Function at 0x410a2a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x5c
mov eax, 0x499e2c
call fcn.00437c90
sub esp, 0x39c
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [ebp + 0x28], esi
mov dword [ebp + 0x20], ebx
and dword [ebp - 4], ebx
xor eax, eax
inc eax
push eax
push str.SeRestorePrivilege
call fcn.0046754c
xor eax, eax
mov ecx, esi
inc eax
push eax
push str.SeBackupPrivilege
call fcn.0046754c
push 0x48
call sub.mfc140u.dll_operator_2
mov esi, eax
pop ecx
mov dword [ebp + 0x24], esi
xor eax, eax
inc eax
mov byte [ebp - 4], al
test esi, esi
je 0x410aba
push 0xfde9
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.00449cbd
add esp, 0xc
inc ebx
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
mov dword [ebp + 0x20], ebx
jb 0x410aab
mov eax, dword [eax]
push eax
mov ecx, esi
call fcn.0042129d
mov edi, eax
mov dword [ebp + 0x20], eax
jmp 0x410abf
xor edi, edi
mov dword [ebp + 0x20], edi
and dword [ebp - 4], 0
test bl, 1
je 0x410ad3
lea ecx, [ebp - 0x1a8]
call fcn.0042493b
xor ebx, ebx
mov ecx, edi
push ebx
call fcn.0042136c
test al, al
je 0x4118d5
lea eax, [ebp + 0x5c]
push 0x4c9448
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 4
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00420b93
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], bl
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x4118c7
lea eax, [ebp - 0x64]
push 0x4c9458
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, esi
call fcn.00420b93
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], bl
mov edi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test edi, edi
je 0x4118c4
push 0xf
pop eax
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x164], eax
mov byte [ebp - 0x178], bl
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], eax
mov byte [ebp - 0x160], bl
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], eax
mov byte [ebp - 0x148], bl
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], eax
mov byte [ebp - 0x130], bl
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x104], eax
mov byte [ebp - 0x118], bl
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], eax
mov byte [ebp - 0x100], bl
mov byte [ebp - 4], 0xb
push ebx
push 0x4dbbac
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], eax
mov byte [ebp - 0xb8], bl
call fcn.004256e3
push 0xf
pop esi
push ebx
push 0x4dbbac
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], esi
mov byte [ebp - 0x30], bl
call fcn.004256e3
push ebx
push 0x4dbbac
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], esi
mov byte [ebp - 0xd0], bl
call fcn.004256e3
mov dword [ebp - 0x8c], esi
lea ecx, [ebp - 0xa0]
push ebx
mov esi, 0x4dbbac
mov byte [ebp - 4], 0xe
push esi
mov dword [ebp - 0x90], ebx
mov byte [ebp - 0xa0], bl
call fcn.004256e3
push ebx
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], bl
call fcn.004256e3
push ebx
push esi
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], bl
call fcn.004256e3
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x11
push 0x4c9464
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00420d6f
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x11
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x410d25
lea eax, [ebp - 0x60]
push 0x4c9464
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00420d6f
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x410d02
sub edx, esi
lea ecx, [ebp - 0xb8]
push edx
push eax
call fcn.004256e3
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x6c]
push 0x4c9470
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00420d6f
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x11
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x410da5
lea eax, [ebp - 0x70]
push 0x4c9470
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00420d6f
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x410d85
sub edx, esi
lea ecx, [ebp - 0x30]
push edx
push eax
call fcn.004256e3
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x74]
push 0x4c2328
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410dd5
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.004256e3
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x17
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00420d6f
lea ecx, [ebp + 0x2c]
mov esi, eax
call fcn.0042493b
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x410ef0
lea eax, [ebp - 0x7c]
push 0x4c2328
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410e4e
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.004256e3
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x19
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00420d6f
mov edx, eax
mov dword [ebp + 0x54], ebx
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410e8c
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
push ebx
push 0xfde9
lea eax, [ebp + 0x44]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.00411fab
add esp, 0x10
lea ecx, [ebp - 0xd0]
push eax
call fcn.0042743e
lea ecx, [ebp - 0x190]
call fcn.0042493b
lea ecx, [ebp + 0x44]
call fcn.0042493b
lea ecx, [ebp + 0x2c]
call fcn.0042493b
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x80]
push 0x4c947c
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00420d6f
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x11
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x410fc5
lea eax, [ebp - 0x84]
push 0x4c947c
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00420d6f
mov edx, eax
mov dword [ebp + 0x54], ebx
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410f66
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
push ebx
push 0xfde9
lea eax, [ebp + 0x44]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.00411fab
add esp, 0x10
lea ecx, [ebp - 0xa0]
push eax
call fcn.0042743e
lea ecx, [ebp - 0x190]
call fcn.0042493b
lea ecx, [ebp + 0x44]
call fcn.0042493b
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x88]
push 0x4c86b4
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410ff8
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.004256e3
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x1f
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00420d6f
lea ecx, [ebp + 0x2c]
mov esi, eax
call fcn.0042493b
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x4110cb
lea eax, [ebp - 0x4c]
push 0x4c86b4
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411074
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.004256e3
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x21
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00420d6f
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4110a3
sub edx, esi
lea ecx, [ebp - 0x48]
push edx
push eax
call fcn.004256e3
lea ecx, [ebp + 0x2c]
call fcn.0042493b
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea eax, [ebp - 0x50]
push 0x4c948c
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4110fb
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.004256e3
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x23
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00420d6f
lea ecx, [ebp + 0x2c]
mov esi, eax
call fcn.0042493b
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test esi, esi
je 0x4111ce
lea eax, [ebp - 0x54]
push 0x4c948c
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x3c], ebx
mov ecx, edx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411174
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.004256e3
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, edi
mov byte [ebp - 4], 0x25
cmovae eax, dword [ebp + 0x2c]
push eax
call fcn.00420d6f
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4111a3
sub edx, esi
lea ecx, [ebp - 0xe8]
push edx
push eax
call fcn.004256e3
lea ecx, [ebp + 0x2c]
call fcn.0042493b
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
push 0x4dbbd4
lea ecx, [ebp - 0xe8]
call fcn.00432b50
mov bh, al
lea eax, [ebp - 0x58]
push 0x4c9498
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411212
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x411259
mov esi, SysStringLen
jmp 0x411346
lea eax, [ebp - 0x78]
push 0x4c94a4
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41128b
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4112cf
mov esi, reloc.WSOCK32.dll_accept
jmp 0x411346
lea eax, [ebp - 0x5c]
push 0x4c94b0
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411301
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
xor esi, esi
mov eax, accept
test bl, bl
cmovne esi, eax
lea ecx, [ebp + 0x5c]
lea eax, [ebp - 0x30]
push ecx
cmp bh, 1
jne 0x411359
push 0xf013f
jmp 0x41135e
push InitializeSRWLock
cmp dword [ebp - 0x1c], 0x10
cmovae eax, dword [ebp - 0x30]
xor ebx, ebx
push ebx
push eax
push esi
call fcn.004a7a68
add esp, 0x14
cmp eax, 2
jne 0x4113ae
xor eax, eax
lea ecx, [ebp + 0x5c]
push ebx
inc eax
cmp dword [0x4f2fb8], eax
lea eax, [ebp - 0x30]
push ecx
push ebx
jne 0x411393
push 0xf013f
jmp 0x411398
push InitializeSRWLock
cmp dword [ebp - 0x1c], 0x10
push 4
cmovae eax, dword [ebp - 0x30]
push ebx
push ebx
push eax
push esi
call fcn.004419be
add esp, 0x24
test eax, eax
jne 0x411805
lea eax, [ebp + 0x1c]
push 0x4c94bc
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
mov edx, eax
mov dword [ebp + 0x54], ebx
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], bl
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4113e6
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x411428
push 3
pop edx
jmp 0x4117be
lea eax, [ebp + 0x18]
push 0x4c94d4
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41145a
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x411498
push 4
jmp 0x411422
lea eax, [ebp + 0x10]
push 0x4c94ec
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4114ca
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x41150b
push 5
jmp 0x411422
lea eax, [ebp + 0xc]
push 0x4c9518
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2c
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41153d
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x41157e
push 2
jmp 0x411422
lea eax, [ebp + 0x14]
push 0x4c9538
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4115b0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4115f1
push 6
jmp 0x411422
lea eax, [ebp + 8]
push 0x4c954c
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411623
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x411664
push 7
jmp 0x411422
lea eax, [ebp + 4]
push 0x4c9568
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411696
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x4116d9
xor ebx, ebx
mov edx, ebx
jmp 0x4117c0
lea eax, [ebp]
push 0x4c957c
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41170b
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
test bl, bl
je 0x41174c
push 0xb
jmp 0x411422
lea eax, [ebp - 0x10]
push 0x4c9594
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
and dword [ebp + 0x54], 0
mov edx, eax
mov ecx, edx
mov dword [ebp + 0x58], 0xf
mov byte [ebp + 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41177e
sub ecx, esi
push ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.004256e3
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b23
lea ecx, [ebp + 0x44]
mov bl, al
call fcn.0042493b
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
xor edx, edx
test bl, bl
push 1
pop eax
cmovne edx, eax
xor ebx, ebx
push dword [ebp - 0x90]
cmp dword [ebp - 0x8c], 0x10
lea ecx, [ebp - 0xa0]
lea eax, [ebp - 0xd0]
cmovae ecx, dword [ebp - 0xa0]
cmp dword [ebp - 0xbc], 0x10
push ecx
cmovae eax, dword [ebp - 0xd0]
push edx
push ebx
push eax
push dword [ebp + 0x5c]
call fcn.00441b6b
push dword [ebp + 0x5c]
call fcn.0047f775
add esp, 0x1c
lea eax, [ebp + 0x24]
push 0x4c9458
push eax
call fcn.0047baa5
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc140u.dll_Ordinal_1665]
push eax
mov ecx, edi
call fcn.00420beb
lea ecx, [ebp + 0x24]
mov edi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0xe8]
call fcn.0042493b
lea ecx, [ebp - 0x48]
call fcn.0042493b
lea ecx, [ebp - 0xa0]
call fcn.0042493b
lea ecx, [ebp - 0xd0]
call fcn.0042493b
lea ecx, [ebp - 0x30]
call fcn.0042493b
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xb
call fcn.0042493b
push 0xf
pop eax
test edi, edi
jne 0x410bcc
lea ecx, [ebp - 0x100]
call fcn.0042493b
lea ecx, [ebp - 0x118]
call fcn.0042493b
lea ecx, [ebp - 0x130]
call fcn.0042493b
lea ecx, [ebp - 0x148]
call fcn.0042493b
lea ecx, [ebp - 0x160]
call fcn.0042493b
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], bl
call fcn.0042493b
mov edi, dword [ebp + 0x20]
test edi, edi
je 0x4118d5
mov eax, dword [edi]
xor ecx, ecx
inc ecx
push ecx
mov ecx, edi
call dword [eax]
mov ecx, dword [ebp + 0x28]
push ebx
push str.SeRestorePrivilege
call fcn.0046754c
mov ecx, dword [ebp + 0x28]
push ebx
push str.SeBackupPrivilege
call fcn.0046754c
push 0x200
lea eax, [ebp - 0x3a8]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp + 0x28]
push 0x4c95a4
push eax
call fcn.00456bfc
add esp, 0x14
mov edi, 0x100
mov byte [ebp - 4], 0x33
push edi
lea ecx, [ebp - 0x3a8]
push ecx
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
mov esi, 0x4f2e4c
push eax
mov ecx, esi
call fcn.00409fc3
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__20]
lea eax, [ebp + 0x24]
mov byte [ebp - 4], 0x34
push 0x4c95c4
push eax
call fcn.00456bfc
pop ecx
pop ecx
push edi
lea edx, [ebp - 0x3a8]
mov byte [ebp - 4], 0x35
push edx
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
mov ecx, esi
call fcn.00409fc3
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__20]
push 0x1040
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x36
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
call fcn.00407318
add esp, 0x10
mov ecx, 0x4f2878
call fcn.004437b4
test al, al
jne 0x411c86
mov edi, 0x4f2d28
mov ecx, edi
call fcn.0040a635
push eax
lea ecx, [ebp + 0x44]
call fcn.00423f94
cmp dword [ebp + 0x58], 8
lea eax, [ebp + 0x44]
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0x37
cmovae eax, dword [ebp + 0x44]
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__20]
lea eax, [ebp + 0x28]
mov byte [ebp - 4], 0x38
push 0x4c9038
push eax
call fcn.00456bfc
pop ecx
pop ecx
mov esi, 0x4bad10
mov byte [ebp - 4], 0x39
push esi
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x24]
push 0x4c9078
push eax
call fcn.00456bfc
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3a
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c90c4
push eax
call fcn.00456bfc
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3b
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp]
push 0x4c9100
push eax
call fcn.00456bfc
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3c
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 4]
push 0x4c9148
push eax
call fcn.00456bfc
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3d
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 8]
push 0x4c9194
push eax
call fcn.00456bfc
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3e
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x14]
push 0x4c91c0
push eax
call fcn.00456bfc
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3f
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0xc]
push 0x4c91e4
push eax
call fcn.00456bfc
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x10]
push 0x4c921c
push eax
call fcn.00456bfc
pop ecx
pop ecx
mov byte [ebp - 4], 0x41
push esi
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x18]
push 0x4c8ec4
push eax
call fcn.00456bfc
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x42
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x1c]
push 0x4c8efc
push eax
call fcn.00456bfc
pop ecx
pop ecx
push esi
mov ecx, eax
mov byte [ebp - 4], 0x43
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__16]
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
sub esp, 0x18
lea ecx, [ebp + 0x5c]
mov esi, esp
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
mov ecx, esi
call fcn.00423f94
mov ecx, edi
call fcn.004aa619
mov ecx, 0x4f2980
call fcn.0045f525
lea ecx, [ebp + 0x5c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 0x44]
call fcn.004241c9
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp + 0x68]
call fcn.004241c9
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add ebp, 0x60
leave
ret 0x18