Function at 0x42db3b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x5c
mov eax, 0x4a46a8
call fcn.00456e48
sub esp, 0x39c
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [ebp + 0x28], esi
mov dword [ebp + 0x20], ebx
and dword [ebp - 4], ebx
xor eax, eax
inc eax
push eax
push str.SeRestorePrivilege
call fcn.0048dc3c
xor eax, eax
mov ecx, esi
inc eax
push eax
push str.SeBackupPrivilege
call fcn.0048dc3c
push 0x48
call sub.mfc140u.dll_operator_2
mov esi, eax
pop ecx
mov dword [ebp + 0x24], esi
xor eax, eax
inc eax
mov byte [ebp - 4], al
test esi, esi
je 0x42dbcb
push 0xfde9
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.00427d6d
add esp, 0xc
inc ebx
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
mov dword [ebp + 0x20], ebx
jb 0x42dbbc
mov eax, dword [eax]
push eax
mov ecx, esi
call fcn.004403fd
mov edi, eax
mov dword [ebp + 0x20], eax
jmp 0x42dbd0
xor edi, edi
mov dword [ebp + 0x20], edi
and dword [ebp - 4], 0
test bl, 1
je 0x42dbe4
lea ecx, [ebp - 0x1a8]
call fcn.00443a9b
xor ebx, ebx
mov ecx, edi
push ebx
call fcn.004404cc
test al, al
je 0x42e9e6
lea eax, [ebp + 0x5c]
push 0x4ca368
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 4
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.0043fcf3
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], bl
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x42e9d8
lea eax, [ebp - 0x64]
push 0x4ca378
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.0043fcf3
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], bl
mov edi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test edi, edi
je 0x42e9d5
push 0xf
pop eax
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x164], eax
mov byte [ebp - 0x178], bl
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], eax
mov byte [ebp - 0x160], bl
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], eax
mov byte [ebp - 0x148], bl
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], eax
mov byte [ebp - 0x130], bl
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x104], eax
mov byte [ebp - 0x118], bl
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], eax
mov byte [ebp - 0x100], bl
mov byte [ebp - 4], 0xb
push ebx
push 0x4dcbd0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], eax
mov byte [ebp - 0xb8], bl
call fcn.00444843
push 0xf
pop esi
push ebx
push 0x4dcbd0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], esi
mov byte [ebp - 0x30], bl
call fcn.00444843
push ebx
push 0x4dcbd0
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], esi
mov byte [ebp - 0xd0], bl
call fcn.00444843
mov dword [ebp - 0x8c], esi
lea ecx, [ebp - 0xa0]
push ebx
mov esi, 0x4dcbd0
mov byte [ebp - 4], 0xe
push esi
mov dword [ebp - 0x90], ebx
mov byte [ebp - 0xa0], bl
call fcn.00444843
push ebx
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], bl
call fcn.00444843
push ebx
push esi
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], bl
call fcn.00444843
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x11
push 0x4ca384
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.0043fecf
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x11
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x42de36
lea eax, [ebp - 0x60]
push 0x4ca384
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.0043fecf
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x42de13
sub edx, esi
lea ecx, [ebp - 0xb8]
push edx
push eax
call fcn.00444843
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x6c]
push 0x4ca390
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.0043fecf
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x11
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x42deb6
lea eax, [ebp - 0x70]
push 0x4ca390
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.0043fecf
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x42de96
sub edx, esi
lea ecx, [ebp - 0x30]
push edx
push eax
call fcn.00444843
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x74]
push 0x4c3348
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42dee6
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.00444843
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x17
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.0043fecf
lea ecx, [ebp + 0x2c]
mov esi, eax
call fcn.00443a9b
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x42e001
lea eax, [ebp - 0x7c]
push 0x4c3348
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42df5f
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.00444843
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x19
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.0043fecf
mov edx, eax
mov dword [ebp + 0x54], ebx
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42df9d
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
push ebx
push 0xfde9
lea eax, [ebp + 0x44]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004857b5
add esp, 0x10
lea ecx, [ebp - 0xd0]
push eax
call fcn.004465da
lea ecx, [ebp - 0x190]
call fcn.00443a9b
lea ecx, [ebp + 0x44]
call fcn.00443a9b
lea ecx, [ebp + 0x2c]
call fcn.00443a9b
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x80]
push 0x4ca39c
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.0043fecf
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x11
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x42e0d6
lea eax, [ebp - 0x84]
push 0x4ca39c
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.0043fecf
mov edx, eax
mov dword [ebp + 0x54], ebx
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e077
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
push ebx
push 0xfde9
lea eax, [ebp + 0x44]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004857b5
add esp, 0x10
lea ecx, [ebp - 0xa0]
push eax
call fcn.004465da
lea ecx, [ebp - 0x190]
call fcn.00443a9b
lea ecx, [ebp + 0x44]
call fcn.00443a9b
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x88]
push 0x4c95d4
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e109
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.00444843
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x1f
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.0043fecf
lea ecx, [ebp + 0x2c]
mov esi, eax
call fcn.00443a9b
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x42e1dc
lea eax, [ebp - 0x4c]
push 0x4c95d4
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e185
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.00444843
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x21
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.0043fecf
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x42e1b4
sub edx, esi
lea ecx, [ebp - 0x48]
push edx
push eax
call fcn.00444843
lea ecx, [ebp + 0x2c]
call fcn.00443a9b
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x50]
push 0x4ca3ac
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e20c
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.00444843
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x23
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.0043fecf
lea ecx, [ebp + 0x2c]
mov esi, eax
call fcn.00443a9b
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x42e2df
lea eax, [ebp - 0x54]
push 0x4ca3ac
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e285
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.00444843
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x25
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.0043fecf
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x42e2b4
sub edx, esi
lea ecx, [ebp - 0xe8]
push edx
push eax
call fcn.00444843
lea ecx, [ebp + 0x2c]
call fcn.00443a9b
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
push 0x4dcbf8
lea ecx, [ebp - 0xe8]
call fcn.00451cec
mov bh, al
lea eax, [ebp - 0x58]
push 0x4ca3b8
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e323
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e36a
mov esi, reloc.OLEAUT32.dll_SysReAllocString
jmp 0x42e457
lea eax, [ebp - 0x78]
push 0x4ca3c4
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e39c
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e3e0
mov esi, SysReAllocString
jmp 0x42e457
lea eax, [ebp - 0x5c]
push 0x4ca3d0
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e412
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
xor esi, esi
mov eax, SysReAllocString
test bl, bl
cmovne esi, eax
lea ecx, [ebp + 0x5c]
lea eax, [ebp - 0x30]
push ecx
cmp bh, 1
jne 0x42e46a
push 0xf013f
jmp 0x42e46f
push 0xf003f
cmp dword [ebp - 0x1c], 0x10
cmovae eax, dword [ebp - 0x30]
xor ebx, ebx
push ebx
push eax
push esi
call fcn.0046fc0c
add esp, 0x14
cmp eax, 2
jne 0x42e4bf
xor eax, eax
lea ecx, [ebp + 0x5c]
push ebx
inc eax
cmp dword [0x4fdfd8], eax
lea eax, [ebp - 0x30]
push ecx
push ebx
jne 0x42e4a4
push 0xf013f
jmp 0x42e4a9
push 0xf003f
cmp dword [ebp - 0x1c], 0x10
push 4
cmovae eax, dword [ebp - 0x30]
push ebx
push ebx
push eax
push esi
call fcn.0042acba
add esp, 0x24
test eax, eax
jne 0x42e916
lea eax, [ebp + 0x1c]
push 0x4ca3dc
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x54], ebx
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e4f7
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e539
push 3
pop edx
jmp 0x42e8cf
lea eax, [ebp + 0x18]
push 0x4ca3f4
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e56b
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e5a9
push 4
jmp 0x42e533
lea eax, [ebp + 0x10]
push 0x4ca40c
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e5db
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e61c
push 5
jmp 0x42e533
lea eax, [ebp + 0xc]
push 0x4ca438
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2c
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e64e
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e68f
push 2
jmp 0x42e533
lea eax, [ebp + 0x14]
push 0x4ca458
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e6c1
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e702
push 6
jmp 0x42e533
lea eax, [ebp + 8]
push 0x4ca46c
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e734
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e775
push 7
jmp 0x42e533
lea eax, [ebp + 4]
push 0x4ca488
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e7a7
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e7ea
xor ebx, ebx
mov edx, ebx
jmp 0x42e8d1
lea eax, [ebp]
push 0x4ca49c
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e81c
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x42e85d
push 0xb
jmp 0x42e533
lea eax, [ebp - 0x10]
push 0x4ca4b4
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e88f
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444843
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00451cbf
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00443a9b
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
xor edx, edx
test bl, bl
push 1
pop eax
cmovne edx, eax
xor ebx, ebx
push dword [ebp - 0x90]
cmp dword [ebp - 0x8c], 0x10
lea ecx, [ebp - 0xa0]
lea eax, [ebp - 0xd0]
cmovae ecx, dword [ebp - 0xa0]
cmp dword [ebp - 0xbc], 0x10
push ecx
cmovae eax, dword [ebp - 0xd0]
push edx
push ebx
push eax
push dword [ebp + 0x5c]
call fcn.00412f9d
push dword [ebp + 0x5c]
call fcn.004380c9
add esp, 0x1c
lea eax, [ebp + 0x24]
push 0x4ca378
push eax
call fcn.00468813
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.0043fd4b
lea ecx, [ebp + 0x24]
mov edi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0xe8]
call fcn.00443a9b
lea ecx, [ebp - 0x48]
call fcn.00443a9b
lea ecx, [ebp - 0xa0]
call fcn.00443a9b
lea ecx, [ebp - 0xd0]
call fcn.00443a9b
lea ecx, [ebp - 0x30]
call fcn.00443a9b
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xb
call fcn.00443a9b
push 0xf
pop eax
test edi, edi
jne 0x42dcdd
lea ecx, [ebp - 0x100]
call fcn.00443a9b
lea ecx, [ebp - 0x118]
call fcn.00443a9b
lea ecx, [ebp - 0x130]
call fcn.00443a9b
lea ecx, [ebp - 0x148]
call fcn.00443a9b
lea ecx, [ebp - 0x160]
call fcn.00443a9b
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], bl
call fcn.00443a9b
mov edi, dword [ebp + 0x20]
test edi, edi
je 0x42e9e6
mov eax, dword [edi]
xor ecx, ecx
inc ecx
push ecx
mov ecx, edi
call dword [eax]
mov ecx, dword [ebp + 0x28]
push ebx
push str.SeRestorePrivilege
call fcn.0048dc3c
mov ecx, dword [ebp + 0x28]
push ebx
push str.SeBackupPrivilege
call fcn.0048dc3c
push 0x200
lea eax, [ebp - 0x3a8]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp + 0x28]
push 0x4ca4c4
push eax
call fcn.004b734f
add esp, 0x14
mov edi, 0x100
mov byte [ebp - 4], 0x33
push edi
lea ecx, [ebp - 0x3a8]
push ecx
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
mov esi, 0x4fde6c
push eax
mov ecx, esi
call fcn.0042fce1
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea eax, [ebp + 0x24]
mov byte [ebp - 4], 0x34
push 0x4ca4e4
push eax
call fcn.004b734f
pop ecx
pop ecx
push edi
lea edx, [ebp - 0x3a8]
mov byte [ebp - 4], 0x35
push edx
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
mov ecx, esi
call fcn.0042fce1
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
push 0x1040
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x36
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
call fcn.00476f10
add esp, 0x10
mov ecx, 0x4fd898
call fcn.0048820b
test al, al
jne 0x42ed97
mov edi, 0x4fdd48
mov ecx, edi
call fcn.00477202
push eax
lea ecx, [ebp + 0x44]
call fcn.004430f4
cmp dword [ebp + 0x58], 8
lea eax, [ebp + 0x44]
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0x37
cmovae eax, dword [ebp + 0x44]
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea eax, [ebp + 0x28]
mov byte [ebp - 4], 0x38
push 0x4c9f58
push eax
call fcn.004b734f
pop ecx
pop ecx
mov esi, 0x4bbd30
mov byte [ebp - 4], 0x39
push esi
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x24]
push 0x4c9f98
push eax
call fcn.004b734f
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3a
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c9fe4
push eax
call fcn.004b734f
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3b
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp]
push 0x4ca020
push eax
call fcn.004b734f
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3c
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 4]
push 0x4ca068
push eax
call fcn.004b734f
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3d
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 8]
push 0x4ca0b4
push eax
call fcn.004b734f
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3e
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x14]
push 0x4ca0e0
push eax
call fcn.004b734f
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3f
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0xc]
push 0x4ca104
push eax
call fcn.004b734f
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x10]
push 0x4ca13c
push eax
call fcn.004b734f
pop ecx
pop ecx
mov byte [ebp - 4], 0x41
push esi
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x18]
push 0x4c9de4
push eax
call fcn.004b734f
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x42
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x1c]
push 0x4c9e1c
push eax
call fcn.004b734f
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x43
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
sub esp, 0x18
lea ecx, [ebp + 0x5c]
mov esi, esp
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
mov ecx, esi
call fcn.004430f4
mov ecx, edi
call fcn.00499759
mov ecx, 0x4fd9a0
call fcn.00463bdb
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 0x44]
call fcn.00443329
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 0x68]
call fcn.00443329
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add ebp, 0x60
leave
ret 0x18