Function at 0x41e120
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x545af9
mov eax, dword fs:[0]
push eax
sub esp, 0x1b0
mov eax, dword [0x5953ec]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x100], ecx
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp + 0x18]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 0
mov edi, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0xf4], edi
cmp edi, esi
je 0x41fa2a
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x124], eax
nop dword [eax]
mov eax, dword [edi]
mov dword [ebp - 0xf8], eax
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], eax
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xf0], edx
cmp edx, 8
jb 0x41e210
mov edi, dword [eax]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0xf4]
cmp ecx, 0xf
jne 0x41f048
push ecx
mov ecx, dword [ebp - 0x18]
mov edx, str.Registry_Create
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41f03c
lea eax, [edi + 8]
mov dword [ebp - 0x20], eax
cmp eax, esi
je 0x41fa13
mov byte [ebp - 4], 1
call fcn.00413510
mov ecx, eax
test ecx, ecx
je 0x41fa57
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
lea edi, [eax + 0x10]
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0xf4]
push str.KeyName
mov ecx, dword [esi]
call fcn.0045fdc0
test eax, eax
je 0x41e2ac
mov edx, dword [eax + 0x1c]
test edx, edx
jne 0x41e285
xor ecx, ecx
jmp 0x41e29f
mov ecx, edx
lea edi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e290
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x1c]
call fcn.00426490
mov edi, dword [ebp - 0x1c]
mov ecx, dword [esi]
push str.KeyHandle
call fcn.0045fdc0
xor ecx, ecx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], cx
mov byte [ebp - 4], 3
test eax, eax
je 0x41e31c
mov ecx, dword [esi]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0045fe30
mov esi, eax
lea eax, [ebp - 0x38]
cmp eax, esi
je 0x41e314
mov ecx, eax
call fcn.004282d0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x38], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x28], xmm0
mov word [esi], ax
lea ecx, [ebp - 0x80]
call fcn.004282d0
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x20]
mov byte [ebp - 0xf9], 1
mov eax, dword [esi]
mov eax, dword [eax + 0x54]
mov ecx, eax
mov dword [ebp - 0xf0], eax
cmp dword [eax + 0x14], 8
mov edx, dword [eax + 0x10]
mov dword [ebp - 0xf8], edx
jb 0x41e35c
mov ecx, dword [eax]
cmp edx, 0x11
jne 0x41e91d
push edx
mov edx, str.Registry_SetValue
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41e911
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ecx]
mov dword [ebp - 0x14], ecx
cmp eax, ecx
je 0x41effe
lea esi, [eax - 8]
mov dword [ebp - 0x18], esi
cmp esi, ecx
jne 0x41e3a5
mov ecx, dword [esi]
mov edx, dword [ecx]
mov ecx, dword [eax]
cmp edx, dword [ecx]
je 0x41e3de
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x54]
cmp dword [ecx + 0x14], 8
mov edx, dword [ecx + 0x10]
jb 0x41e3b5
mov ecx, dword [ecx]
cmp edx, 0xf
jne 0x41e3d2
push edx
mov edx, str.Registry_Create
call fcn.00428ac0
add esp, 4
test eax, eax
je 0x41e3de
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x14]
cmp esi, ecx
je 0x41e3e1
sub esi, 8
jmp 0x41e397
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], esi
cmp esi, ecx
je 0x41e75c
jmp 0x41e3f3
mov edi, dword [ebp - 0x1c]
mov eax, dword [esi]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
cmp ecx, dword [eax]
jne 0x41e75c
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
mov edx, 0x811c9dc5
cmovae eax, dword [ebp - 0x38]
xor ecx, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
add eax, eax
je 0x41e43f
mov edi, dword [ebp - 0x14]
mov esi, eax
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x41e428
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x100]
mov eax, dword [ecx + 0x114]
mov ecx, dword [ecx + 0x108]
and eax, edx
mov ecx, dword [ecx + eax*8]
lea eax, [eax*8 + 4]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x114], ecx
mov edx, dword [eax + 0x100]
mov dword [ebp - 0x104], edx
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x114], edx
jne 0x41e48a
mov eax, edx
jmp 0x41e4a7
mov edi, dword [ebp - 0x100]
mov esi, dword [ebp - 0x110]
mov eax, dword [edi + 0x108]
mov edi, dword [ebp - 0x1c]
mov eax, dword [esi + eax]
mov esi, dword [ebp - 0x18]
mov eax, dword [eax]
cmp ecx, eax
je 0x41e53f
mov edi, dword [ecx + 0x1c]
lea edx, [ebp - 0x38]
mov eax, dword [ecx + 0x18]
add ecx, 8
cmp dword [ebp - 0x24], 8
mov dword [ebp - 0xf8], edi
cmovae edx, dword [ebp - 0x38]
cmp edi, 8
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0xf0], eax
jb 0x41e4d9
mov ecx, dword [ecx]
cmp eax, dword [ebp - 0x28]
jne 0x41e4eb
push eax
call fcn.00428ac0
add esp, 4
test eax, eax
je 0x41e4f8
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x104]
mov ecx, dword [ecx]
jmp 0x41e47b
mov edx, dword [ebp - 0x14]
add edx, 8
cmp dword [ebp - 0xf8], 8
jb 0x41e509
mov edx, dword [edx]
cmp dword [ebp - 0x24], 8
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmovae ecx, dword [ebp - 0x38]
cmp eax, dword [ebp - 0xf0]
jne 0x41e531
push eax
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41e531
mov eax, dword [ebp - 0x14]
jmp 0x41e541
mov eax, dword [ebp - 0x100]
mov eax, dword [eax + 0x100]
jmp 0x41e541
mov eax, edx
mov ecx, dword [ebp - 0x100]
cmp eax, dword [ecx + 0x100]
jne 0x41e75c
mov ecx, dword [esi]
push str.KeyHandle
call fcn.0045fdc0
test eax, eax
je 0x41e5b3
mov ecx, dword [esi]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0045fe30
lea ecx, [ebp - 0x38]
mov dword [ebp - 0xf0], eax
cmp ecx, eax
je 0x41e5ab
call fcn.004282d0
mov eax, dword [ebp - 0xf0]
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x38], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movq qword [ebp - 0x28], xmm0
mov word [eax], cx
lea ecx, [ebp - 0x80]
call fcn.004282d0
mov byte [ebp - 4], 5
call fcn.00413510
mov ecx, eax
test ecx, ecx
je 0x41fa57
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 6
mov ecx, dword [esi]
push str.KeyName
call fcn.0045fdc0
test eax, eax
je 0x41e61d
mov edx, dword [eax + 0x1c]
test edx, edx
jne 0x41e5f2
xor ecx, ecx
jmp 0x41e613
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xf0], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e600
sub ecx, dword [ebp - 0xf0]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x14]
call fcn.00426490
push edi
lea eax, [ebp - 0x14]
push 0x577794
push eax
call fcn.00429940
mov edi, dword [ebp - 0x14]
add esp, 0xc
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
mov dword [ebp - 0xf8], ecx
lea edx, [edi - 0x10]
mov dword [ebp - 0x110], edx
cmp edx, ecx
je 0x41e6b4
lea eax, [ecx + 0xc]
mov dword [ebp - 0xf0], eax
mov eax, dword [eax]
shr eax, 0x1f
test al, al
jne 0x41e6a8
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x41e6a8
push edx
call fcn.00428e90
add esp, 4
mov dword [ebp - 0x104], eax
mov byte [ebp - 4], 7
or ecx, 0xffffffff
mov edx, dword [ebp - 0xf0]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41e69c
mov eax, dword [ebp - 0xf8]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x104]
add eax, 0x10
mov byte [ebp - 4], 6
mov dword [ebp - 0x1c], eax
jmp 0x41e6b4
push dword [edx + 4]
lea ecx, [ebp - 0x1c]
push edi
call fcn.00426490
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp esi, eax
je 0x41e73c
mov edi, dword [ebp + 8]
sub esi, 8
mov dword [ebp - 0x18], esi
cmp esi, eax
jne 0x41e6da
mov eax, dword [esi]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
cmp ecx, dword [eax]
je 0x41e70c
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x54]
cmp dword [ecx + 0x14], 8
mov eax, dword [ecx + 0x10]
jb 0x41e6ea
mov ecx, dword [ecx]
cmp eax, 0xf
jne 0x41e701
push eax
mov edx, str.Registry_Create
call fcn.00428ac0
add esp, 4
test eax, eax
je 0x41e70c
mov eax, dword [edi]
cmp esi, eax
je 0x41e70c
sub esi, 8
jmp 0x41e6c6
mov dword [ebp - 0x18], esi
mov edx, dword [ebp - 0x110]
or eax, 0xffffffff
mov byte [ebp - 4], 9
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41e72e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
cmp esi, dword [edi]
jne 0x41e3f0
jmp 0x41e75f
add edi, 0xfffffff0
mov byte [ebp - 4], 8
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x41e758
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edi, dword [ebp + 8]
mov ecx, dword [esi]
test ecx, ecx
je 0x41effe
cmp esi, dword [edi]
mov edi, dword [ebp - 0xf4]
je 0x41f004
mov eax, dword [edi]
mov ecx, dword [ecx]
cmp ecx, dword [eax]
jne 0x41f004
mov esi, dword [ebp - 0x20]
push str.KeyHandle
mov ecx, dword [esi]
call fcn.0045fdc0
test eax, eax
je 0x41e7b3
mov ecx, dword [esi]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0045fe30
push eax
lea ecx, [ebp - 0x50]
call fcn.00426880
lea ecx, [ebp - 0x80]
call fcn.004282d0
cmp dword [ebp - 0x24], 8
lea esi, [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov edx, 0x811c9dc5
cmovae esi, dword [ebp - 0x38]
xor ecx, ecx
add eax, eax
je 0x41e7e7
mov edi, eax
nop
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x41e7d0
mov edi, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x100]
mov eax, dword [ecx + 0x114]
mov ecx, dword [ecx + 0x108]
and eax, edx
mov edx, dword [ecx + eax*8]
lea eax, [eax*8 + 4]
mov dword [ebp - 0xf0], eax
mov esi, edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x104], edx
mov ecx, dword [eax + 0x100]
mov dword [ebp - 0x14], ecx
cmp edx, ecx
jne 0x41e82a
mov eax, ecx
jmp 0x41e847
mov edi, dword [ebp - 0x100]
mov edx, dword [ebp - 0xf0]
mov eax, dword [edi + 0x108]
mov edi, dword [ebp - 0xf4]
mov eax, dword [edx + eax]
mov eax, dword [eax]
cmp esi, eax
je 0x41e8ea
cmp dword [ebp - 0x24], 8
lea eax, [esi + 8]
mov edi, dword [eax + 0x14]
lea edx, [ebp - 0x38]
cmovae edx, dword [ebp - 0x38]
cmp edi, 8
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x110], edi
mov edi, dword [ebp - 0xf4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0xf8], eax
jb 0x41e887
mov eax, dword [eax]
jmp 0x41e88d
mov eax, dword [ebp - 0xf8]
cmp ecx, dword [ebp - 0x28]
jne 0x41e8a1
push ecx
mov ecx, eax
call fcn.00428ac0
add esp, 4
test eax, eax
je 0x41e8b1
mov esi, dword [esi]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x104]
jmp 0x41e822
cmp dword [ebp - 0x110], 8
mov edx, dword [ebp - 0x18]
jb 0x41e8bf
mov edx, dword [edx]
cmp dword [ebp - 0x24], 8
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmovae ecx, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x114]
jne 0x41e8e7
push eax
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41e8e7
mov ecx, dword [ebp - 0x14]
jmp 0x41e8ec
mov ecx, dword [ebp - 0x14]
mov esi, ecx
xor edx, edx
cmp esi, ecx
je 0x41e8f5
mov edx, dword [esi + 0x20]
push dword [ebp - 0x120]
lea eax, [ebp - 0x50]
push 0
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041cc00
add esp, 0xc
jmp 0x41ee32
mov eax, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xf8]
cmp dword [eax + 0x14], 8
jb 0x41e925
mov eax, dword [eax]
cmp edx, 0xf
jne 0x41e942
push edx
mov edx, str.Registry_Create
mov ecx, eax
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41e942
mov al, 1
jmp 0x41e944
xor al, al
test al, al
je 0x41effe
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0xf4]
push str.Status
mov ecx, dword [eax]
call fcn.0045fdc0
mov ecx, eax
test ecx, ecx
je 0x41e9e4
mov eax, dword [ebp - 0xf4]
push ecx
lea ecx, [ebp - 0x80]
push ecx
mov ecx, dword [eax]
call fcn.0045fe30
lea ecx, [ebp - 0x98]
mov dword [ebp - 0xf0], eax
cmp ecx, eax
je 0x41e9dc
call fcn.004282d0
mov eax, dword [ebp - 0xf0]
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x98], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movq qword [ebp - 0x88], xmm0
mov word [eax], cx
lea ecx, [ebp - 0x80]
call fcn.004282d0
cmp dword [ebp - 0x84], 8
lea ecx, [ebp - 0x98]
cmovae ecx, dword [ebp - 0x98]
cmp dword [ebp - 0x88], 1
jne 0x41ea18
push 1
mov edx, 0x5777ac
call fcn.00428ac0
add esp, 4
test eax, eax
je 0x41ee10
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
call fcn.00426000
mov byte [ebp - 4], 0xb
mov ecx, dword [esi]
push str.Status
call fcn.0045fdc0
mov ecx, dword [esi]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0045fe30
lea ecx, [ebp - 0x98]
mov dword [ebp - 0xf0], eax
cmp ecx, eax
je 0x41ea88
call fcn.004282d0
mov eax, dword [ebp - 0xf0]
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x98], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movq qword [ebp - 0x88], xmm0
mov word [eax], cx
lea ecx, [ebp - 0x80]
call fcn.004282d0
cmp dword [ebp - 0x84], 8
lea ecx, [ebp - 0x98]
cmovae ecx, dword [ebp - 0x98]
cmp dword [ebp - 0x88], 1
jne 0x41ec59
push 1
mov edx, 0x5777ac
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41ec59
mov byte [ebp - 4], 0xc
call fcn.00413510
mov ecx, eax
test ecx, ecx
je 0x41fa57
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x20]
push str.KeyName
mov ecx, dword [eax]
call fcn.0045fdc0
test eax, eax
je 0x41eb2c
mov edx, dword [eax + 0x1c]
test edx, edx
jne 0x41eb0a
xor ecx, ecx
jmp 0x41eb1f
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41eb10
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x14]
call fcn.00426490
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov dword [ebp - 0xf8], ecx
cmp dword [ecx + 4], 0
jne 0x41ebac
lea edx, [esi - 0x10]
cmp edx, ecx
je 0x41ebbe
lea eax, [ecx + 0xc]
mov dword [ebp - 0xf0], eax
mov eax, dword [eax]
shr eax, 0x1f
test al, al
jne 0x41eb9e
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x41eb9e
push edx
call fcn.00428e90
add esp, 4
mov dword [ebp - 0x104], eax
mov byte [ebp - 4], 0xe
or ecx, 0xffffffff
mov edx, dword [ebp - 0xf0]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41eb96
mov eax, dword [ebp - 0xf8]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x104]
add eax, 0x10
mov dword [ebp - 0x18], eax
jmp 0x41ebbe
push dword [edx + 4]
lea ecx, [ebp - 0x18]
push esi
call fcn.00426490
jmp 0x41ebbe
push esi
lea eax, [ebp - 0x18]
push 0x577794
push eax
call fcn.00429940
add esp, 0xc
test esi, esi
je 0x41ec3a
cmp dword [edi - 0xc], 0
jl 0x41ec3a
push esi
push edi
call fcn.0051943a
add esp, 8
test eax, eax
je 0x41ec3a
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
je 0x41ec3a
add dword [ebp - 0x20], 8
add esi, 0xfffffff0
mov byte [ebp - 4], 0x10
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41ebff
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 0xb
mov esi, dword [ebp - 0x20]
cmp esi, dword [eax + 4]
je 0x41ec59
mov eax, dword [esi]
mov ecx, dword [eax + 0x54]
cmp dword [ecx + 0x14], 8
mov eax, dword [ecx + 0x10]
jb 0x41ec1e
mov ecx, dword [ecx]
cmp eax, 0xf
jne 0x41ec59
push eax
mov edx, str.Registry_Create
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41ec59
jmp 0x41ea2b
add esi, 0xfffffff0
mov byte [ebp - 4], 0xf
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41ec56
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x20]
mov byte [ebp - 4], 0x11
test edi, edi
je 0x41fa57
mov eax, dword [ebp - 0x18]
mov ecx, edi
nop word [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41ec96
test dx, dx
je 0x41ec92
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41ec96
add eax, 4
add ecx, 4
test dx, dx
jne 0x41ec70
xor eax, eax
jmp 0x41ec9b
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0xb
test eax, eax
jne 0x41edea
cmp dword [edi - 0xc], eax
je 0x41edea
cmp dword [ebp - 0x24], 8
mov edx, 0x811c9dc5
mov byte [ebp - 0xf9], al
lea eax, [esi - 8]
mov dword [ebp - 0xf4], eax
lea esi, [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmovae esi, dword [ebp - 0x38]
xor ecx, ecx
lea edi, [eax + eax]
test edi, edi
je 0x41ecf1
nop dword [eax + eax]
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x41ece0
mov ecx, dword [ebp - 0x100]
mov eax, dword [ecx + 0x114]
mov edi, dword [ecx + 0x108]
and eax, edx
mov ecx, dword [ecx + 0x100]
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0x14], ecx
mov edx, dword [edi + eax*8]
lea eax, [eax*8 + 4]
mov dword [ebp - 0xf0], edx
mov esi, edx
mov dword [ebp - 0x104], eax
nop dword [eax]
cmp edx, ecx
jne 0x41ed38
mov eax, ecx
jmp 0x41ed3d
mov eax, dword [eax + edi]
mov eax, dword [eax]
cmp esi, eax
je 0x41edc6
cmp dword [ebp - 0x24], 8
lea edi, [esi + 8]
mov eax, dword [edi + 0x10]
lea edx, [ebp - 0x38]
cmovae edx, dword [ebp - 0x38]
mov ecx, edi
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x110], eax
jb 0x41ed66
mov ecx, dword [edi]
cmp eax, dword [ebp - 0x28]
jne 0x41ed78
push eax
call fcn.00428ac0
add esp, 4
test eax, eax
je 0x41ed91
mov esi, dword [esi]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xf0]
mov edi, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x104]
jmp 0x41ed30
cmp dword [edi + 0x14], 8
jb 0x41ed99
mov edi, dword [edi]
cmp dword [ebp - 0x24], 8
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmovae ecx, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x110]
jne 0x41edc3
push eax
mov edx, edi
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41edc3
mov ecx, dword [ebp - 0x14]
jmp 0x41edc8
mov ecx, dword [ebp - 0x14]
mov esi, ecx
xor edx, edx
cmp esi, ecx
je 0x41edd1
mov edx, dword [esi + 0x20]
push dword [ebp - 0x120]
lea eax, [ebp - 0x50]
push 1
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041cc00
add esp, 0xc
jmp 0x41edf1
mov byte [ebp - 0xf9], 1
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x12
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41ee10
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 4
call fcn.004282d0
cmp byte [ebp - 0xf9], 0
mov edi, dword [ebp - 0xf4]
jne 0x41f004
mov esi, dword [ebp - 0x100]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
lea ecx, [esi + 0xfc]
call fcn.00425130
mov eax, dword [ebp - 0x14]
cmp eax, dword [esi + 0x100]
je 0x41ee66
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x140]
call fcn.00426910
mov eax, dword [ebp - 0x124]
or dword [ebp - 0x10c], 1
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 0x14
xor eax, eax
mov word [ebp - 0x68], ax
mov eax, dword [ebp - 0x1c]
mov edx, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
lea esi, [edx + 2]
nop dword [eax + eax]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x41eeb0
sub edx, esi
lea ecx, [ebp - 0x68]
sar edx, 1
push edx
push eax
call fcn.00428650
movups xmm0, xmmword [ebp - 0x68]
xor eax, eax
mov word [ebp - 0x68], ax
movups xmmword [ebp - 0x19c], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [ebp - 0x18c], xmm0
movups xmm0, xmmword [ebp - 0x140]
mov word [ebp - 0x140], ax
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x184], xmm0
mov dword [ebp - 0x54], 7
movq xmm0, qword [ebp - 0x130]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x124]
movq qword [ebp - 0x174], xmm0
mov dword [ebp - 0x12c], 7
mov dword [ebp - 0x16c], eax
mov ecx, dword [ebp - 0x120]
lea eax, [ebp - 0x19c]
push eax
mov byte [ebp - 4], 0x16
call fcn.00432eb0
push eax
add eax, 0x10
push eax
push ecx
mov ecx, dword [ebp - 0x120]
lea eax, [ebp - 0x1a4]
push eax
call fcn.00432f30
lea ecx, [ebp - 0x184]
call fcn.004282d0
lea ecx, [ebp - 0x19c]
call fcn.004282d0
lea ecx, [ebp - 0x68]
call fcn.004282d0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 4
call fcn.004282d0
lea ecx, [ebp - 0x1c]
call fcn.00426200
mov esi, dword [ebp - 0x1c]
cmp dword [esi - 0xc], 0
jl 0x41efc9
push 0x5777b0
push esi
call fcn.0051943a
add esp, 8
test eax, eax
je 0x41efc9
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41efc9
mov eax, dword [ebp - 0x11c]
mov dword [eax], 2
lea ecx, [ebp - 0x50]
call fcn.004282d0
lea ecx, [ebp - 0x38]
call fcn.004282d0
mov byte [ebp - 4], 0x17
lea edx, [esi - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41f033
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
jmp 0x41fa13
mov edi, dword [ebp - 0xf4]
lea ecx, [ebp - 0x50]
call fcn.004282d0
lea ecx, [ebp - 0x38]
call fcn.004282d0
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x13
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41f033
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
jmp 0x41fa13
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xf0]
mov esi, eax
cmp edx, 8
jb 0x41f051
mov esi, dword [eax]
cmp ecx, 0x11
jne 0x41f06e
push ecx
mov edx, str.Registry_SetValue
mov ecx, esi
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41f06e
mov al, 1
jmp 0x41f070
xor al, al
test al, al
je 0x41f220
mov ecx, dword [ebp - 0xf8]
push str.KeyName
call fcn.0045fdc0
mov ecx, dword [ebp - 0xf8]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0045fe30
mov byte [ebp - 4], 0x18
mov esi, dword [edi]
mov ecx, esi
push str.KeyHandle
call fcn.0045fdc0
push eax
lea eax, [ebp - 0x68]
mov ecx, esi
push eax
call fcn.0045fe30
mov ecx, dword [ebp - 0x118]
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x19
call fcn.0042bbf0
mov esi, eax
mov eax, dword [ebp - 0x118]
cmp esi, dword [eax]
je 0x41f130
cmp dword [esi + 0x24], 8
lea edx, [esi + 0x10]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x14], eax
jb 0x41f0e6
mov edx, dword [edx]
cmp dword [ebp - 0x54], 8
lea ecx, [ebp - 0x68]
mov eax, dword [ebp - 0x58]
mov edi, eax
cmovae ecx, dword [ebp - 0x68]
cmp dword [ebp - 0x14], edi
cmovb eax, dword [ebp - 0x14]
push eax
call fcn.00428ac0
mov edi, dword [ebp - 0xf4]
add esp, 4
test eax, eax
jne 0x41f123
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x58]
cmp eax, ecx
jbe 0x41f11f
or eax, 0xffffffff
jmp 0x41f123
sbb eax, eax
neg eax
shr eax, 0x1f
test al, al
je 0x41f167
mov eax, dword [ebp - 0x118]
lea ecx, [ebp - 0x68]
push ecx
mov dword [ebp - 0xf0], ecx
lea ecx, [ebp - 0xf0]
push ecx
push ecx
mov ecx, eax
call fcn.004347d0
mov ecx, dword [ebp - 0x118]
push eax
add eax, 0x10
push eax
push esi
lea eax, [ebp - 0x144]
push eax
call fcn.00434860
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x140]
call fcn.00426910
or dword [ebp - 0x10c], 2
mov dword [ebp - 0x128], 1
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x140]
mov eax, dword [esi + 0x2c]
push edx
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
mov ecx, dword [eax + 4]
push ecx
push eax
mov dword [ebp - 0x104], ecx
call fcn.00434000
mov edx, dword [esi + 0x30]
mov ecx, 0x71c71c6
sub ecx, edx
mov dword [ebp - 0xf8], eax
cmp ecx, 1
jb 0x41fa61
mov eax, dword [ebp - 0xf0]
lea ecx, [edx + 1]
mov dword [esi + 0x30], ecx
mov ecx, dword [ebp - 0xf8]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x104]
mov dword [eax], ecx
lea ecx, [esi + 0x28]
mov eax, dword [esi + 0x2c]
mov eax, dword [eax]
push eax
lea edx, [eax + 8]
push edx
lea eax, [ebp - 0x1ac]
push eax
call fcn.00433170
lea ecx, [ebp - 0x140]
call fcn.004282d0
lea ecx, [ebp - 0x68]
call fcn.004282d0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0
call fcn.004282d0
jmp 0x41fa13
mov esi, dword [ebp - 0x20]
mov ecx, esi
cmp dword [esi + 0x14], 8
jb 0x41f22d
mov ecx, dword [esi]
mov eax, dword [ebp - 0x14]
cmp eax, 0xd
jne 0x41f24a
push eax
mov edx, str.FileIo_Create
call fcn.00428ac0
add esp, 4
test eax, eax
je 0x41f273
mov eax, dword [ebp - 0x14]
cmp dword [esi + 0x14], 8
jb 0x41f252
mov esi, dword [esi]
cmp eax, 0x11
jne 0x41fa13
push eax
mov edx, str.FileIo_RenamePath
mov ecx, esi
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41fa13
mov byte [ebp - 4], 0x1b
call fcn.00413510
mov ecx, eax
test ecx, ecx
je 0x41fa57
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x1c
mov esi, dword [edi]
mov ecx, dword [esi + 0x54]
cmp dword [ecx + 0x14], 8
mov eax, dword [ecx + 0x10]
jb 0x41f2a7
mov ecx, dword [ecx]
cmp eax, 0xd
jne 0x41f2c2
push eax
mov edx, str.FileIo_Create
call fcn.00428ac0
add esp, 4
test eax, eax
jne 0x41f2c2
mov al, 1
jmp 0x41f2c4
xor al, al
mov ecx, esi
test al, al
je 0x41f335
push str.OpenPath
call fcn.0045fdc0
push eax
lea eax, [ebp - 0x50]
mov ecx, esi
push eax
call fcn.0045fe30
mov byte [ebp - 4], 0x1d
lea edx, [ebp - 0x50]
cmp dword [ebp - 0x3c], 8
lea ecx, [ebp - 0x80]
cmovae edx, dword [ebp - 0x50]
call fcn.0045d8a0
mov edx, eax
mov byte [ebp - 4], 0x1e
cmp dword [edx + 0x14], 8
jb 0x41f305
mov edx, dword [edx]
test edx, edx
jne 0x41f30d
xor ecx, ecx
jmp 0x41f321
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f312
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x18]
call fcn.00426490
lea ecx, [ebp - 0x80]
call fcn.004282d0
jmp 0x41f3b2
push str.FileName
call fcn.0045fdc0
push eax
lea eax, [ebp - 0x50]
mov ecx, esi
push eax
call fcn.0045fe30
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x50]
cmp dword [ebp - 0x3c], 8
lea ecx, [ebp - 0x80]
cmovae edx, dword [ebp - 0x50]
call fcn.0045d8a0
mov edx, eax
mov byte [ebp - 4], 0x20
cmp dword [edx + 0x14], 8
jb 0x41f370
mov edx, dword [edx]
test edx, edx
jne 0x41f378
xor ecx, ecx
jmp 0x41f38f
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f380
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x18]
call fcn.00426490
lea ecx, [ebp - 0x80]
call fcn.004282d0
mov eax, dword [ebp - 0x11c]
cmp dword [eax], 0
jne 0x41f3b2
mov dword [eax], 1
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x1c
call fcn.004282d0
xor eax, eax
mov dword [ebp - 0xb4], 0
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0x18]
mov edx, eax
mov dword [ebp - 0xb0], 7
lea esi, [edx + 2]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x41f3e3
sub edx, esi
lea ecx, [ebp - 0xc4]
sar edx, 1
push edx
push eax
call fcn.00428650
mov byte [ebp - 4], 0x21
mov esi, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ebp - 0xc4]
test esi, esi
je 0x41f45f
cmp ecx, 8
lea eax, [ebp - 0xc4]
cmovae eax, edx
cmp word [eax + esi*2 - 2], 0x5c
jne 0x41f45f
lea eax, [esi - 1]
cmp esi, eax
jb 0x41fa52
cmp ecx, 8
lea eax, [ebp - 0xc4]
lea ecx, [esi - 1]
cmovae eax, edx
mov dword [ebp - 0xb4], ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ebp - 0xc4]
lea esi, [ebp - 0xc4]
cmp ecx, 8
jb 0x41f474
mov esi, edx
test esi, esi
jne 0x41f474
xor ecx, ecx
jmp 0x41f48f
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f480
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x18]
call fcn.00426490
mov esi, dword [ebp - 0x18]
xor eax, eax
mov ecx, esi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f4b5
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x50]
call fcn.00428650
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.00425380
mov ecx, dword [ebp - 0x108]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov dword [ebp - 0xf0], ecx
lea ecx, [ebp - 0x50]
mov dword [ebp - 0xf8], eax
call fcn.004282d0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xf8], eax
je 0x41f544
lea ecx, [ebp - 0xc4]
call fcn.004282d0
add esi, 0xfffffff0
mov byte [ebp - 4], 0x22
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41f033
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
jmp 0x41fa13
push 0
push 0x2000000
push 3
push 0
push 1
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x104], eax
cmp eax, 0xffffffff
je 0x41f9fc
lea ecx, [ebp - 0xe8]
push ecx
lea ecx, [ebp - 0xe0]
push ecx
lea ecx, [ebp - 0xd8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileTime]
mov byte [ebp - 4], 0x23
call fcn.00413510
mov ecx, eax
test ecx, ecx
je 0x41fa57
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x20]
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
call fcn.0044ccd0
mov eax, dword [edi]
add esp, 8
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 0x25
call fcn.00413510
mov ecx, eax
test ecx, ecx
je 0x41fa57
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x14]
push dword [ebp - 0xf0]
push dword [ebp - 0xf8]
call fcn.0044ccd0
xor eax, eax
mov dword [ebp - 0x40], 0
add esp, 8
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x41fa57
mov ecx, dword [ebp - 0x14]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x41f65b
test dx, dx
je 0x41f657
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x41f65b
add ecx, 4
add eax, 4
test dx, dx
jne 0x41f635
xor eax, eax
jmp 0x41f660
sbb eax, eax
or eax, 1
mov byte [ebp - 4], 0x27
push esi
test eax, eax
jne 0x41f76f
lea ecx, [ebp - 0x80]
call fcn.004268c0
movups xmm0, xmmword [eax]
xor ecx, ecx
mov dword [ebp - 0x128], 1
movups xmmword [ebp - 0x140], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movq qword [ebp - 0x130], xmm0
mov word [eax], cx
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x140]
push eax
mov byte [ebp - 4], 0x2a
call fcn.004333d0
push eax
add eax, 0x10
push eax
push ecx
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x1b4]
push eax
call fcn.00433430
lea ecx, [ebp - 0x140]
call fcn.004282d0
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x27
call fcn.004282d0
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f6f3
sub ecx, edx
mov dword [ebp - 0x58], 0
sar ecx, 1
xor eax, eax
push ecx
push esi
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.00428650
mov esi, dword [ebp - 0x10c]
or esi, 0xc
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0x68]
call fcn.00413250
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x2c
call fcn.00426910
lea eax, [ebp - 0x15c]
or esi, 0x80
push eax
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x10c], esi
call fcn.00426880
lea ecx, [ebp - 0x15c]
jmp 0x41f872
lea ecx, [ebp - 0x68]
call fcn.004268c0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x2d
call fcn.0044cda0
lea ecx, [ebp - 0x68]
call fcn.0044cd60
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x164]
push eax
call fcn.00425380
mov ecx, dword [ebp - 0x108]
mov eax, dword [eax]
cmp eax, dword [ecx]
je 0x41f87f
push esi
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0xf0], 1
call fcn.004268c0
lea ecx, [ebp - 0xf0]
mov edx, eax
push ecx
lea ecx, [ebp - 0x140]
call fcn.0042a8b0
add esp, 4
mov ecx, dword [ebp - 0x108]
push eax
lea eax, [ebp - 0x1bc]
mov byte [ebp - 4], 0x2f
push eax
call fcn.0042a8f0
lea ecx, [ebp - 0x140]
call fcn.004282d0
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x2d
call fcn.004282d0
push ecx
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf0], esi
push eax
lea ecx, [ebp - 0x80]
call fcn.00429850
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x80]
call fcn.00413250
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x31
call fcn.00426910
or dword [ebp - 0x10c], 0x100
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00426880
lea ecx, [ebp - 0x15c]
call fcn.004282d0
lea ecx, [ebp - 0x13c]
call fcn.004282d0
lea ecx, [ebp - 0x80]
call fcn.004282d0
lea ecx, [ebp - 0x68]
call fcn.004282d0
cmp dword [ebp - 0x40], 0
je 0x41f9d8
push 0
push str..lnk
lea ecx, [ebp - 0x50]
call fcn.00426740
cmp eax, 0xffffffff
je 0x41f8b1
mov eax, dword [ebp - 0x11c]
mov dword [eax], 2
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041b680
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov esi, dword [ebp - 0x100]
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x32
lea eax, [esi + 0x18]
push eax
call fcn.00425e10
push ecx
lea ecx, [ebp - 0xa8]
call fcn.0041b670
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xa8]
lea ecx, [esi + 0xdc]
push eax
call fcn.00425130
mov eax, dword [ebp - 0xa8]
cmp eax, dword [esi + 0xe0]
je 0x41f986
push ecx
lea ecx, [ebp - 0xac]
call fcn.0041b670
add eax, 0x20
lea ecx, [esi + 0xbc]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00425730
mov eax, dword [ebp - 0x100]
mov esi, dword [ebp - 0xac]
cmp esi, dword [eax + 0xc0]
je 0x41f984
lea eax, [esi + 0xc]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00425ba0
push esi
mov esi, dword [ebp - 0x100]
lea eax, [ebp - 0x168]
push eax
lea ecx, [esi + 0xbc]
call fcn.0042a1c0
jmp 0x41f986
mov esi, eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0xec]
call fcn.00413c00
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xa0]
je 0x41f9cd
push dword [ebp - 0x118]
lea eax, [ebp - 0xa4]
mov ecx, esi
push dword [ebp - 0x108]
push dword [ebp - 0x120]
push dword [ebp - 0x11c]
push eax
call fcn.0041e120
lea ecx, [ebp - 0xa4]
call fcn.00427da0
push dword [ebp - 0x104]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x50]
call fcn.004282d0
lea ecx, [ebp - 0x14]
call fcn.00425fa0
lea ecx, [ebp - 0x20]
call fcn.00425fa0
lea ecx, [ebp - 0xc4]
call fcn.004282d0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00425fa0
mov eax, dword [ebp + 8]
add edi, 8
mov dword [ebp - 0xf4], edi
mov esi, dword [eax + 4]
cmp edi, esi
jne 0x41e1e0
lea ecx, [ebp - 0xd0]
call fcn.00427b80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e059c
mov esp, ebp
pop ebp
ret 0x14
call fcn.00428f60
push 0x80004005
call fcn.00412840
push str.list_T__too_long
call fcn.004626df
int3