Function at 0x41e220
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54e283
mov eax, dword fs:[0]
push eax
sub esp, 0x1d4
mov eax, dword [0x5a33dc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x134], ecx
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
mov dword [ebp - 0x154], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp + 0x18]
movq qword [ebp - 0xd8], xmm0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x144], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 0
mov edi, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0x13c], edi
cmp edi, esi
je 0x41fbd5
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x160], eax
nop dword [eax]
mov eax, dword [edi]
mov dword [ebp - 0x18], eax
mov eax, dword [eax + 0x54]
mov ecx, eax
mov dword [ebp - 0x20], eax
cmp dword [eax + 0x14], 8
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x128], edx
jb 0x41e2fe
mov ecx, dword [eax]
cmp edx, 0xf
jne 0x41f1e3
push edx
mov edx, str.Registry_Create
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41f1da
lea eax, [edi + 8]
mov dword [ebp - 0x20], eax
cmp eax, esi
je 0x41fbbe
mov ecx, dword [ebp - 0x18]
push str.KeyName
mov dword [ebp - 0x1c], 0
call fcn.0045cea0
lea ecx, [ebp - 0x1c]
push dword [eax + 0x1c]
call fcn.00426f50
mov byte [ebp - 4], 1
mov esi, dword [edi]
mov ecx, esi
push str.KeyHandle
call fcn.0045cea0
push eax
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.0045cf10
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x20]
mov byte [ebp - 0x129], 1
mov eax, dword [esi]
mov eax, dword [eax + 0x54]
mov ecx, eax
mov dword [ebp - 0x128], eax
cmp dword [eax + 0x14], 8
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x138], edx
jb 0x41e3a8
mov ecx, dword [eax]
cmp edx, 0x11
jne 0x41ea15
push edx
mov edx, str.Registry_SetValue
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41ea09
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov dword [ebp - 0x18], edx
cmp edi, edx
je 0x41f12e
lea esi, [edi - 8]
mov dword [ebp - 0x14], esi
nop dword [eax]
cmp esi, edx
jne 0x41e3ee
mov eax, dword [esi]
mov ecx, dword [eax]
mov eax, dword [edi]
cmp ecx, dword [eax]
je 0x41e421
mov eax, dword [esi]
mov ecx, dword [eax + 0x54]
cmp dword [ecx + 0x14], 8
mov eax, dword [ecx + 0x10]
jb 0x41e3fe
mov ecx, dword [ecx]
cmp eax, 0xf
jne 0x41e418
push eax
mov edx, str.Registry_Create
call fcn.00429870
mov edx, dword [ebp - 0x18]
add esp, 4
test eax, eax
je 0x41e421
cmp esi, edx
je 0x41e421
sub esi, 8
jmp 0x41e3e0
mov dword [ebp - 0x14], esi
cmp esi, edx
je 0x41e814
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x130], edx
jmp 0x41e446
mov edx, dword [ebp - 0x130]
mov eax, dword [esi]
mov dword [ebp - 0x128], eax
mov ecx, dword [eax]
mov eax, dword [edi]
cmp ecx, dword [eax]
jne 0x41e81d
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, edx
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov edx, 0x811c9dc5
mov eax, dword [ebp - 0x30]
add eax, eax
je 0x41e49a
mov edi, dword [ebp - 0x18]
mov esi, eax
nop word [eax + eax]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x41e480
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x134]
mov eax, dword [ecx + 0x138]
mov ecx, dword [ecx + 0x12c]
and eax, edx
mov ecx, dword [ecx + eax*8]
lea eax, [eax*8 + 4]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x18], ecx
mov edx, dword [eax + 0x124]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x12c], ecx
cmp dword [ebp - 0x18], edx
jne 0x41e4e2
mov eax, edx
jmp 0x41e502
mov esi, dword [ebp - 0x134]
mov edi, dword [ebp - 0x150]
mov eax, dword [esi + 0x12c]
mov esi, dword [ebp - 0x14]
mov eax, dword [edi + eax]
mov edi, dword [ebp - 0x13c]
mov eax, dword [eax]
cmp ecx, eax
je 0x41e5ac
mov esi, dword [ecx + 0x1c]
lea edx, [ebp - 0x40]
mov eax, dword [ecx + 0x18]
add ecx, 8
cmp dword [ebp - 0x2c], 8
mov dword [ebp - 0x140], esi
cmovae edx, dword [ebp - 0x130]
cmp esi, 8
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x138], eax
jb 0x41e537
mov ecx, dword [ecx]
cmp eax, dword [ebp - 0x30]
jne 0x41e549
push eax
call fcn.00429870
add esp, 4
test eax, eax
je 0x41e55c
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x148]
mov ecx, dword [ecx]
jmp 0x41e4d3
mov edx, dword [ebp - 0x12c]
add edx, 8
cmp dword [ebp - 0x140], 8
jb 0x41e570
mov edx, dword [edx]
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x30]
cmovae ecx, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x138]
jne 0x41e59e
push eax
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41e59e
mov eax, dword [ebp - 0x12c]
jmp 0x41e5ae
mov eax, dword [ebp - 0x134]
mov eax, dword [eax + 0x124]
jmp 0x41e5ae
mov eax, edx
mov ecx, dword [ebp - 0x134]
cmp eax, dword [ecx + 0x124]
jne 0x41e81d
mov ecx, dword [ebp - 0x128]
push str.KeyHandle
call fcn.0045cea0
mov ecx, dword [ebp - 0x128]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0045cf10
mov edi, eax
lea eax, [ebp - 0x40]
cmp eax, edi
je 0x41e620
mov ecx, eax
call fcn.00413420
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [edi + 0x10]
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov eax, dword [ebp - 0x40]
movq qword [ebp - 0x30], xmm0
mov dword [ebp - 0x130], eax
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x41e65d
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e653
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
mov ecx, dword [esi]
push str.KeyName
call fcn.0045cea0
mov edi, dword [eax + 0x1c]
call fcn.004135d0
mov ecx, eax
test ecx, ecx
je 0x41fc07
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
push edi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.00428d70
test al, al
jne 0x41e6bf
test edi, edi
jne 0x41e6a1
xor ecx, ecx
jmp 0x41e6b5
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e6a6
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x14]
call fcn.00427080
mov byte [ebp - 4], 5
lea eax, [ebp - 0x14]
push dword [ebp - 0x1c]
push 0x583244
push eax
call fcn.0042afc0
mov edi, dword [ebp - 0x14]
add esp, 0xc
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
mov dword [ebp - 0x138], ecx
lea edx, [edi - 0x10]
mov dword [ebp - 0x148], edx
cmp edx, ecx
je 0x41e75c
lea eax, [ecx + 0xc]
mov dword [ebp - 0x128], eax
mov eax, dword [eax]
shr eax, 0x1f
test al, al
jne 0x41e750
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x41e750
push edx
call fcn.0042a160
add esp, 4
mov dword [ebp - 0x140], eax
mov byte [ebp - 4], 6
or ecx, 0xffffffff
mov edx, dword [ebp - 0x128]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41e744
mov eax, dword [ebp - 0x138]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x140]
add eax, 0x10
mov byte [ebp - 4], 5
mov dword [ebp - 0x1c], eax
jmp 0x41e75c
push dword [edx + 4]
lea ecx, [ebp - 0x1c]
push edi
call fcn.00427080
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp esi, eax
je 0x41e7ec
sub esi, 8
mov dword [ebp - 0x14], esi
nop
mov edi, dword [ebp - 0x13c]
cmp esi, eax
jne 0x41e784
mov eax, dword [esi]
mov ecx, dword [eax]
mov eax, dword [edi]
cmp ecx, dword [eax]
je 0x41e7b9
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x54]
cmp dword [ecx + 0x14], 8
mov eax, dword [ecx + 0x10]
jb 0x41e794
mov ecx, dword [ecx]
cmp eax, 0xf
jne 0x41e7ab
push eax
mov edx, str.Registry_Create
call fcn.00429870
add esp, 4
test eax, eax
je 0x41e7b9
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
cmp esi, eax
je 0x41e7b9
sub esi, 8
jmp 0x41e770
mov dword [ebp - 0x14], esi
mov edx, dword [ebp - 0x148]
or eax, 0xffffffff
mov byte [ebp - 4], 8
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41e7db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 3
cmp esi, dword [eax]
jne 0x41e440
jmp 0x41e820
add edi, 0xfffffff0
mov byte [ebp - 4], 7
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x41e808
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov edi, dword [ebp - 0x13c]
jmp 0x41e81d
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp + 8]
mov ecx, dword [esi]
test ecx, ecx
je 0x41f133
cmp esi, dword [eax]
je 0x41f133
mov eax, dword [edi]
mov ecx, dword [ecx]
cmp ecx, dword [eax]
jne 0x41f133
mov eax, dword [ebp - 0x20]
push str.KeyHandle
mov esi, dword [eax]
mov ecx, esi
call fcn.0045cea0
push eax
lea eax, [ebp - 0x88]
mov ecx, esi
push eax
call fcn.0045cf10
push eax
lea ecx, [ebp - 0x58]
call fcn.00427410
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x41e8a4
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e89a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
cmp dword [ebp - 0x2c], 8
lea esi, [ebp - 0x40]
mov eax, dword [ebp - 0x30]
mov edx, 0x811c9dc5
cmovae esi, dword [ebp - 0x130]
xor ecx, ecx
add eax, eax
je 0x41e8d9
mov edi, eax
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x41e8c2
mov edi, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x134]
mov eax, dword [ecx + 0x138]
mov ecx, dword [ecx + 0x12c]
and eax, edx
mov edx, dword [ecx + eax*8]
lea eax, [eax*8 + 4]
mov dword [ebp - 0x128], eax
mov esi, edx
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x140], edx
mov ecx, dword [eax + 0x124]
mov dword [ebp - 0x14], ecx
cmp edx, ecx
jne 0x41e91c
mov eax, ecx
jmp 0x41e939
mov edi, dword [ebp - 0x134]
mov edx, dword [ebp - 0x128]
mov eax, dword [edi + 0x12c]
mov edi, dword [ebp - 0x13c]
mov eax, dword [edx + eax]
mov eax, dword [eax]
cmp esi, eax
je 0x41e9e2
cmp dword [ebp - 0x2c], 8
lea eax, [esi + 8]
mov edi, dword [eax + 0x14]
lea edx, [ebp - 0x40]
cmovae edx, dword [ebp - 0x130]
cmp edi, 8
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x148], edi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x138], eax
jb 0x41e97c
mov eax, dword [eax]
jmp 0x41e982
mov eax, dword [ebp - 0x138]
cmp ecx, dword [ebp - 0x30]
jne 0x41e996
push ecx
mov ecx, eax
call fcn.00429870
add esp, 4
test eax, eax
je 0x41e9a6
mov esi, dword [esi]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x140]
jmp 0x41e914
cmp dword [ebp - 0x148], 8
mov edx, dword [ebp - 0x20]
jb 0x41e9b4
mov edx, dword [edx]
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x30]
cmovae ecx, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x150]
jne 0x41e9df
push eax
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41e9df
mov ecx, dword [ebp - 0x14]
jmp 0x41e9e4
mov ecx, dword [ebp - 0x14]
mov esi, ecx
xor edx, edx
cmp esi, ecx
je 0x41e9ed
mov edx, dword [esi + 0x20]
push dword [ebp - 0x158]
lea eax, [ebp - 0x58]
push 0
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041d030
add esp, 0xc
jmp 0x41ef31
mov eax, dword [ebp - 0x128]
mov edx, dword [ebp - 0x138]
cmp dword [eax + 0x14], 8
jb 0x41ea1d
mov eax, dword [eax]
cmp edx, 0xf
jne 0x41ea3a
push edx
mov edx, str.Registry_Create
mov ecx, eax
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41ea3a
mov al, 1
jmp 0x41ea3c
xor al, al
test al, al
je 0x41f12e
mov eax, dword [edi]
mov ecx, eax
push str.Status
mov dword [ebp - 0x128], eax
call fcn.0045cea0
mov ecx, dword [ebp - 0x128]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0045cf10
cmp dword [ebp - 0xb8], 8
lea ecx, [ebp - 0xcc]
mov eax, dword [ebp - 0x40]
cmovae ecx, dword [ebp - 0xcc]
cmp dword [ebp - 0xbc], 1
mov dword [ebp - 0x130], eax
jne 0x41eaa8
push 1
mov edx, 0x58325c
call fcn.00429870
add esp, 4
test eax, eax
je 0x41ef15
mov byte [ebp - 4], 0xa
call fcn.004135d0
mov ecx, eax
test ecx, ecx
je 0x41fc07
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
lea edi, [eax + 0x10]
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0xb
mov eax, dword [esi]
mov dword [ebp - 0x12c], eax
push str.Status
mov ecx, eax
call fcn.0045cea0
mov ecx, dword [ebp - 0x12c]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0045cf10
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x128], eax
cmp ecx, eax
je 0x41eb38
call fcn.00413420
mov eax, dword [ebp - 0x128]
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xcc], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movq qword [ebp - 0xbc], xmm0
mov word [eax], cx
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x41eb75
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41eb6b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
cmp dword [ebp - 0xb8], 8
lea ecx, [ebp - 0xcc]
cmovae ecx, dword [ebp - 0xcc]
cmp dword [ebp - 0xbc], 1
jne 0x41ed1e
push 1
mov edx, 0x58325c
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41ed1e
mov ecx, dword [esi]
push str.KeyName
mov dword [ebp - 0x28], eax
call fcn.0045cea0
lea ecx, [ebp - 0x28]
push dword [eax + 0x1c]
call fcn.00426f50
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xc
cmp dword [edx + 4], 0
mov dword [ebp - 0x138], edx
jne 0x41ec52
mov eax, dword [ebp - 0x28]
lea ecx, [eax - 0x10]
cmp ecx, edx
je 0x41ec6c
lea ecx, [edx + 0xc]
mov dword [ebp - 0x128], ecx
lea edi, [eax - 0x10]
mov ecx, dword [ecx]
shr ecx, 0x1f
test cl, cl
jne 0x41ec44
mov ecx, dword [edi]
cmp ecx, dword [edx]
jne 0x41ec44
push edi
call fcn.0042a160
add esp, 4
mov dword [ebp - 0x140], eax
mov byte [ebp - 4], 0xd
or ecx, 0xffffffff
mov edx, dword [ebp - 0x128]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41ec3c
mov edi, dword [ebp - 0x138]
push edi
mov ecx, dword [edi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x140]
lea edi, [eax + 0x10]
mov dword [ebp - 0x14], edi
jmp 0x41ec69
push dword [edi + 4]
lea ecx, [ebp - 0x14]
push eax
call fcn.00427080
jmp 0x41ec66
push dword [ebp - 0x28]
lea eax, [ebp - 0x14]
push 0x583244
push eax
call fcn.0042afc0
add esp, 0xc
mov edi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x41ed02
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx - 0xc], 0
jl 0x41ed02
push eax
push ecx
call fcn.005148ba
add esp, 8
test eax, eax
je 0x41ecff
sub eax, dword [ebp - 0x1c]
sar eax, 1
cmp eax, 0xffffffff
je 0x41ecff
mov edx, dword [ebp - 0x28]
add esi, 8
add edx, 0xfffffff0
mov byte [ebp - 4], 0xf
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ecbb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 0xb
cmp esi, dword [eax + 4]
je 0x41ed1e
mov eax, dword [esi]
mov dword [ebp - 0x12c], eax
mov ecx, dword [eax + 0x54]
cmp dword [ecx + 0x14], 8
mov eax, dword [ecx + 0x10]
jb 0x41ecdd
mov ecx, dword [ecx]
cmp eax, 0xf
jne 0x41ed1e
push eax
mov edx, str.Registry_Create
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41ed1e
mov eax, dword [ebp - 0x12c]
jmp 0x41ead4
mov eax, dword [ebp - 0x28]
lea edx, [eax - 0x10]
mov byte [ebp - 4], 0xe
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ed1e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x41fc07
mov edx, eax
mov ecx, edi
mov ax, word [ecx]
cmp ax, word [edx]
mov eax, dword [ebp - 0x1c]
jne 0x41ed6a
cmp word [ecx], 0
je 0x41ed66
mov ax, word [ecx + 2]
cmp ax, word [edx + 2]
mov word [ebp - 0x12a], ax
mov eax, dword [ebp - 0x1c]
jne 0x41ed6a
add ecx, 4
add edx, 4
cmp word [ebp - 0x12a], 0
jne 0x41ed31
xor ecx, ecx
jmp 0x41ed6f
sbb ecx, ecx
or ecx, 1
mov byte [ebp - 4], 0xb
test ecx, ecx
jne 0x41eeec
cmp dword [eax - 0xc], ecx
je 0x41eeec
mov eax, dword [ebp - 0x30]
add esi, 0xfffffff8
cmp dword [ebp - 0x2c], 8
mov edx, 0x811c9dc5
mov dword [ebp - 0x13c], esi
lea esi, [ebp - 0x40]
cmovae esi, dword [ebp - 0x130]
mov byte [ebp - 0x129], cl
add eax, eax
je 0x41edc4
mov edi, eax
nop
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x41edb0
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x134]
mov eax, dword [ecx + 0x138]
mov ecx, dword [ecx + 0x12c]
and eax, edx
mov edx, dword [ecx + eax*8]
lea eax, [eax*8 + 4]
mov dword [ebp - 0x128], eax
mov esi, edx
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x140], edx
mov ecx, dword [eax + 0x124]
mov dword [ebp - 0x18], ecx
nop
cmp edx, ecx
jne 0x41ee08
mov eax, ecx
jmp 0x41ee22
mov edi, dword [ebp - 0x134]
mov edx, dword [ebp - 0x128]
mov eax, dword [edi + 0x12c]
mov edi, dword [ebp - 0x14]
mov eax, dword [edx + eax]
mov eax, dword [eax]
cmp esi, eax
je 0x41eec8
cmp dword [ebp - 0x2c], 8
lea eax, [esi + 8]
mov edi, dword [eax + 0x14]
lea edx, [ebp - 0x40]
cmovae edx, dword [ebp - 0x130]
cmp edi, 8
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x148], edi
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x138], eax
jb 0x41ee62
mov eax, dword [eax]
jmp 0x41ee68
mov eax, dword [ebp - 0x138]
cmp ecx, dword [ebp - 0x30]
jne 0x41ee7c
push ecx
mov ecx, eax
call fcn.00429870
add esp, 4
test eax, eax
je 0x41ee8c
mov esi, dword [esi]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x140]
jmp 0x41ee00
cmp dword [ebp - 0x148], 8
mov edx, dword [ebp - 0x20]
jb 0x41ee9a
mov edx, dword [edx]
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x30]
cmovae ecx, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x150]
jne 0x41eec5
push eax
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41eec5
mov ecx, dword [ebp - 0x18]
jmp 0x41eeca
mov ecx, dword [ebp - 0x18]
mov esi, ecx
xor edx, edx
cmp esi, ecx
je 0x41eed3
mov edx, dword [esi + 0x20]
push dword [ebp - 0x158]
lea eax, [ebp - 0x58]
push 1
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041d030
add esp, 0xc
jmp 0x41eef3
mov byte [ebp - 0x129], 1
add edi, 0xfffffff0
mov byte [ebp - 4], 0x11
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x41ef0f
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x13c]
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 3
call fcn.00413420
cmp byte [ebp - 0x129], 0
jne 0x41f133
mov esi, dword [ebp - 0x134]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
lea ecx, [esi + 0x120]
call fcn.00425b30
mov eax, dword [ebp - 0x20]
cmp eax, dword [esi + 0x124]
je 0x41ef65
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x17c]
call fcn.004274e0
mov eax, dword [ebp - 0x160]
or dword [ebp - 0x144], 1
mov dword [ebp - 0x164], eax
mov byte [ebp - 4], 0x13
xor eax, eax
mov word [ebp - 0x70], ax
mov eax, dword [ebp - 0x1c]
mov edx, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
lea esi, [edx + 2]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x41efa7
sub edx, esi
lea ecx, [ebp - 0x70]
sar edx, 1
push edx
push eax
call fcn.00429380
movups xmm0, xmmword [ebp - 0x70]
xor eax, eax
mov word [ebp - 0x70], ax
movups xmmword [ebp - 0x1c0], xmm0
movq xmm0, qword [ebp - 0x60]
movq qword [ebp - 0x1b0], xmm0
movups xmm0, xmmword [ebp - 0x17c]
mov word [ebp - 0x17c], ax
mov dword [ebp - 0x60], 0
movups xmmword [ebp - 0x1a8], xmm0
mov dword [ebp - 0x5c], 7
movq xmm0, qword [ebp - 0x16c]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x160]
movq qword [ebp - 0x198], xmm0
mov dword [ebp - 0x168], 7
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x158]
lea eax, [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x15
call fcn.00431fa0
push eax
add eax, 0x10
push eax
push ecx
mov ecx, dword [ebp - 0x158]
lea eax, [ebp - 0x1c8]
push eax
call fcn.00432020
lea ecx, [ebp - 0x1c0]
call fcn.00414ce0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.00426d60
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 0xc], 0
jl 0x41f0a3
push 0x583260
push eax
call fcn.005148ba
add esp, 8
test eax, eax
je 0x41f0a3
sub eax, dword [ebp - 0x1c]
sar eax, 1
cmp eax, 0xffffffff
je 0x41f0a3
mov eax, dword [ebp - 0x154]
mov dword [eax], 2
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x41f0e1
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f0d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x41f11f
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f115
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x16
jmp 0x41f1bc
mov esi, dword [ebp - 0x40]
jmp 0x41f139
mov esi, dword [ebp - 0x130]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x41f177
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f16d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x41f1b2
lea ecx, [eax*2 + 2]
mov eax, esi
cmp ecx, 0x1000
jb 0x41f1a8
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push ecx
push esi
call fcn.004d8a95
add esp, 8
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x12
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41f1d1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
jmp 0x41fbbe
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x128]
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x41f1ed
mov ecx, dword [eax]
cmp edx, 0x11
jne 0x41f208
push edx
mov edx, str.Registry_SetValue
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41f208
mov al, 1
jmp 0x41f20a
xor al, al
test al, al
je 0x41f46b
mov ecx, dword [ebp - 0x18]
push str.KeyName
call fcn.0045cea0
mov ecx, dword [ebp - 0x18]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0045cf10
mov byte [ebp - 4], 0x17
mov esi, dword [edi]
mov ecx, esi
push str.KeyHandle
call fcn.0045cea0
push eax
lea eax, [ebp - 0x58]
mov ecx, esi
push eax
call fcn.0045cf10
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x18
call fcn.0042d5c0
mov esi, eax
mov eax, dword [ebp - 0x14c]
cmp esi, dword [eax]
je 0x41f2c7
cmp dword [esi + 0x24], 8
lea edx, [esi + 0x10]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x18], eax
jb 0x41f27d
mov edx, dword [edx]
cmp dword [ebp - 0x44], 8
lea ecx, [ebp - 0x58]
mov eax, dword [ebp - 0x48]
mov edi, eax
cmovae ecx, dword [ebp - 0x58]
cmp dword [ebp - 0x18], edi
cmovb eax, dword [ebp - 0x18]
push eax
call fcn.00429870
mov edi, dword [ebp - 0x13c]
add esp, 4
test eax, eax
jne 0x41f2ba
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x48]
cmp eax, ecx
jbe 0x41f2b6
or eax, 0xffffffff
jmp 0x41f2ba
sbb eax, eax
neg eax
shr eax, 0x1f
test al, al
je 0x41f2fe
mov eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x58]
push ecx
mov dword [ebp - 0x128], ecx
lea ecx, [ebp - 0x128]
push ecx
push ecx
mov ecx, eax
call fcn.00433a80
mov ecx, dword [ebp - 0x14c]
push eax
add eax, 0x10
push eax
push esi
lea eax, [ebp - 0x180]
push eax
call fcn.00433b10
mov esi, dword [ebp - 0x180]
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x17c]
call fcn.004274e0
or dword [ebp - 0x144], 2
mov dword [ebp - 0x164], 1
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x17c]
mov eax, dword [esi + 0x2c]
push edx
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
mov ecx, dword [eax + 4]
push ecx
push eax
mov dword [ebp - 0x138], ecx
call fcn.00433150
mov edx, eax
mov ecx, 0x71c71c6
mov eax, dword [esi + 0x30]
sub ecx, eax
cmp ecx, 1
jb 0x41fc11
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x128]
mov dword [esi + 0x30], ecx
lea ecx, [esi + 0x28]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x138]
mov dword [eax], edx
mov eax, dword [esi + 0x2c]
mov eax, dword [eax]
push eax
lea edx, [eax + 8]
push edx
lea eax, [ebp - 0x1d0]
push eax
call fcn.00432250
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x168]
cmp edx, 8
jb 0x41f3d0
mov ecx, dword [ebp - 0x17c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f3c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x41f40e
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f404
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
xor eax, eax
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp edx, 8
jb 0x41fbbe
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f45c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
jmp 0x41fbbe
mov esi, dword [ebp - 0x20]
mov ecx, esi
cmp dword [esi + 0x14], 8
jb 0x41f478
mov ecx, dword [esi]
cmp dword [esi + 0x10], 0xd
jne 0x41f495
push 0xd
mov edx, str.FileIo_Create
call fcn.00429870
add esp, 4
test eax, eax
jne 0x41f495
mov al, 1
jmp 0x41f497
xor al, al
test al, al
je 0x41fb9d
mov ecx, dword [ebp - 0x18]
push str.OpenPath
call fcn.0045cea0
mov ecx, dword [ebp - 0x18]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0045cf10
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x24], 0
cmovae edx, dword [ebp - 0x58]
call fcn.0045a870
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 8
jb 0x41f4e3
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x24]
call fcn.00426f50
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x41f52a
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f520
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
add esp, 8
xor eax, eax
mov dword [ebp - 0x60], 0
mov word [ebp - 0x70], ax
mov dword [ebp - 0xa4], eax
mov word [ebp - 0xb4], ax
mov eax, dword [ebp - 0x24]
mov edx, eax
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0xa0], 7
lea esi, [edx + 2]
nop dword [eax]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x41f560
sub edx, esi
lea ecx, [ebp - 0xb4]
sar edx, 1
push edx
push eax
call fcn.00429380
mov byte [ebp - 4], 0x1e
mov esi, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
test esi, esi
je 0x41f5dc
cmp ecx, 8
lea eax, [ebp - 0xb4]
cmovae eax, edx
cmp word [eax + esi*2 - 2], 0x5c
jne 0x41f5dc
lea eax, [esi - 1]
cmp esi, eax
jb 0x41fbfd
cmp ecx, 8
lea eax, [ebp - 0xb4]
lea ecx, [esi - 1]
cmovae eax, edx
mov dword [ebp - 0xa4], ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
lea esi, [ebp - 0xb4]
cmp ecx, 8
jb 0x41f5f1
mov esi, edx
test esi, esi
jne 0x41f5f1
xor ecx, ecx
jmp 0x41f605
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f5f6
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x24]
call fcn.00427080
xor eax, eax
mov dword [ebp - 0x60], 0
mov word [ebp - 0x70], ax
mov eax, dword [ebp - 0x24]
mov edx, eax
mov dword [ebp - 0x5c], 7
lea esi, [edx + 2]
nop dword [eax + eax]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x41f630
sub edx, esi
lea ecx, [ebp - 0x70]
sar edx, 1
push edx
push eax
call fcn.00429380
mov esi, dword [ebp - 0x15c]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x18c]
mov ecx, esi
push eax
call fcn.00425d80
mov edx, dword [ebp - 0x5c]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
cmp edx, 8
jb 0x41f6ab
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f69b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fc02
push edx
push ecx
call fcn.004d8a95
mov eax, dword [ebp - 0x128]
add esp, 8
cmp eax, esi
je 0x41f6ea
lea ecx, [ebp - 0xb4]
call fcn.00413420
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1f
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41f6d9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00413420
jmp 0x41fbbe
push 0
push 0x2000000
push 3
push 0
push 1
push 0
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x138], eax
cmp eax, 0xffffffff
je 0x41fb7c
lea ecx, [ebp - 0x120]
push ecx
lea ecx, [ebp - 0x118]
push ecx
lea ecx, [ebp - 0xe0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileTime]
mov byte [ebp - 4], 0x20
call fcn.004135d0
mov ecx, eax
test ecx, ecx
je 0x41fc07
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x14]
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
call fcn.004491d0
mov eax, dword [edi]
add esp, 8
mov ecx, dword [eax + 0x18]
mov esi, dword [eax + 0x1c]
mov dword [ebp - 0x128], ecx
mov byte [ebp - 4], 0x22
call fcn.004135d0
mov ecx, eax
test ecx, ecx
je 0x41fc07
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x18]
push esi
push dword [ebp - 0x128]
call fcn.004491d0
xor eax, eax
mov dword [ebp - 0x60], 0
add esp, 8
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x41fc07
mov ecx, dword [ebp - 0x18]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x41f7f8
test dx, dx
je 0x41f7f4
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x41f7f8
add ecx, 4
add eax, 4
test dx, dx
jne 0x41f7d2
xor eax, eax
jmp 0x41f7fd
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x24
push dword [ebp - 0x24]
test eax, eax
jne 0x41f8dd
lea ecx, [ebp - 0x110]
call fcn.00427490
push eax
lea ecx, [ebp - 0x17c]
call fcn.00427450
mov dword [ebp - 0x164], 1
mov ecx, dword [ebp - 0x15c]
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x1d8]
mov byte [ebp - 4], 0x27
push eax
call fcn.0042c150
lea ecx, [ebp - 0x17c]
call fcn.00413420
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x24
call fcn.00413420
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x128]
push ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.0042aed0
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0xf8]
call fcn.00413320
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x29
call fcn.004274e0
or dword [ebp - 0x144], 4
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x70]
call fcn.00427410
lea ecx, [ebp - 0x88]
call fcn.00413420
lea ecx, [ebp - 0x110]
call fcn.00413420
lea ecx, [ebp - 0xf8]
jmp 0x41fa02
lea ecx, [ebp - 0x88]
call fcn.00427490
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x2a
call fcn.004492a0
lea ecx, [ebp - 0x88]
call fcn.00449260
mov esi, dword [ebp - 0x15c]
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x184]
mov ecx, esi
push eax
call fcn.00425d80
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x41f9fc
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x128], 1
call fcn.00427490
lea ecx, [ebp - 0x128]
mov edx, eax
push ecx
lea ecx, [ebp - 0x17c]
call fcn.0042c110
add esp, 4
push eax
lea eax, [ebp - 0x1e0]
mov byte [ebp - 4], 0x2c
push eax
mov ecx, esi
call fcn.0042c150
lea ecx, [ebp - 0x17c]
call fcn.00413420
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x2a
call fcn.00413420
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x128]
push ecx
push eax
lea ecx, [ebp - 0x110]
call fcn.0042aed0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x110]
call fcn.00413320
push eax
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x2e
call fcn.004274e0
or dword [ebp - 0x144], 8
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x70]
call fcn.00427410
lea ecx, [ebp - 0xf8]
call fcn.00413420
lea ecx, [ebp - 0x178]
call fcn.00413420
lea ecx, [ebp - 0x110]
call fcn.00413420
lea ecx, [ebp - 0x88]
call fcn.00413420
cmp dword [ebp - 0x60], 0
je 0x41fb58
push 0
push str..lnk
lea ecx, [ebp - 0x70]
call fcn.004272d0
cmp eax, 0xffffffff
je 0x41fa31
mov eax, dword [ebp - 0x154]
mov dword [eax], 2
push ecx
lea ecx, [ebp - 0x94]
call fcn.0041bce0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
mov esi, dword [ebp - 0x134]
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x2f
lea eax, [esi + 0x1c]
push eax
call fcn.00426a30
push ecx
lea ecx, [ebp - 0x98]
call fcn.0041bcd0
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x98]
lea ecx, [esi + 0x100]
push eax
call fcn.00425b30
mov eax, dword [ebp - 0x98]
cmp eax, dword [esi + 0x104]
je 0x41fb06
push ecx
lea ecx, [ebp - 0x9c]
call fcn.0041bcd0
add eax, 0x20
lea ecx, [esi + 0xc0]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.00426140
mov eax, dword [ebp - 0x134]
mov esi, dword [ebp - 0x9c]
cmp esi, dword [eax + 0xc4]
je 0x41fb04
lea eax, [esi + 0xc]
push eax
lea ecx, [ebp - 0x94]
call fcn.004265e0
push esi
mov esi, dword [ebp - 0x134]
lea eax, [ebp - 0x188]
push eax
lea ecx, [esi + 0xc0]
call fcn.0042ba40
jmp 0x41fb06
mov esi, eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x124]
call fcn.00413f20
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x90]
je 0x41fb4d
push dword [ebp - 0x14c]
lea eax, [ebp - 0x94]
mov ecx, esi
push dword [ebp - 0x15c]
push dword [ebp - 0x158]
push dword [ebp - 0x154]
push eax
call fcn.0041e220
lea ecx, [ebp - 0x94]
call fcn.00428ad0
push dword [ebp - 0x138]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x70]
call fcn.00413420
lea ecx, [ebp - 0x18]
call fcn.00426bf0
lea ecx, [ebp - 0x14]
call fcn.00426bf0
lea ecx, [ebp - 0xb4]
call fcn.00413420
lea ecx, [ebp - 0x24]
call fcn.00426bf0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00413420
jmp 0x41fbbe
push str.FileIo_RenamePath
mov ecx, esi
call fcn.0042e940
test al, al
je 0x41fbbe
mov eax, dword [ebp - 0x154]
cmp dword [eax], 0
jne 0x41fbbe
mov dword [eax], 1
mov eax, dword [ebp + 8]
add edi, 8
mov dword [ebp - 0x13c], edi
mov esi, dword [eax + 4]
cmp edi, esi
jne 0x41e2e0
lea ecx, [ebp - 0xd8]
call fcn.004288b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d84d0
mov esp, ebp
pop ebp
ret 0x14
call fcn.0042a230
call fcn.0051d2db
push 0x80004005
call fcn.00412830
push str.list_T__too_long
call fcn.0045ea3c
int3