342
mov dword [ebp - 0x1130], 0x6341784d
mov dword [ebp - 0x112c], 0x31556745
mov dword [ebp - 0x1128], 0x556b6d4f
mov dword [ebp - 0x1124], 0x334a5243
mov dword [ebp - 0x1120], 0x61556741
mov dword [ebp - 0x111c], 0x446b545a
mov dword [ebp - 0x1118], 0x556b7847
mov dword [ebp - 0x1114], 0x79646947
mov dword [ebp - 0x1110], 0x73637a50
mov dword [ebp - 0x110c], 0x5173484d
mov dword [ebp - 0x1108], 0x6d63424b
mov dword [ebp - 0x1104], 0x56636844
mov dword [ebp - 0x1100], 0x5434574a
mov dword [ebp - 0x10fc], 0x78736765
mov dword [ebp - 0x10f8], 0x576f5249
mov dword [ebp - 0x10f4], 0x50455147
mov dword [ebp - 0x10f0], 0x3449684c
mov dword [ebp - 0x10ec], 0x334e794a
mov dword [ebp - 0x10e8], 0x2b593343
mov dword [ebp - 0x10e4], 0x444d5464
mov dword [ebp - 0x10e0], 0x32734342
mov dword [ebp - 0x10dc], 0x36777a49
mov dword [ebp - 0x10d8], 0x6c734763
mov dword [ebp - 0x10d4], 0x52514243
mov dword [ebp - 0x10d0], 0x36496749
mov dword [ebp - 0x10cc], 0x4d51774f
mov dword [ebp - 0x10c8], 0x7463574b
mov dword [ebp - 0x10c4], 0x774d5459
mov dword [ebp - 0x10c0], 0x7873524b
mov dword [ebp - 0x10bc], 0x4c496e41
mov dword [ebp - 0x10b8], 0x30646a4a
mov dword [ebp - 0x10b4], 0x594d514d
mov dword [ebp - 0x10b0], 0x51384741
mov dword [ebp - 0x10ac], 0x4b495241
mov dword [ebp - 0x10a8], 0x414d7764
mov dword [ebp - 0x10a4], 0x33525245
mov dword [ebp - 0x10a0], 0x314d7947
mov dword [ebp - 0x109c], 0x7a5a7849
mov dword [ebp - 0x1098], 0x75343359
mov dword [ebp - 0x1094], 0x32674150
mov dword [ebp - 0x1090], 0x32456a44
mov dword [ebp - 0x108c], 0x6545694e
mov dword [ebp - 0x1088], 0x31387a48
mov dword [ebp - 0x1084], 0x77304447
mov dword [ebp - 0x1080], 0x796b7849
mov dword [ebp - 0x107c], 0x6f6b3361
mov dword [ebp - 0x1078], 0x41634245
mov dword [ebp - 0x1074], 0x3170435a
mov dword [ebp - 0x1070], 0x36354446
mov dword [ebp - 0x106c], 0x55776a4a
mov dword [ebp - 0x1068], 0x68526945
mov dword [ebp - 0x1064], 0x6d6c5262
mov dword [ebp - 0x1060], 0x4b597848
mov dword [ebp - 0x105c], 0x54676843
mov dword [ebp - 0x1058], 0x39386a41
mov dword [ebp - 0x1054], 0x7a4e4350
mov dword [ebp - 0x1050], 0x6c454349
mov dword [ebp - 0x104c], 0x2f776759
mov dword [ebp - 0x1048], 0x77567764
mov dword [ebp - 0x1044], 0x61517949
mov dword [ebp - 0x1040], 0x59594845
mov dword [ebp - 0x103c], 0x34555348
mov dword [ebp - 0x1038], 0x3873474c
mov dword [ebp - 0x1034], 0x416f6765
push 0
sub esp, 0xc
mov dword [ebp - 0x1030], 0x2b454141
mov ecx, esp
lea eax, [ebp - 0x1025]
lea edx, [ebp - 0x120a]
lea esi, [ebp - 0x13fc]
push eax
push edx
push esi
call fcn.004676d0
lea eax, [ebp - 0x1484]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push 0
sub esp, 0xc
mov edi, eax
mov ecx, esp
lea eax, [ebp - 0x1025]
push eax
lea eax, [ebp - 0x102c]
push eax
lea eax, [ebp - 0x11e8]
push eax
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x1208], eax
xor esi, esi
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x1208], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
jmp 0x517bf0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x517bf0
sub ecx, edx
je 0x517c43
jmp 0x517c00
mov al, byte [esi + edi]
lea ecx, [ebp - 0x1208]
xor al, 0x8b
mov byte [ebp - 0x1025], al
lea eax, [ebp - 0x1025]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x517c23
sub ecx, edx
cmp esi, ecx
jb 0x517c00
mov eax, dword [ebp - 0x1208]
test eax, eax
je 0x517c43
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x141c]
call fcn.00467ae0
lea ecx, [ebp - 0x1484]
call fcn.00467ae0
push dword [ebp - 0x1428]
lea ecx, [ebp - 0x1420]
mov dword [ebp - 0x1478], 0x6e415441
mov dword [ebp - 0x1474], 0x756b444f
mov dword [ebp - 0x1470], 0x34306e4f
mov dword [ebp - 0x146c], 0x4449444b
mov dword [ebp - 0x1468], 0x446b7842
mov dword [ebp - 0x1464], 0x68304249
mov dword [ebp - 0x1460], 0x38396844
mov dword [ebp - 0x145c], 0x62634350
mov dword [ebp - 0x1458], 0x6b6f5743
mov dword [ebp - 0x1454], 0x4a6f784e
mov dword [ebp - 0x1450], 0x46774164
mov dword [ebp - 0x144c], 0x6d45434e
mov dword [ebp - 0x1448], 0x48454449
mov dword [ebp - 0x1444], 0x45515349
mov dword [ebp - 0x1440], 0x3568694f
mov dword [ebp - 0x143c], 0x49306a49
mov dword [ebp - 0x1438], 0x30675145
mov dword [ebp - 0x1434], 0x66637961
mov dword [ebp - 0x1430], 0x41305447
mov dword [ebp - 0x142c], 0x74414141
call fcn.004aec30
push 0
sub esp, 0xc
lea edx, [ebp - 0x1428]
mov ecx, esp
lea esi, [ebp - 0x1478]
mov edi, dword [eax]
lea eax, [ebp - 0x1025]
push eax
push edx
push esi
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x1208], eax
xor esi, esi
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x1208], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x517d98
sub ecx, edx
je 0x517de6
mov al, byte [esi + edi]
lea ecx, [ebp - 0x1208]
xor al, 0x8b
mov byte [ebp - 0x1025], al
lea eax, [ebp - 0x1025]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x517dc6
sub ecx, edx
cmp esi, ecx
jb 0x517da3
mov eax, dword [ebp - 0x1208]
test eax, eax
je 0x517de6
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x141c]
call fcn.00467ae0
lea ecx, [ebp - 0x1420]
call fcn.004679f0
push dword [ebp - 0x1404]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [ebp - 0x1020]
push eax
push 1
push ebx
call dword [sym.imp.ADVAPI32.dll_ControlService]
test eax, eax
jne 0x518333
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x426
je 0x518333
cmp eax, 0x425
jne 0x517e45
cmp dword [ebp - 0x101c], 3
je 0x518333
push 0x400
lea eax, [ebp - 0x804]
push eax
push 0xd80e
call fcn.004be950
add esp, 0xc
test eax, eax
jne 0x518318
mov dword [ebp - 0x11e4], 0x686f6a42
mov dword [ebp - 0x11e0], 0x686c7950
mov dword [ebp - 0x11dc], 0x3477444a
mov dword [ebp - 0x11d8], 0x79554463
mov dword [ebp - 0x11d4], 0x70395449
mov dword [ebp - 0x11d0], 0x3334694e
mov dword [ebp - 0x11cc], 0x7677794e
mov dword [ebp - 0x11c8], 0x2b4d4450
mov dword [ebp - 0x11c4], 0x71774348
mov dword [ebp - 0x11c0], 0x31516963
mov dword [ebp - 0x11bc], 0x6d4d424c
mov dword [ebp - 0x11b8], 0x4c51484e
mov dword [ebp - 0x11b4], 0x696f444d
mov dword [ebp - 0x11b0], 0x7246684f
mov dword [ebp - 0x11ac], 0x71346950
mov dword [ebp - 0x11a8], 0x314d6e4b
mov dword [ebp - 0x11a4], 0x34496845
mov dword [ebp - 0x11a0], 0x6863674d
mov dword [ebp - 0x119c], 0x3841784c
mov dword [ebp - 0x1198], 0x7377674a
mov dword [ebp - 0x1194], 0x37415263
mov dword [ebp - 0x1190], 0x73684142
mov dword [ebp - 0x118c], 0x4b386850
mov dword [ebp - 0x1188], 0x4a4d415a
mov dword [ebp - 0x1184], 0x4d49534a
mov dword [ebp - 0x1180], 0x3373784b
mov dword [ebp - 0x117c], 0x6f774365
mov dword [ebp - 0x1178], 0x5867544e
mov dword [ebp - 0x1174], 0x6b52444c
mov dword [ebp - 0x1170], 0x31736947
mov dword [ebp - 0x116c], 0x56384445
mov dword [ebp - 0x1168], 0x544d7941
mov dword [ebp - 0x1164], 0x38687a47
mov dword [ebp - 0x1160], 0x77516848
mov dword [ebp - 0x115c], 0x38344142
mov dword [ebp - 0x1158], 0x54304446
mov dword [ebp - 0x1154], 0x70514241
mov dword [ebp - 0x1150], 0x3963424c
mov dword [ebp - 0x114c], 0x63676a65
mov dword [ebp - 0x1148], 0x7752784d
mov dword [ebp - 0x1144], 0x6d39794d
mov dword [ebp - 0x1140], 0x346c4446
mov dword [ebp - 0x113c], 0x4b636d50
mov dword [ebp - 0x1138], 0x30417946
mov dword [ebp - 0x1134], 0x716f444c
mov dword [ebp - 0x1130], 0x336c6841
mov dword [ebp - 0x112c], 0x39527a4f
mov dword [ebp - 0x1128], 0x4f49674b
mov dword [ebp - 0x1124], 0x63305747
mov dword [ebp - 0x1120], 0x796c774d
mov dword [ebp - 0x111c], 0x59416a4b
mov dword [ebp - 0x1118], 0x55306a4e
mov dword [ebp - 0x1114], 0x39706749
mov dword [ebp - 0x1110], 0x706f674f
mov dword [ebp - 0x110c], 0x35674150
mov dword [ebp - 0x1108], 0x774d7a42
mov dword [ebp - 0x1104], 0x374a4244
mov dword [ebp - 0x1100], 0x44636744
mov dword [ebp - 0x10fc], 0x676f5366
mov dword [ebp - 0x10f8], 0x456f7842
mov dword [ebp - 0x10f4], 0x52384461
mov dword [ebp - 0x10f0], 0x704d6946
mov dword [ebp - 0x10ec], 0x3868544c
mov dword [ebp - 0x10e8], 0x3231674e
mov dword [ebp - 0x10e4], 0x6749434a
mov dword [ebp - 0x10e0], 0x6759534d
mov dword [ebp - 0x10dc], 0x6d38444e
mov dword [ebp - 0x10d8], 0x43455248
mov dword [ebp - 0x10d4], 0x2f357743
mov dword [ebp - 0x10d0], 0x6d494347
mov dword [ebp - 0x10cc], 0x3545424a
mov dword [ebp - 0x10c8], 0x62737a4b
mov dword [ebp - 0x10c4], 0x30776765
mov dword [ebp - 0x10c0], 0x6c514349
mov dword [ebp - 0x10bc], 0x6a677964
mov dword [ebp - 0x10b8], 0x53737a43
mov dword [ebp - 0x10b4], 0x2b4a784d
mov dword [ebp - 0x10b0], 0x4863324c
mov dword [ebp - 0x10ac], 0x6a77674d
mov dword [ebp - 0x10a8], 0x51737943
mov dword [ebp - 0x10a4], 0x6e5a5149
push eax
sub esp, 0xc
mov dword [ebp - 0x10a0], 0x6e676e59
mov ecx, esp
mov dword [ebp - 0x109c], 0x41457a47
lea eax, [ebp - 0x1025]
mov dword [ebp - 0x1098], 0x33646748
lea edx, [ebp - 0x1029]
mov dword [ebp - 0x1094], 0x38684149
push eax
push edx
lea esi, [ebp - 0x11e4]
mov dword [ebp - 0x1090], 0x746f524d
push esi
mov dword [ebp - 0x108c], 0x2b38544e
mov dword [ebp - 0x1088], 0x4d594345
mov dword [ebp - 0x1084], 0x5538444c
mov dword [ebp - 0x1080], 0x33637847
mov dword [ebp - 0x107c], 0x3977784a
mov dword [ebp - 0x1078], 0x45346e61
mov dword [ebp - 0x1074], 0x72777a45
mov dword [ebp - 0x1070], 0x4c345348
mov dword [ebp - 0x106c], 0x66496947
mov dword [ebp - 0x1068], 0x4a306849
mov dword [ebp - 0x1064], 0x395a4242
mov dword [ebp - 0x1060], 0x695a5745
mov dword [ebp - 0x105c], 0x6e423242
mov dword [ebp - 0x1058], 0x62516943
mov dword [ebp - 0x1054], 0x486b6842
mov dword [ebp - 0x1050], 0x3349694a
mov dword [ebp - 0x104c], 0x6842424c
mov dword [ebp - 0x1048], 0x67387744
mov dword [ebp - 0x1044], 0x3452774e
mov dword [ebp - 0x1040], 0x7942794a
mov dword [ebp - 0x103c], 0x4367514f
mov dword [ebp - 0x1038], 0x50457745
mov dword [ebp - 0x1034], 0x4b30684c
mov dword [ebp - 0x1030], 0x41415146
mov word [ebp - 0x102c], 0x5441
mov byte [ebp - 0x102a], 0x49
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, eax
call fcn.0046bf80
push eax
lea eax, [ebp - 0x804]
push 0x400
push eax
call fcn.0053a910
add esp, 0xc
lea ecx, [ebp - 0x141c]
call fcn.00467b80
mov eax, dword [ebp - 0x1410]
push 0
add eax, 0x2c
push eax
lea eax, [ebp - 0x804]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor esi, esi
cmp dword [ebp - 0x101c], 1
je 0x518381
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
lea ebx, [ebx]
push 0x1f4
call edi
mov eax, esi
inc esi
cmp eax, 0x3c
jae 0x51837b
lea eax, [ebp - 0x1020]
push eax
push dword [ebp - 0x1408]
call ebx
test eax, eax
je 0x51837b
cmp dword [ebp - 0x101c], 1
jne 0x518350
mov ebx, dword [ebp - 0x1408]
mov eax, dword [ebp - 0x1410]
cmp dword [eax + 0x2e4], 0
jne 0x5191a7
lea ecx, [ebp - 0x1404]
mov dword [ebp - 0x1404], 0
call fcn.00467370
lea eax, [ebp - 0x1404]
mov dword [ebp - 0x1420], 0xce
push eax
lea eax, [ebp - 0x1420]
push eax
call fcn.00482620
add esp, 8
mov dword [ebp - 0x11d4], 0x78635346
mov dword [ebp - 0x11d0], 0x79676948
mov dword [ebp - 0x11cc], 0x7249544f
mov dword [ebp - 0x11c8], 0x706f514e
mov dword [ebp - 0x11c4], 0x70395449
mov dword [ebp - 0x11c0], 0x57734761
mov dword [ebp - 0x11bc], 0x6a59434a
mov dword [ebp - 0x11b8], 0x324a7a4e
mov dword [ebp - 0x11b4], 0x67777a4f
mov dword [ebp - 0x11b0], 0x6851434e
mov dword [ebp - 0x11ac], 0x36554849
mov dword [ebp - 0x11a8], 0x6b41694d
mov dword [ebp - 0x11a4], 0x694d4863
mov dword [ebp - 0x11a0], 0x78595845
mov dword [ebp - 0x119c], 0x676f4446
mov dword [ebp - 0x1198], 0x54494163
mov dword [ebp - 0x1194], 0x56634862
mov dword [ebp - 0x1190], 0x34305248
mov dword [ebp - 0x118c], 0x61307843
mov dword [ebp - 0x1188], 0x7a344463
mov dword [ebp - 0x1184], 0x45776942
mov dword [ebp - 0x1180], 0x356f674a
mov dword [ebp - 0x117c], 0x70594742
mov dword [ebp - 0x1178], 0x7a745745
mov dword [ebp - 0x1174], 0x3546674a
mov dword [ebp - 0x1170], 0x636f774c
mov dword [ebp - 0x116c], 0x4f634145
mov dword [ebp - 0x1168], 0x6b647a61
mov dword [ebp - 0x1164], 0x65734245
mov dword [ebp - 0x1160], 0x6d304864
mov dword [ebp - 0x115c], 0x79514463
mov dword [ebp - 0x1158], 0x7855584d
mov dword [ebp - 0x1154], 0x69455465
mov dword [ebp - 0x1150], 0x67554447
mov dword [ebp - 0x114c], 0x346b4244
mov dword [ebp - 0x1148], 0x5751424b
mov dword [ebp - 0x1144], 0x5551524f
mov dword [ebp - 0x1140], 0x4a414247
mov dword [ebp - 0x113c], 0x6e745347
mov dword [ebp - 0x1138], 0x556f5246
mov dword [ebp - 0x1134], 0x41307a48
mov dword [ebp - 0x1130], 0x7073435a
mov dword [ebp - 0x112c], 0x54495744
mov dword [ebp - 0x1128], 0x38517848
mov dword [ebp - 0x1124], 0x4d677a4e
mov dword [ebp - 0x1120], 0x4d45444e
mov dword [ebp - 0x111c], 0x31317a4f
mov dword [ebp - 0x1118], 0x4f386947
mov dword [ebp - 0x1114], 0x42307849
mov dword [ebp - 0x1110], 0x7935774b
mov dword [ebp - 0x110c], 0x4c497a4c
mov dword [ebp - 0x1108], 0x5651684b
mov dword [ebp - 0x1104], 0x57637750
mov dword [ebp - 0x1100], 0x2f39684e
mov dword [ebp - 0x10fc], 0x49554446
mov dword [ebp - 0x10f8], 0x75677844
mov dword [ebp - 0x10f4], 0x424d774f
mov dword [ebp - 0x10f0], 0x77677a44
mov dword [ebp - 0x10ec], 0x56776845
mov dword [ebp - 0x10e8], 0x72516963
mov dword [ebp - 0x10e4], 0x644d4148
mov dword [ebp - 0x10e0], 0x4d55794f
mov dword [ebp - 0x10dc], 0x75637742
mov dword [ebp - 0x10d8], 0x51776759
mov dword [ebp - 0x10d4], 0x4b307864
mov dword [ebp - 0x10d0], 0x4441774a
mov dword [ebp - 0x10cc], 0x31426a4c
mov dword [ebp - 0x10c8], 0x56386a42
mov dword [ebp - 0x10c4], 0x7a49684a
mov dword [ebp - 0x10c0], 0x4a673363
mov dword [ebp - 0x10bc], 0x53634161
push dword [ebp - 0x1404]
lea ecx, [ebp - 0x1408]
mov dword [ebp - 0x10b8], 0x3539544a
mov dword [ebp - 0x10b4], 0x6b45514a
lea edi, [ebp - 0x11d4]
mov dword [ebp - 0x10b0], 0x334a414f
lea esi, [ebp - 0x102c]
mov dword [ebp - 0x10ac], 0x44497946
mov dword [ebp - 0x10a8], 0x61495345
mov dword [ebp - 0x10a4], 0x2f495447
mov dword [ebp - 0x10a0], 0x6e49684d
mov dword [ebp - 0x109c], 0x5a497846
mov dword [ebp - 0x1098], 0x6d63784b
mov dword [ebp - 0x1094], 0x33774349
mov dword [ebp - 0x1090], 0x56556a49
mov dword [ebp - 0x108c], 0x384a774d
mov dword [ebp - 0x1088], 0x7045684e
mov dword [ebp - 0x1084], 0x5273784e
mov dword [ebp - 0x1080], 0x446f774b
mov dword [ebp - 0x107c], 0x38413364
mov dword [ebp - 0x1078], 0x38346d4e
mov dword [ebp - 0x1074], 0x38347a44
mov dword [ebp - 0x1070], 0x34776842
mov dword [ebp - 0x106c], 0x58634348
mov dword [ebp - 0x1068], 0x30704849
mov dword [ebp - 0x1064], 0x4b34544a
mov dword [ebp - 0x1060], 0x4a6b4348
mov dword [ebp - 0x105c], 0x59493242
mov dword [ebp - 0x1058], 0x49417743
mov dword [ebp - 0x1054], 0x7477484e
mov dword [ebp - 0x1050], 0x4545784e
mov dword [ebp - 0x104c], 0x33417841
mov dword [ebp - 0x1048], 0x7141774f
mov dword [ebp - 0x1044], 0x63305245
mov dword [ebp - 0x1040], 0x33777747
mov dword [ebp - 0x103c], 0x4238444c
mov dword [ebp - 0x1038], 0x574d5250
mov dword [ebp - 0x1034], 0x4141534c
mov dword [ebp - 0x1030], 0x55454141
mov dword [ebp - 0x1454], 0x6e415441
mov dword [ebp - 0x1450], 0x756b444f
mov dword [ebp - 0x144c], 0x34306e4f
mov dword [ebp - 0x1448], 0x304a444b
mov dword [ebp - 0x1444], 0x6645794a
mov dword [ebp - 0x1440], 0x71346763
mov dword [ebp - 0x143c], 0x394a584b
mov dword [ebp - 0x1438], 0x6b704261
mov dword [ebp - 0x1434], 0x41736d65
mov dword [ebp - 0x1430], 0x41414141
mov word [ebp - 0x142c], 0x4145
call fcn.004aec30
push eax
push 0
sub esp, 0xc
lea eax, [ebp - 0x1025]
mov ecx, esp
push eax
push esi
push edi
call fcn.004676d0
lea eax, [ebp - 0x1484]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push eax
lea eax, [ebp - 0x1420]
push eax
call fcn.004b8520
add esp, 0xc
lea edx, [ebp - 0x142a]
lea esi, [ebp - 0x1454]
mov edi, dword [eax]
lea eax, [ebp - 0x1025]
push 0
sub esp, 0xc
mov ecx, esp
push eax
push edx
push esi
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x1208], eax
xor esi, esi
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x1208], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x518920
sub ecx, edx
je 0x518973
jmp 0x518930
mov al, byte [esi + edi]
lea ecx, [ebp - 0x1208]
xor al, 0x8b
mov byte [ebp - 0x1025], al
lea eax, [ebp - 0x1025]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x518953
sub ecx, edx
cmp esi, ecx
jb 0x518930
mov eax, dword [ebp - 0x1208]
test eax, eax
je 0x518973
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x141c]
call fcn.00467ae0
lea ecx, [ebp - 0x1420]
call fcn.004679f0
lea ecx, [ebp - 0x1484]
call fcn.00467ae0
lea ecx, [ebp - 0x1408]
call fcn.004679f0
lea eax, [ebp - 0x1428]
mov dword [ebp - 0x1408], 0
push eax
lea ecx, [ebp - 0x1408]
call fcn.004aea00
lea ecx, [ebp - 0x1408]
call fcn.004fed30
mov dword [ebp - 0x1174], 0x78635346
mov dword [ebp - 0x1170], 0x79676948
mov dword [ebp - 0x116c], 0x7249544f
mov dword [ebp - 0x1168], 0x706f514e
mov dword [ebp - 0x1164], 0x70395449
mov dword [ebp - 0x1160], 0x42734761
mov dword [ebp - 0x115c], 0x6e59444a
mov dword [ebp - 0x1158], 0x6d6b544c
mov dword [ebp - 0x1154], 0x37304461
mov dword [ebp - 0x1150], 0x6867434d
mov dword [ebp - 0x114c], 0x6d6f544d
mov dword [ebp - 0x1148], 0x68646e4b
mov dword [ebp - 0x1144], 0x64637a41
mov dword [ebp - 0x1140], 0x7841774e
mov dword [ebp - 0x113c], 0x77594247
mov dword [ebp - 0x1138], 0x3331584d
mov dword [ebp - 0x1134], 0x65597847
mov dword [ebp - 0x1130], 0x46346d44
mov dword [ebp - 0x112c], 0x4b596844
mov dword [ebp - 0x1128], 0x7351584c
mov dword [ebp - 0x1124], 0x43416a64
mov dword [ebp - 0x1120], 0x50635350
mov dword [ebp - 0x111c], 0x436b544b
mov dword [ebp - 0x1118], 0x464d6841
mov dword [ebp - 0x1114], 0x4e6f6e43
mov dword [ebp - 0x1110], 0x6d306a47
mov dword [ebp - 0x110c], 0x366c7745
mov dword [ebp - 0x1108], 0x46456742
mov dword [ebp - 0x1104], 0x51597a4b
mov dword [ebp - 0x1100], 0x6e735241
mov dword [ebp - 0x10fc], 0x6e316742
mov dword [ebp - 0x10f8], 0x76553342
mov dword [ebp - 0x10f4], 0x34457841
mov dword [ebp - 0x10f0], 0x2f634261
mov dword [ebp - 0x10ec], 0x7263514f
mov dword [ebp - 0x10e8], 0x325a414e
mov dword [ebp - 0x10e4], 0x67595143
mov dword [ebp - 0x10e0], 0x6267544c
mov dword [ebp - 0x10dc], 0x2f647846
mov dword [ebp - 0x10d8], 0x3052674e
mov dword [ebp - 0x10d4], 0x6759684c
mov dword [ebp - 0x10d0], 0x414d4141
mov dword [ebp - 0x10cc], 0x57456a41
mov dword [ebp - 0x10c8], 0x73345450
mov dword [ebp - 0x10c4], 0x2f517943
mov dword [ebp - 0x10c0], 0x4b497846
mov dword [ebp - 0x10bc], 0x6941674d
mov dword [ebp - 0x10b8], 0x41347841
mov dword [ebp - 0x10b4], 0x57676945
mov dword [ebp - 0x10b0], 0x7834774f
mov dword [ebp - 0x10ac], 0x524d684b
mov dword [ebp - 0x10a8], 0x44774447
mov dword [ebp - 0x10a4], 0x2f636d49
mov dword [ebp - 0x10a0], 0x70634249
mov dword [ebp - 0x109c], 0x4b516965
mov dword [ebp - 0x1098], 0x38705343
mov dword [ebp - 0x1094], 0x36634342
mov dword [ebp - 0x1090], 0x4f45784d
mov dword [ebp - 0x108c], 0x68707750
mov dword [ebp - 0x1088], 0x4d6b7a41
mov dword [ebp - 0x1084], 0x75636947
mov dword [ebp - 0x1080], 0x4b6f6e45
mov dword [ebp - 0x107c], 0x666b774d
mov dword [ebp - 0x1078], 0x46345350
mov dword [ebp - 0x1074], 0x69636a4b
mov dword [ebp - 0x1070], 0x6f565345
mov dword [ebp - 0x106c], 0x5638544a
mov dword [ebp - 0x1068], 0x79384744
mov dword [ebp - 0x1064], 0x52514841
mov dword [ebp - 0x1060], 0x4273794c
mov dword [ebp - 0x105c], 0x78414143
mov dword [ebp - 0x1058], 0x4f346750
mov dword [ebp - 0x1054], 0x68396841
mov dword [ebp - 0x1050], 0x3051584e
mov dword [ebp - 0x104c], 0x42737866
mov dword [ebp - 0x1048], 0x7a4a5445
mov dword [ebp - 0x1044], 0x305a444e
mov dword [ebp - 0x1040], 0x6841434b
mov dword [ebp - 0x103c], 0x78417848
mov dword [ebp - 0x1038], 0x6e67544a
mov dword [ebp - 0x1034], 0x36514761
mov dword [ebp - 0x1030], 0x41417759
mov word [ebp - 0x102c], 0x4e41
mov byte [ebp - 0x102a], 0x41
mov dword [ebp - 0x1340], 0x6e415441
mov dword [ebp - 0x133c], 0x756b444f
mov dword [ebp - 0x1338], 0x34306e4f
mov dword [ebp - 0x1334], 0x314a444b
mov dword [ebp - 0x1330], 0x72774441
mov dword [ebp - 0x132c], 0x53737842
mov dword [ebp - 0x1328], 0x35304442
mov dword [ebp - 0x1324], 0x6534694c
mov dword [ebp - 0x1320], 0x6d30694f
mov dword [ebp - 0x131c], 0x32567a62
mov dword [ebp - 0x1318], 0x686b5448
mov dword [ebp - 0x1314], 0x6b38534f
mov dword [ebp - 0x1310], 0x646f6747
mov dword [ebp - 0x130c], 0x5545585a
mov dword [ebp - 0x1308], 0x35516964
mov dword [ebp - 0x1304], 0x304a7950
mov dword [ebp - 0x1300], 0x42496e43
mov dword [ebp - 0x12fc], 0x37636d4d
mov dword [ebp - 0x12f8], 0x6d464745
mov dword [ebp - 0x12f4], 0x64594363
mov dword [ebp - 0x12f0], 0x574d5464
mov dword [ebp - 0x12ec], 0x4d634341
mov dword [ebp - 0x12e8], 0x37305447
mov dword [ebp - 0x12e4], 0x6a634142
mov dword [ebp - 0x12e0], 0x2b59484c
mov dword [ebp - 0x12dc], 0x754d5464
mov dword [ebp - 0x12d8], 0x75495365
mov dword [ebp - 0x12d4], 0x424d7747
mov dword [ebp - 0x12d0], 0x64737744
mov dword [ebp - 0x12cc], 0x33494342
mov dword [ebp - 0x12c8], 0x59594446
mov dword [ebp - 0x12c4], 0x306c6e4a
mov dword [ebp - 0x12c0], 0x67636d48
mov dword [ebp - 0x12bc], 0x49496e43
mov dword [ebp - 0x12b8], 0x57494348
mov dword [ebp - 0x12b4], 0x47514344
mov dword [ebp - 0x12b0], 0x6e555464
mov dword [ebp - 0x12ac], 0x524d4449
mov dword [ebp - 0x12a8], 0x4834794b
mov dword [ebp - 0x12a4], 0x524d434d
mov dword [ebp - 0x12a0], 0x57597a41
mov dword [ebp - 0x129c], 0x41415143
mov dword [ebp - 0x1298], 0x50595347
mov dword [ebp - 0x1294], 0x72776a4b
mov dword [ebp - 0x1290], 0x36744865
mov dword [ebp - 0x128c], 0x72675148
mov dword [ebp - 0x1288], 0x7430414b
mov dword [ebp - 0x1284], 0x45554364
mov dword [ebp - 0x1280], 0x3145324c
mov dword [ebp - 0x127c], 0x5363424a
mov dword [ebp - 0x1278], 0x6e676a4d
mov dword [ebp - 0x1274], 0x70515141
mov dword [ebp - 0x1270], 0x5945424a
mov dword [ebp - 0x126c], 0x6945434a
mov dword [ebp - 0x1268], 0x45497964
mov dword [ebp - 0x1264], 0x45676a49
mov dword [ebp - 0x1260], 0x70417a41
mov dword [ebp - 0x125c], 0x5834474f
mov dword [ebp - 0x1258], 0x6b426842
mov dword [ebp - 0x1254], 0x6851414d
mov dword [ebp - 0x1250], 0x6a6c5264
mov dword [ebp - 0x124c], 0x49515341
mov dword [ebp - 0x1248], 0x314d5142
push dword [ebp - 0x1408]
lea ecx, [ebp - 0x140c]
mov dword [ebp - 0x1244], 0x77566859
mov dword [ebp - 0x1240], 0x34387847
lea edi, [ebp - 0x1174]
mov dword [ebp - 0x123c], 0x4249694e
lea esi, [ebp - 0x1029]
mov dword [ebp - 0x1238], 0x66455363
mov dword [ebp - 0x1234], 0x66346846
mov dword [ebp - 0x1230], 0x42774347
mov dword [ebp - 0x122c], 0x4f634441
mov dword [ebp - 0x1228], 0x44674444
mov dword [ebp - 0x1224], 0x32355149
mov dword [ebp - 0x1220], 0x36394447
mov dword [ebp - 0x121c], 0x41455341
mov dword [ebp - 0x1218], 0x7842794a
mov dword [ebp - 0x1214], 0x41414143
mov word [ebp - 0x1210], 0x4e41
mov byte [ebp - 0x120e], 0x63
call fcn.004aec30
push eax
push 0
sub esp, 0xc
lea eax, [ebp - 0x1025]
mov ecx, esp
push eax
push esi
push edi
call fcn.004676d0
lea eax, [ebp - 0x1484]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push eax
lea eax, [ebp - 0x1420]
push eax
call fcn.004b8520
add esp, 0xc
lea edx, [ebp - 0x120d]
lea esi, [ebp - 0x1340]
mov edi, dword [eax]
lea eax, [ebp - 0x1025]
push 0
sub esp, 0xc
mov ecx, esp
push eax
push edx
push esi
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x1208], eax
xor esi, esi
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x1208], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5190d1
sub ecx, edx
je 0x519123
lea esp, [esp]
mov al, byte [esi + edi]
lea ecx, [ebp - 0x1208]
xor al, 0x8b
mov byte [ebp - 0x1025], al
lea eax, [ebp - 0x1025]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x519103
sub ecx, edx
cmp esi, ecx
jb 0x5190e0
mov eax, dword [ebp - 0x1208]
test eax, eax
je 0x519123
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x141c]
call fcn.00467ae0
lea ecx, [ebp - 0x1420]
call fcn.004679f0
lea ecx, [ebp - 0x1484]
call fcn.00467ae0
lea ecx, [ebp - 0x140c]
call fcn.004679f0
push 0x2c
call fcn.0053c207
mov esi, eax
add esp, 4
test esi, esi
je 0x519183
push 0x2c
push 0
push esi
call fcn.0053e0b0
add esp, 0xc
lea eax, [ebp - 0x1408]
mov ecx, esi
push eax
lea eax, [ebp - 0x1404]
push eax
call fcn.004b23c0
jmp 0x519185
xor eax, eax
mov ecx, dword [ebp - 0x1410]
mov dword [ecx + 0x2e4], eax
lea ecx, [ebp - 0x1408]
call fcn.004b5930
lea ecx, [ebp - 0x1404]
call fcn.00467a10
push 0x582738
lea ecx, [ebp - 0x1404]
call fcn.004672d0
lea eax, [ebp - 0x1404]
push eax
mov eax, dword [ebp - 0x1410]
mov ecx, dword [eax + 0x2e4]
call fcn.0051ea90
lea ecx, [ebp - 0x1404]
call fcn.00467a10
mov dword [ebp - 0x139c], 0x39734445
mov dword [ebp - 0x1398], 0x31345450
mov dword [ebp - 0x1394], 0x67387a4b
mov dword [ebp - 0x1390], 0x6d744763
mov dword [ebp - 0x138c], 0x6e594343
mov dword [ebp - 0x1388], 0x7467444c
mov dword [ebp - 0x1384], 0x7346434a
mov dword [ebp - 0x1380], 0x6a6f544b
mov dword [ebp - 0x137c], 0x38417a4c
mov dword [ebp - 0x1378], 0x6a416959
mov dword [ebp - 0x1374], 0x7a517a4b
mov dword [ebp - 0x1370], 0x68396a4e
mov dword [ebp - 0x136c], 0x6c307a50
mov dword [ebp - 0x1368], 0x79556a50
mov dword [ebp - 0x1364], 0x6c4d794c
mov dword [ebp - 0x1360], 0x6e347844
mov dword [ebp - 0x135c], 0x30515465
mov dword [ebp - 0x1358], 0x356b6762
mov dword [ebp - 0x1354], 0x7174514a
mov dword [ebp - 0x1350], 0x7a744442
mov dword [ebp - 0x134c], 0x6b595150
mov dword [ebp - 0x1348], 0x706f514a
mov dword [ebp - 0x1344], 0x416f514c
mov dword [ebp - 0x1340], 0x63457841
mov dword [ebp - 0x133c], 0x7159794c
mov dword [ebp - 0x1338], 0x756f4861
mov dword [ebp - 0x1334], 0x6d494146
mov dword [ebp - 0x1330], 0x6577534d
mov dword [ebp - 0x132c], 0x69396748
mov dword [ebp - 0x1328], 0x31675344
mov dword [ebp - 0x1324], 0x4f495245
mov dword [ebp - 0x1320], 0x6d384246
mov dword [ebp - 0x131c], 0x5a637a65
mov dword [ebp - 0x1318], 0x32467744
mov dword [ebp - 0x1314], 0x34635344
mov dword [ebp - 0x1310], 0x73635163
mov dword [ebp - 0x130c], 0x46736742
mov dword [ebp - 0x1308], 0x316b684c
mov dword [ebp - 0x1304], 0x5738774b
mov dword [ebp - 0x1300], 0x56515344
mov dword [ebp - 0x12fc], 0x66417745
mov dword [ebp - 0x12f8], 0x7974674d
mov dword [ebp - 0x12f4], 0x2f525141
mov dword [ebp - 0x12f0], 0x7a674361
mov dword [ebp - 0x12ec], 0x39415341
mov dword [ebp - 0x12e8], 0x54515343
mov dword [ebp - 0x12e4], 0x2f396a4a
mov dword [ebp - 0x12e0], 0x4777414c
mov dword [ebp - 0x12dc], 0x66675242
mov dword [ebp - 0x12d8], 0x4855424c
mov dword [ebp - 0x12d4], 0x2f41324a
mov dword [ebp - 0x12d0], 0x326b334b
mov dword [ebp - 0x12cc], 0x70636866
mov dword [ebp - 0x12c8], 0x4b596e5a
mov dword [ebp - 0x12c4], 0x474d5349
mov dword [ebp - 0x12c0], 0x71345344
mov dword [ebp - 0x12bc], 0x31316842
mov dword [ebp - 0x12b8], 0x62777850
mov dword [ebp - 0x12b4], 0x6241525a
mov dword [ebp - 0x12b0], 0x48414149
mov dword [ebp - 0x12ac], 0x675a6842
mov dword [ebp - 0x12a8], 0x726f774a
mov dword [ebp - 0x12a4], 0x31417a65
mov dword [ebp - 0x12a0], 0x31497949
mov dword [ebp - 0x129c], 0x7351414c
mov dword [ebp - 0x1298], 0x3834434b
mov dword [ebp - 0x1294], 0x4741524e
mov dword [ebp - 0x1290], 0x6d426a4e
mov dword [ebp - 0x128c], 0x7838674f
mov dword [ebp - 0x1288], 0x45415164
mov dword [ebp - 0x1284], 0x6c355266
mov dword [ebp - 0x1280], 0x4f517861
mov dword [ebp - 0x127c], 0x7667784c
mov dword [ebp - 0x1278], 0x4a6b5350
mov dword [ebp - 0x1274], 0x3830434b
mov dword [ebp - 0x1270], 0x79735245
mov dword [ebp - 0x126c], 0x37456746
mov dword [ebp - 0x1268], 0x68456946
mov dword [ebp - 0x1264], 0x714d534f
mov dword [ebp - 0x1260], 0x62734443
mov dword [ebp - 0x125c], 0x3551544d
mov dword [ebp - 0x1258], 0x34526959
mov dword [ebp - 0x1254], 0x37304442
mov dword [ebp - 0x1250], 0x2f78674a
mov dword [ebp - 0x124c], 0x2b78424e
mov dword [ebp - 0x1248], 0x446f414a
mov dword [ebp - 0x1244], 0x6c6f7849
mov dword [ebp - 0x1240], 0x47387a4c
mov dword [ebp - 0x123c], 0x69784244
mov dword [ebp - 0x1238], 0x74777a65
mov dword [ebp - 0x1234], 0x46386947
mov dword [ebp - 0x1230], 0x716f6842
mov dword [ebp - 0x122c], 0x4951444d
mov dword [ebp - 0x1228], 0x44514146
mov dword [ebp - 0x1224], 0x74557850
mov dword [ebp - 0x1220], 0x7a4a7746
mov dword [ebp - 0x121c], 0x68467841
mov dword [ebp - 0x1218], 0x37775341
mov dword [ebp - 0x1214], 0x41554450
mov dword [ebp - 0x1210], 0x37444141
mov dword [ebp - 0x11a0], 0x6e415441
mov dword [ebp - 0x119c], 0x756b444f
mov dword [ebp - 0x1198], 0x34306e4f
mov dword [ebp - 0x1194], 0x7549444b
mov dword [ebp - 0x1190], 0x54677746
mov dword [ebp - 0x118c], 0x7768414a
mov dword [ebp - 0x1188], 0x67307949
mov dword [ebp - 0x1184], 0x4f6f4241
mov dword [ebp - 0x1180], 0x6145434f
mov dword [ebp - 0x117c], 0x6a454342
mov dword [ebp - 0x1178], 0x45304366
mov dword [ebp - 0x1174], 0x586b434a
mov dword [ebp - 0x1170], 0x6d457a50
mov dword [ebp - 0x116c], 0x71557959
mov dword [ebp - 0x1168], 0x3752674b
mov dword [ebp - 0x1164], 0x774a6741
mov dword [ebp - 0x1160], 0x6e30684a
mov dword [ebp - 0x115c], 0x3955674d
mov dword [ebp - 0x1158], 0x32346a45
mov dword [ebp - 0x1154], 0x796c584d
mov dword [ebp - 0x1150], 0x6d4e4742
mov dword [ebp - 0x114c], 0x336c4848
mov dword [ebp - 0x1148], 0x385a784a
mov dword [ebp - 0x1144], 0x496f794a
mov dword [ebp - 0x1140], 0x43734246
mov dword [ebp - 0x113c], 0x506b4349
mov dword [ebp - 0x1138], 0x50777763
mov dword [ebp - 0x1134], 0x68395461
mov dword [ebp - 0x1130], 0x6d38524b
mov dword [ebp - 0x112c], 0x72554841
mov dword [ebp - 0x1128], 0x51596844
mov dword [ebp - 0x1124], 0x65515142
mov dword [ebp - 0x1120], 0x3441534a
mov dword [ebp - 0x111c], 0x3263534b
mov dword [ebp - 0x1118], 0x37636a49
mov dword [ebp - 0x1114], 0x716b684a
mov dword [ebp - 0x1110], 0x6b736963
mov dword [ebp - 0x110c], 0x424d434e
mov dword [ebp - 0x1108], 0x4e557847
mov dword [ebp - 0x1104], 0x376f434d
mov dword [ebp - 0x1100], 0x754d4343
mov dword [ebp - 0x10fc], 0x5241674f
mov dword [ebp - 0x10f8], 0x766b4266
mov dword [ebp - 0x10f4], 0x6551484e
mov dword [ebp - 0x10f0], 0x7630514c
mov dword [ebp - 0x10ec], 0x7a4a424b
mov dword [ebp - 0x10e8], 0x68524849
mov dword [ebp - 0x10e4], 0x65454141
mov dword [ebp - 0x10e0], 0x6f45794a
mov dword [ebp - 0x10dc], 0x47514845
mov dword [ebp - 0x10d8], 0x744d7963
mov dword [ebp - 0x10d4], 0x556b6e49
push 0
sub esp, 0xc
mov dword [ebp - 0x10d0], 0x416b4243
mov ecx, esp
mov dword [ebp - 0x10cc], 0x57735345
lea eax, [ebp - 0x1025]
mov dword [ebp - 0x10c8], 0x61307a44
lea edx, [ebp - 0x120c]
mov dword [ebp - 0x10c4], 0x2f733345
push eax
push edx
lea esi, [ebp - 0x139c]
mov dword [ebp - 0x10c0], 0x62306a64
push esi
mov dword [ebp - 0x10bc], 0x6d345345
mov dword [ebp - 0x10b8], 0x71745148
mov dword [ebp - 0x10b4], 0x4d495263
mov dword [ebp - 0x10b0], 0x6b594749
mov dword [ebp - 0x10ac], 0x71347743
mov dword [ebp - 0x10a8], 0x37567850
mov dword [ebp - 0x10a4], 0x3355675a
mov dword [ebp - 0x10a0], 0x2f6c7943
mov dword [ebp - 0x109c], 0x4b676a4b
mov dword [ebp - 0x1098], 0x68515245
mov dword [ebp - 0x1094], 0x52557747
mov dword [ebp - 0x1090], 0x35415241
mov dword [ebp - 0x108c], 0x45415349
mov dword [ebp - 0x1088], 0x6d427863
mov dword [ebp - 0x1084], 0x33356a47
mov dword [ebp - 0x1080], 0x30737842
mov dword [ebp - 0x107c], 0x65305366
mov dword [ebp - 0x1078], 0x466b6865
mov dword [ebp - 0x1074], 0x48456946
mov dword [ebp - 0x1070], 0x50634444
mov dword [ebp - 0x106c], 0x36345361
mov dword [ebp - 0x1068], 0x7834434d
mov dword [ebp - 0x1064], 0x646b424f
mov dword [ebp - 0x1060], 0x66777950
mov dword [ebp - 0x105c], 0x7a317a43
mov dword [ebp - 0x1058], 0x42635165
mov dword [ebp - 0x1054], 0x2b6b414a
mov dword [ebp - 0x1050], 0x68594341
mov dword [ebp - 0x104c], 0x4f774250
mov dword [ebp - 0x1048], 0x34556a45
mov dword [ebp - 0x1044], 0x47514446
mov dword [ebp - 0x1040], 0x51387846
mov dword [ebp - 0x103c], 0x4d415341
mov dword [ebp - 0x1038], 0x5751474e
mov dword [ebp - 0x1034], 0x41517861
mov dword [ebp - 0x1030], 0x49454141
call fcn.004676d0
lea eax, [ebp - 0x1484]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push 0
sub esp, 0xc
mov edi, eax
mov ecx, esp
lea eax, [ebp - 0x1025]
push eax
lea eax, [ebp - 0x102c]
push eax
lea eax, [ebp - 0x11a0]
push eax
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov dword [ebp - 0x1208], eax
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x1208], eax
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1200], eax
mov ecx, edi
xor esi, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x519a01
sub ecx, edx
je 0x519a53
lea esp, [esp]
mov al, byte [esi + edi]
lea ecx, [ebp - 0x1208]
xor al, 0x8b
mov byte [ebp - 0x1025], al
lea eax, [ebp - 0x1025]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x519a33
sub ecx, edx
cmp esi, ecx
jb 0x519a10
mov eax, dword [ebp - 0x1208]
test eax, eax
je 0x519a53
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x141c]
call fcn.00467ae0
lea ecx, [ebp - 0x1484]
call fcn.00467ae0
push ebx
call dword [sym.imp.ADVAPI32.dll_DeleteService]
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov esi, eax
push ebx
call edi
push dword [ebp - 0x1424]
call edi
test esi, esi
je 0x519aaa
lea ecx, [ebp - 0x1428]
mov esi, 1
call fcn.004b5930
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
push 0x400
lea eax, [ebp - 0x1004]
push eax
push 0xd80d
call fcn.004be950
add esp, 0xc
test eax, eax
jne 0x519d47
push eax
sub esp, 0xc
mov dword [ebp - 0x12e8], 0x686f6a42
mov ecx, esp
mov dword [ebp - 0x12e4], 0x686c7950
lea eax, [ebp - 0x1025]
mov dword [ebp - 0x12e0], 0x3477444a
lea edx, [ebp - 0x120c]
mov dword [ebp - 0x12dc], 0x6a494363
push eax
push edx
lea esi, [ebp - 0x12e8]
mov dword [ebp - 0x12d8], 0x396f6949
push esi
mov dword [ebp - 0x12d4], 0x32734749
mov dword [ebp - 0x12d0], 0x3663444a
mov dword [ebp - 0x12cc], 0x7a55444d
mov dword [ebp - 0x12c8], 0x72426742
mov dword [ebp - 0x12c4], 0x67495244
mov dword [ebp - 0x12c0], 0x6b314443
mov dword [ebp - 0x12bc], 0x65596746
mov dword [ebp - 0x12b8], 0x2b306a4c
mov dword [ebp - 0x12b4], 0x33414861
mov dword [ebp - 0x12b0], 0x78564342
mov dword [ebp - 0x12ac], 0x32496864
mov dword [ebp - 0x12a8], 0x49494444
mov dword [ebp - 0x12a4], 0x4f387749
mov dword [ebp - 0x12a0], 0x5273324b
mov dword [ebp - 0x129c], 0x30734842
mov dword [ebp - 0x1298], 0x32734442
mov dword [ebp - 0x1294], 0x70303346
mov dword [ebp - 0x1290], 0x3834335a
mov dword [ebp - 0x128c], 0x4241775a
mov dword [ebp - 0x1288], 0x6c55414b
mov dword [ebp - 0x1284], 0x4a4d694d
mov dword [ebp - 0x1280], 0x64457763
mov dword [ebp - 0x127c], 0x696c444d
mov dword [ebp - 0x1278], 0x584d5343
mov dword [ebp - 0x1274], 0x5463524a
mov dword [ebp - 0x1270], 0x6c4d4742
mov dword [ebp - 0x126c], 0x6f6b5441
mov dword [ebp - 0x1268], 0x4b637a65
mov dword [ebp - 0x1264], 0x6e51414f
mov dword [ebp - 0x1260], 0x37303341
mov dword [ebp - 0x125c], 0x52305144
mov dword [ebp - 0x1258], 0x30524262
mov dword [ebp - 0x1254], 0x4f4d694b
mov dword [ebp - 0x1250], 0x6d6c414f
mov dword [ebp - 0x124c], 0x736f544d
mov dword [ebp - 0x1248], 0x7a413244
mov dword [ebp - 0x1244], 0x62635450
mov dword [ebp - 0x1240], 0x39425347
mov dword [ebp - 0x123c], 0x67556945
mov dword [ebp - 0x1238], 0x62736943
mov dword [ebp - 0x1234], 0x33705344
mov dword [ebp - 0x1230], 0x6d676749
mov dword [ebp - 0x122c], 0x6d4a6d46
mov dword [ebp - 0x1228], 0x32347747
mov dword [ebp - 0x1224], 0x6c733347
mov dword [ebp - 0x1220], 0x356f6846
mov dword [ebp - 0x121c], 0x476b774f
mov dword [ebp - 0x1218], 0x3677684c
mov dword [ebp - 0x1214], 0x4167514f
mov dword [ebp - 0x1210], 0x4a434141
call fcn.004676d0
lea eax, [ebp - 0x141c]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, eax
call fcn.0046bf80
push eax
lea eax, [ebp - 0x1004]
push 0x400
push eax
call fcn.0053a910
add esp, 0xc
lea ecx, [ebp - 0x141c]
call fcn.00467b80
mov eax, dword [ebp - 0x1410]
push 0
add eax, 0x2c
push eax
lea eax, [ebp - 0x1004]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x1428]
xor esi, esi
call fcn.004b5930
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
push str.invalid_vector_T__subscript
call fcn.0053af06
push str.invalid_vector_T__subscript
call fcn.0053af06
push str.vector_T__too_long
call fcn.0053aed8
push str.invalid_vector_T__subscript
call fcn.0053af06
push str.invalid_vector_T__subscript
call fcn.0053af06
int3