Function at 0x416ce0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4395e3
mov eax, dword fs:[0]
push eax
sub esp, 0x870
mov eax, dword [0x44e3ec]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x874]
mov dword [ebp - 4], 0
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x86c], eax
push esi
push dword [ebp + 8]
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 1
push eax
mov dword [ebp - method.Args::CmdLine.virtual_0], vtable.Args::CmdLine.0
call fcn.00412a80
mov ecx, dword [ebp - 0x20]
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x868], ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x85c], ecx
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.00410010
xorps xmm0, xmm0
mov dword [ebp - 0x848], 0
movups xmmword [ebp - 0x858], xmm0
mov dword [ebp - 0x3ac], 0
xor eax, eax
mov dword [ebp - method.Args::Arg.virtual_0], vtable.Args::Arg.0
mov word [ebp - 0x3a8], 1
mov byte [ebp - 0x3a6], 0
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x390], 7
mov word [ebp - 0x3a4], ax
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], 7
mov word [ebp - 0x38c], ax
push 0xc
push str.imageservice
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 5
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], 7
mov word [ebp - 0x374], ax
call fcn.00410cc0
push 3
xor eax, eax
mov byte [ebp - 4], 6
push 0x43aba0
lea ecx, [ebp - 0x35c]
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 7
mov word [ebp - 0x35c], ax
call fcn.00410cc0
xor eax, eax
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x330], 7
mov word [ebp - 0x344], ax
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x318], 7
mov word [ebp - 0x32c], ax
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x300], 7
mov word [ebp - 0x314], ax
push 0x10
push str.imageservice.exe
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x314]
push eax
mov byte [ebp - 4], 8
call fcn.00410cc0
mov edx, dword [ebp - 0x18]
mov byte [ebp - 4], 7
cmp edx, 8
jb 0x416f1d
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416f13
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41800d
push edx
push ecx
call fcn.0041b4d3
add esp, 8
push 0x19
xor eax, eax
mov dword [ebp - 0x1c], 0
push str.Default:_imageservice.exe
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x344]
push eax
mov byte [ebp - 4], 9
call fcn.00410cc0
mov edx, dword [ebp - 0x18]
mov byte [ebp - 4], 7
cmp edx, 8
jb 0x416f9c
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416f92
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41800d
push edx
push ecx
call fcn.0041b4d3
add esp, 8
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
push 0
push 1
push str.snapshot
lea ecx, [ebp - 0x6d4]
call fcn.00401900
push 0xc
xor eax, eax
mov byte [ebp - 4], 0xa
push str.snapshot.exe
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x638]
push eax
mov byte [ebp - 4], 0xb
call fcn.00410cc0
mov edx, dword [ebp - 0x18]
mov byte [ebp - 4], 0xa
cmp edx, 8
jb 0x417045
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41703b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41800d
push edx
push ecx
call fcn.0041b4d3
add esp, 8
push 0x15
xor eax, eax
mov dword [ebp - 0x1c], 0
push str.Default:_snapshot.exe
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x668]
push eax
mov byte [ebp - 4], 0xc
call fcn.00410cc0
mov edx, dword [ebp - 0x18]
mov byte [ebp - 4], 0xa
cmp edx, 8
jb 0x4170c4
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4170ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41800d
push edx
push ecx
call fcn.0041b4d3
add esp, 8
lea eax, [ebp - 0x6d4]
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
mov dword [ebp - 0x2f8], 0
xor eax, eax
mov dword [ebp - method.Args::Arg.virtual_0], vtable.Args::Arg.0
mov word [ebp - 0x2f4], 1
mov byte [ebp - 0x2f2], 0
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 7
mov word [ebp - 0x2f0], ax
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], 7
mov word [ebp - 0x2d8], ax
push 4
push str.cert
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], 7
mov word [ebp - 0x2c0], ax
call fcn.00410cc0
push 3
xor eax, eax
mov byte [ebp - 4], 0x10
push 0x43aba0
lea ecx, [ebp - 0x2a8]
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 7
mov word [ebp - 0x2a8], ax
call fcn.00410cc0
xor eax, eax
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 7
mov word [ebp - 0x290], ax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
push 0x10
push str.service_cert.pem
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x260]
push eax
mov byte [ebp - 4], 0x12
call fcn.00410cc0
mov edx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x11
cmp edx, 8
jb 0x417256
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41724c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41800d
push edx
push ecx
call fcn.0041b4d3
add esp, 8
push 0x19
xor eax, eax
mov dword [ebp - 0x1c], 0
push str.Default:_service_cert.pem
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x290]
push eax
mov byte [ebp - 4], 0x13
call fcn.00410cc0
mov edx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x11
cmp edx, 8
jb 0x4172d5
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4172cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41800d
push edx
push ecx
call fcn.0041b4d3
add esp, 8
lea eax, [ebp - 0x2fc]
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
mov dword [ebp - 0x244], 0
xor eax, eax
mov dword [ebp - method.Args::Arg.virtual_0], vtable.Args::Arg.0
mov word [ebp - 0x240], 1
mov byte [ebp - 0x23e], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 7
mov word [ebp - 0x23c], ax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], 7
mov word [ebp - 0x224], ax
push 3
push 0x43b740
lea ecx, [ebp - 0x20c]
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], 7
mov word [ebp - 0x20c], ax
call fcn.00410cc0
push 3
xor eax, eax
mov byte [ebp - 4], 0x17
push 0x43aba0
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 7
mov word [ebp - 0x1f4], ax
call fcn.00410cc0
xor eax, eax
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 7
mov word [ebp - 0x1dc], ax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 7
mov word [ebp - 0x1c4], ax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], 7
mov word [ebp - 0x1ac], ax
push 0xf
push str.service_key.pem
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x1ac]
push eax
mov byte [ebp - 4], 0x19
call fcn.00410cc0
mov edx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
cmp edx, 8
jb 0x417467
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41745d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41800d
push edx
push ecx
call fcn.0041b4d3
add esp, 8
push 0x18
xor eax, eax
mov dword [ebp - 0x1c], 0
push str.Default:_service_key.pem
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x1dc]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00410cc0
mov edx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
cmp edx, 8
jb 0x4174e6
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4174dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41800d
push edx
push ecx
call fcn.0041b4d3
add esp, 8
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
mov dword [ebp - 0x190], 0
xor eax, eax
mov dword [ebp - method.Args::Arg.virtual_0], vtable.Args::Arg.0
mov word [ebp - 0x18c], 1
mov byte [ebp - 0x18a], 0
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 7
mov word [ebp - 0x188], ax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], 7
mov word [ebp - 0x170], ax
push 7
push str.apiport
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], 7
mov word [ebp - 0x158], ax
call fcn.00410cc0
push 3
xor eax, eax
mov byte [ebp - 4], 0x1e
push 0x43aba0
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 7
mov word [ebp - 0x140], ax
call fcn.00410cc0
xor eax, eax
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
push 5
push str.64007
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 0x20
call fcn.00410cc0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.00408230
push 0xe
xor eax, eax
mov dword [ebp - 0x1c], 0
push str.Default:_64007
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x128]
call fcn.00410cc0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.00408230
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
mov dword [ebp - 0x61c], 0
xor eax, eax
mov dword [ebp - method.Args::Arg.virtual_0], vtable.Args::Arg.0
mov word [ebp - 0x618], 0x101
mov byte [ebp - 0x616], 0
mov dword [ebp - 0x604], 0
mov dword [ebp - 0x600], 7
mov word [ebp - 0x614], ax
mov dword [ebp - 0x5ec], eax
mov dword [ebp - 0x5e8], 7
mov word [ebp - 0x5fc], ax
push 6
push str.target
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0x5d0], 7
mov word [ebp - 0x5e4], ax
call fcn.00410cc0
push 3
xor eax, eax
mov byte [ebp - 4], 0x25
push 0x43aba0
lea ecx, [ebp - 0x5cc]
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x5b8], 7
mov word [ebp - 0x5cc], ax
call fcn.00410cc0
xor eax, eax
mov dword [ebp - 0x5a4], 0
mov dword [ebp - 0x5a0], 7
mov word [ebp - 0x5b4], ax
mov dword [ebp - 0x58c], eax
mov dword [ebp - 0x588], 7
mov word [ebp - 0x59c], ax
mov dword [ebp - 0x574], eax
mov dword [ebp - 0x570], 7
mov word [ebp - 0x584], ax
lea eax, [ebp - 0x620]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
mov dword [ebp - 0x568], 0
xor eax, eax
mov dword [ebp - method.Args::Arg.virtual_0], vtable.Args::Arg.0
mov word [ebp - 0x564], 0x101
mov byte [ebp - 0x562], 0
mov dword [ebp - 0x550], 0
mov dword [ebp - 0x54c], 7
mov word [ebp - 0x560], ax
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], 7
mov word [ebp - 0x548], ax
push 0xa
push str.targetuser
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], 7
mov word [ebp - 0x530], ax
call fcn.00410cc0
push 3
xor eax, eax
mov byte [ebp - 4], 0x2a
push 0x43aba0
lea ecx, [ebp - 0x518]
mov dword [ebp - 0x508], 0
mov dword [ebp - 0x504], 7
mov word [ebp - 0x518], ax
call fcn.00410cc0
xor eax, eax
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4ec], 7
mov word [ebp - 0x500], ax
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], 7
mov word [ebp - 0x4e8], ax
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], 7
mov word [ebp - 0x4d0], ax
lea eax, [ebp - 0x56c]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
push 1
push 1
push str.targetpw
lea ecx, [ebp - 0x788]
call fcn.00401900
lea eax, [ebp - 0x788]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
mov dword [ebp - 0xdc], 0
xor eax, eax
mov dword [ebp - 0xe0], vtable.Args::Arg.0
mov word [ebp - 0xd8], 1
mov byte [ebp - 0xd6], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
push 0x10
push str.targetadminshare
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
call fcn.00410cc0
push 3
xor eax, eax
mov byte [ebp - 4], 0x30
push 0x43aba0
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
call fcn.00410cc0
xor eax, eax
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x1c], eax
push 2
push 0x43b818
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x32
call fcn.00410cc0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x31
call fcn.00408230
push 0xb
xor eax, eax
mov dword [ebp - 0x1c], 0
push str.Default:_C_
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x33
call fcn.00410cc0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x31
call fcn.00408230
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
push 1
lea ecx, [ebp - 0x844]
call fcn.00407230
mov edx, dword [esi]
xor eax, eax
mov ecx, edx
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417ab3
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00410cc0
mov ecx, dword [ebp - 0x790]
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 0x35
mov eax, dword [ecx]
call dword [eax + 0x10]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x34
call fcn.00408230
push 0x1f
xor eax, eax
mov dword [ebp - 0x1c], 0
push str.AUVESY_service_remote_installer
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00410cc0
mov ecx, dword [ebp - 0x790]
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 0x36
mov eax, dword [ecx]
call dword [eax + 0x14]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x34
call fcn.00408230
lea eax, [ebp - 0x844]
push eax
lea ecx, [ebp - 0x874]
call fcn.004103b0
lea ecx, [ebp - 0x874]
call fcn.00412ea0
lea ecx, [ebp - 0x4b8]
call fcn.004071f0
xor eax, eax
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 7
mov word [ebp - 0x458], ax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], 7
mov word [ebp - 0x440], ax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], 7
mov word [ebp - 0x428], ax
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], 7
mov word [ebp - 0x410], ax
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], 7
mov word [ebp - 0x3f8], ax
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], 7
mov word [ebp - 0x3e0], ax
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], 7
mov word [ebp - 0x3c8], ax
cmp dword [ebp - 0x394], 0
lea ecx, [ebp - 0x3a4]
lea eax, [ebp - 0x314]
mov byte [ebp - 4], 0x37
cmovne eax, ecx
lea ecx, [ebp - 0x4b8]
push eax
call fcn.00401a30
cmp dword [ebp - 0x6b8], 0
lea ecx, [ebp - 0x6c8]
lea eax, [ebp - 0x638]
cmovne eax, ecx
lea ecx, [ebp - 0x4a0]
push eax
call fcn.00401a30
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x2e0], 0
lea ecx, [ebp - 0x2f0]
cmovne eax, ecx
lea ecx, [ebp - 0x488]
push eax
call fcn.00401a30
cmp dword [ebp - 0x22c], 0
lea ecx, [ebp - 0x23c]
lea eax, [ebp - 0x1ac]
cmovne eax, ecx
lea ecx, [ebp - 0x470]
push eax
call fcn.00401a30
cmp dword [ebp - 0x178], 0
lea ecx, [ebp - 0x188]
lea eax, [ebp - 0xf8]
cmovne eax, ecx
lea ecx, [ebp - 0x458]
cmp ecx, eax
je 0x417cc0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x417cb3
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x458]
call fcn.00410cc0
cmp dword [ebp - 0x604], 0
lea ecx, [ebp - 0x614]
lea eax, [ebp - 0x584]
cmovne eax, ecx
lea ecx, [ebp - 0x440]
cmp ecx, eax
je 0x417cf8
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x417ceb
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x440]
call fcn.00410cc0
cmp dword [ebp - 0x550], 0
lea ecx, [ebp - 0x560]
lea eax, [ebp - 0x4d0]
cmovne eax, ecx
lea ecx, [ebp - 0x428]
cmp ecx, eax
je 0x417d30
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x417d23
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x428]
call fcn.00410cc0
cmp dword [ebp - 0x76c], 0
lea ecx, [ebp - 0x77c]
lea eax, [ebp - 0x6ec]
cmovne eax, ecx
lea ecx, [ebp - 0x3e0]
cmp ecx, eax
je 0x417d68
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x417d5b
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x3e0]
call fcn.00410cc0
cmp dword [ebp - 0xc4], 0
lea ecx, [ebp - 0xd4]
lea eax, [ebp - 0x44]
cmovne eax, ecx
lea ecx, [ebp - 0x3c8]
cmp ecx, eax
je 0x417d9d
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x417d90
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x3c8]
call fcn.00410cc0
cmp dword [ebp - 0x414], 8
lea eax, [ebp - 0x428]
push 0x5c
cmovae eax, dword [ebp - 0x428]
push 0
push dword [ebp - 0x418]
push eax
call fcn.00405580
mov esi, eax
add esp, 0x10
cmp esi, 0xffffffff
je 0x417e1c
push 0xffffffffffffffff
lea ecx, [esi + 1]
push ecx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x428]
call fcn.00415d30
push eax
lea ecx, [ebp - 0x410]
call fcn.00408f00
lea ecx, [ebp - 0x2c]
call fcn.00408230
push esi
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x428]
call fcn.00415d30
push eax
lea ecx, [ebp - 0x3f8]
call fcn.00408f00
lea ecx, [ebp - 0x2c]
call fcn.00408230
jmp 0x417e42
cmp dword [ebp - 0x414], 8
lea eax, [ebp - 0x428]
push dword [ebp - 0x418]
cmovae eax, dword [ebp - 0x428]
lea ecx, [ebp - 0x410]
push eax
call fcn.00410cc0
lea eax, [ebp - 0x4b8]
mov byte [ebp - 4], 0x38
push eax
call fcn.0040c130
add esp, 4
lea ecx, [ebp - 0x4b8]
call fcn.00408930
mov ecx, dword [ebp - 0x790]
test ecx, ecx
je 0x417e70
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [ebp - 0x844]
call fcn.00408440
lea ecx, [ebp - 0xe0]
call fcn.00408440
lea ecx, [ebp - 0x788]
call fcn.00408440
lea ecx, [ebp - 0x56c]
call fcn.00408440
lea ecx, [ebp - 0x620]
call fcn.00408440
lea ecx, [ebp - 0x194]
call fcn.00408440
lea ecx, [ebp - 0x248]
call fcn.00408440
lea ecx, [ebp - 0x2fc]
call fcn.00408440
lea ecx, [ebp - 0x6d4]
call fcn.00408440
lea ecx, [ebp - 0x3b0]
call fcn.00408440
lea ecx, [ebp - 0x858]
mov dword [ebp - method.Args::CmdLine.virtual_0], vtable.Args::CmdLine.0
call fcn.00408360
lea ecx, [ebp - 0x868]
call fcn.00410010
xor eax, eax
jmp 0x417fc0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041b949
mov esp, ebp
pop ebp
ret
call fcn.0042069c
int3