Function at 0x49279b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x5c
mov eax, 0x49f5f0
call fcn.0045ce8c
sub esp, 0x39c
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [ebp + 0x28], esi
mov dword [ebp + 0x20], ebx
and dword [ebp - 4], ebx
xor eax, eax
inc eax
push eax
push str.SeRestorePrivilege
call fcn.0043c169
xor eax, eax
mov ecx, esi
inc eax
push eax
push str.SeBackupPrivilege
call fcn.0043c169
push 0x48
call sub.mfc140u.dll_operator_2
mov esi, eax
pop ecx
mov dword [ebp + 0x24], esi
xor eax, eax
inc eax
mov byte [ebp - 4], al
test esi, esi
je 0x49282b
push 0xfde9
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.0049401b
add esp, 0xc
inc ebx
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
mov dword [ebp + 0x20], ebx
jb 0x49281c
mov eax, dword [eax]
push eax
mov ecx, esi
call fcn.0044643d
mov edi, eax
mov dword [ebp + 0x20], eax
jmp 0x492830
xor edi, edi
mov dword [ebp + 0x20], edi
and dword [ebp - 4], 0
test bl, 1
je 0x492844
lea ecx, [ebp - 0x1a8]
call fcn.00449adb
xor ebx, ebx
mov ecx, edi
push ebx
call fcn.0044650c
test al, al
je 0x493646
lea eax, [ebp + 0x5c]
push 0x4ca420
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 4
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00445d33
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], bl
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x493638
lea eax, [ebp - 0x64]
push 0x4ca430
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.00445d33
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], bl
mov edi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test edi, edi
je 0x493635
push 0xf
pop eax
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x164], eax
mov byte [ebp - 0x178], bl
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], eax
mov byte [ebp - 0x160], bl
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], eax
mov byte [ebp - 0x148], bl
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], eax
mov byte [ebp - 0x130], bl
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x104], eax
mov byte [ebp - 0x118], bl
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], eax
mov byte [ebp - 0x100], bl
mov byte [ebp - 4], 0xb
push ebx
push 0x4dcda0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], eax
mov byte [ebp - 0xb8], bl
call fcn.0044a89a
push 0xf
pop esi
push ebx
push 0x4dcda0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], esi
mov byte [ebp - 0x30], bl
call fcn.0044a89a
push ebx
push 0x4dcda0
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], esi
mov byte [ebp - 0xd0], bl
call fcn.0044a89a
mov dword [ebp - 0x8c], esi
lea ecx, [ebp - 0xa0]
push ebx
mov esi, 0x4dcda0
mov byte [ebp - 4], 0xe
push esi
mov dword [ebp - 0x90], ebx
mov byte [ebp - 0xa0], bl
call fcn.0044a89a
push ebx
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], bl
call fcn.0044a89a
push ebx
push esi
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], bl
call fcn.0044a89a
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x11
push 0x4ca43c
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00445f0f
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x11
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x492a96
lea eax, [ebp - 0x60]
push 0x4ca43c
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00445f0f
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x492a73
sub edx, esi
lea ecx, [ebp - 0xb8]
push edx
push eax
call fcn.0044a89a
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x6c]
push 0x4ca448
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00445f0f
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x11
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x492b16
lea eax, [ebp - 0x70]
push 0x4ca448
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00445f0f
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x492af6
sub edx, esi
lea ecx, [ebp - 0x30]
push edx
push eax
call fcn.0044a89a
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x74]
push 0x4c33b8
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492b46
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.0044a89a
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x17
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00445f0f
lea ecx, [ebp + 0x2c]
mov esi, eax
call fcn.00449adb
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x492c61
lea eax, [ebp - 0x7c]
push 0x4c33b8
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492bbf
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.0044a89a
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x19
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00445f0f
mov edx, eax
mov dword [ebp + 0x54], ebx
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492bfd
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
push ebx
push 0xfde9
lea eax, [ebp + 0x44]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.00441834
add esp, 0x10
lea ecx, [ebp - 0xd0]
push eax
call fcn.0044c631
lea ecx, [ebp - 0x190]
call fcn.00449adb
lea ecx, [ebp + 0x44]
call fcn.00449adb
lea ecx, [ebp + 0x2c]
call fcn.00449adb
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x80]
push 0x4ca454
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00445f0f
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x11
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x492d36
lea eax, [ebp - 0x84]
push 0x4ca454
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00445f0f
mov edx, eax
mov dword [ebp + 0x54], ebx
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492cd7
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
push ebx
push 0xfde9
lea eax, [ebp + 0x44]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.00441834
add esp, 0x10
lea ecx, [ebp - 0xa0]
push eax
call fcn.0044c631
lea ecx, [ebp - 0x190]
call fcn.00449adb
lea ecx, [ebp + 0x44]
call fcn.00449adb
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x88]
push 0x4c968c
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492d69
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.0044a89a
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x1f
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00445f0f
lea ecx, [ebp + 0x2c]
mov esi, eax
call fcn.00449adb
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x492e3c
lea eax, [ebp - 0x4c]
push 0x4c968c
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492de5
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.0044a89a
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x21
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00445f0f
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x492e14
sub edx, esi
lea ecx, [ebp - 0x48]
push edx
push eax
call fcn.0044a89a
lea ecx, [ebp + 0x2c]
call fcn.00449adb
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x50]
push 0x4ca464
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492e6c
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.0044a89a
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x23
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00445f0f
lea ecx, [ebp + 0x2c]
mov esi, eax
call fcn.00449adb
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x492f3f
lea eax, [ebp - 0x54]
push 0x4ca464
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492ee5
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.0044a89a
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x25
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00445f0f
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x492f14
sub edx, esi
lea ecx, [ebp - 0xe8]
push edx
push eax
call fcn.0044a89a
lea ecx, [ebp + 0x2c]
call fcn.00449adb
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
push 0x4dcdc8
lea ecx, [ebp - 0xe8]
call fcn.00457d43
mov bh, al
lea eax, [ebp - 0x58]
push 0x4ca470
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492f83
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x492fca
mov esi, reloc.OLEAUT32.dll_SysReAllocString
jmp 0x4930b7
lea eax, [ebp - 0x78]
push 0x4ca47c
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492ffc
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x493040
mov esi, SysReAllocString
jmp 0x4930b7
lea eax, [ebp - 0x5c]
push 0x4ca488
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493072
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
xor esi, esi
mov eax, SysReAllocString
test bl, bl
cmovne esi, eax
lea ecx, [ebp + 0x5c]
lea eax, [ebp - 0x30]
push ecx
cmp bh, 1
jne 0x4930ca
push 0xf013f
jmp 0x4930cf
push 0xf003f
cmp dword [ebp - 0x1c], 0x10
cmovae eax, dword [ebp - 0x30]
xor ebx, ebx
push ebx
push eax
push esi
call fcn.00477db1
add esp, 0x14
cmp eax, 2
jne 0x49311f
xor eax, eax
lea ecx, [ebp + 0x5c]
push ebx
inc eax
cmp dword [0x5010e8], eax
lea eax, [ebp - 0x30]
push ecx
push ebx
jne 0x493104
push 0xf013f
jmp 0x493109
push 0xf003f
cmp dword [ebp - 0x1c], 0x10
push 4
cmovae eax, dword [ebp - 0x30]
push ebx
push ebx
push eax
push esi
call fcn.0041521f
add esp, 0x24
test eax, eax
jne 0x493576
lea eax, [ebp + 0x1c]
push 0x4ca494
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x54], ebx
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493157
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x493199
push 3
pop edx
jmp 0x49352f
lea eax, [ebp + 0x18]
push 0x4ca4ac
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4931cb
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x493209
push 4
jmp 0x493193
lea eax, [ebp + 0x10]
push 0x4ca4c4
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x49323b
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x49327c
push 5
jmp 0x493193
lea eax, [ebp + 0xc]
push 0x4ca4f0
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2c
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4932ae
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4932ef
push 2
jmp 0x493193
lea eax, [ebp + 0x14]
push 0x4ca510
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493321
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x493362
push 6
jmp 0x493193
lea eax, [ebp + 8]
push 0x4ca524
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493394
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4933d5
push 7
jmp 0x493193
lea eax, [ebp + 4]
push 0x4ca540
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493407
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x49344a
xor ebx, ebx
mov edx, ebx
jmp 0x493531
lea eax, [ebp]
push 0x4ca554
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x49347c
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4934bd
push 0xb
jmp 0x493193
lea eax, [ebp - 0x10]
push 0x4ca56c
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4934ef
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.0044a89a
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00457d16
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.00449adb
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
xor edx, edx
test bl, bl
push 1
pop eax
cmovne edx, eax
xor ebx, ebx
push dword [ebp - 0x90]
cmp dword [ebp - 0x8c], 0x10
lea ecx, [ebp - 0xa0]
lea eax, [ebp - 0xd0]
cmovae ecx, dword [ebp - 0xa0]
cmp dword [ebp - 0xbc], 0x10
push ecx
cmovae eax, dword [ebp - 0xd0]
push edx
push ebx
push eax
push dword [ebp + 0x5c]
call fcn.0047525a
push dword [ebp + 0x5c]
call fcn.00495d9f
add esp, 0x1c
lea eax, [ebp + 0x24]
push 0x4ca430
push eax
call fcn.0048619e
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00445d8b
lea ecx, [ebp + 0x24]
mov edi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0xe8]
call fcn.00449adb
lea ecx, [ebp - 0x48]
call fcn.00449adb
lea ecx, [ebp - 0xa0]
call fcn.00449adb
lea ecx, [ebp - 0xd0]
call fcn.00449adb
lea ecx, [ebp - 0x30]
call fcn.00449adb
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xb
call fcn.00449adb
push 0xf
pop eax
test edi, edi
jne 0x49293d
lea ecx, [ebp - 0x100]
call fcn.00449adb
lea ecx, [ebp - 0x118]
call fcn.00449adb
lea ecx, [ebp - 0x130]
call fcn.00449adb
lea ecx, [ebp - 0x148]
call fcn.00449adb
lea ecx, [ebp - 0x160]
call fcn.00449adb
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], bl
call fcn.00449adb
mov edi, dword [ebp + 0x20]
test edi, edi
je 0x493646
mov eax, dword [edi]
xor ecx, ecx
inc ecx
push ecx
mov ecx, edi
call dword [eax]
mov ecx, dword [ebp + 0x28]
push ebx
push str.SeRestorePrivilege
call fcn.0043c169
mov ecx, dword [ebp + 0x28]
push ebx
push str.SeBackupPrivilege
call fcn.0043c169
push 0x200
lea eax, [ebp - 0x3a8]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp + 0x28]
push 0x4ca57c
push eax
call fcn.004b6474
add esp, 0x14
mov edi, 0x100
mov byte [ebp - 4], 0x33
push edi
lea ecx, [ebp - 0x3a8]
push ecx
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
mov esi, 0x500f84
push eax
mov ecx, esi
call fcn.00402a3a
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea eax, [ebp + 0x24]
mov byte [ebp - 4], 0x34
push 0x4ca59c
push eax
call fcn.004b6474
pop ecx
pop ecx
push edi
lea edx, [ebp - 0x3a8]
mov byte [ebp - 4], 0x35
push edx
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
mov ecx, esi
call fcn.00402a3a
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
push 0x1040
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x36
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
call fcn.004840a5
add esp, 0x10
mov ecx, 0x5009b0
call fcn.00408df0
test al, al
jne 0x4939f7
mov edi, 0x500e60
mov ecx, edi
call fcn.00433a32
push eax
lea ecx, [ebp + 0x44]
call fcn.00449134
cmp dword [ebp + 0x58], 8
lea eax, [ebp + 0x44]
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0x37
cmovae eax, dword [ebp + 0x44]
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea eax, [ebp + 0x28]
mov byte [ebp - 4], 0x38
push 0x4ca010
push eax
call fcn.004b6474
pop ecx
pop ecx
mov esi, 0x4bbd40
mov byte [ebp - 4], 0x39
push esi
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x24]
push 0x4ca050
push eax
call fcn.004b6474
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3a
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4ca09c
push eax
call fcn.004b6474
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3b
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp]
push 0x4ca0d8
push eax
call fcn.004b6474
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3c
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 4]
push 0x4ca120
push eax
call fcn.004b6474
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3d
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 8]
push 0x4ca16c
push eax
call fcn.004b6474
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3e
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x14]
push 0x4ca198
push eax
call fcn.004b6474
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3f
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0xc]
push 0x4ca1bc
push eax
call fcn.004b6474
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x10]
push 0x4ca1f4
push eax
call fcn.004b6474
pop ecx
pop ecx
mov byte [ebp - 4], 0x41
push esi
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x18]
push 0x4c9e9c
push eax
call fcn.004b6474
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x42
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x1c]
push 0x4c9ed4
push eax
call fcn.004b6474
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x43
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
sub esp, 0x18
lea ecx, [ebp + 0x5c]
mov esi, esp
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
mov ecx, esi
call fcn.00449134
mov ecx, edi
call fcn.0040a8e9
mov ecx, 0x500ab8
call fcn.00468b85
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 0x44]
call fcn.00449369
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 0x68]
call fcn.00449369
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add ebp, 0x60
leave
ret 0x18