Function at 0x406c38
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ecx, 0x26
mov edx, str.invalid_seek
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x48a]
mov esi, section..rdata
push ebx
sub esp, 0x53c
mov dword [ebp - 0x4fa], 0x492d7469
rep movsb byte es:[edi], byte [esi]
mov word [ebp - 0x4f6], 0x54
mov al, byte [edx]
test al, al
je 0x406c8a
sub eax, 0x30
cmp al, 9
jbe 0x406c87
sub dword [0x41210c], 0x192adec8
jmp 0x406c8a
inc edx
jmp 0x406c6e
mov esi, dword [0x41210c]
xor ebx, ebx
and esi, 0xf900cced
mov dword [0x41208c], esi
mov eax, dword [0x41210c]
mov edx, eax
or edx, 0x7539bbce
mov dword [0x411ee4], edx
mov dword [esp], eax
mov dword [esp + 4], 0x4135c0
call fcn.0040c514
mov eax, esi
mov byte [ebp + ebx - 0x418], bl
inc ebx
xor eax, 0x9a24ff3f
mov dword [0x41210c], eax
cmp ebx, 0x100
jne 0x406c9e
xor edi, edi
xor esi, esi
mov al, byte [ebp + esi - 0x418]
mov ebx, 5
xor edx, edx
mov byte [ebp - 0x51c], al
mov eax, esi
div ebx
mov al, byte [ebp - 0x51c]
mov ebx, dword [0x41210c]
add al, byte [ebp + edx - 0x4fa]
add eax, edi
movzx edi, al
imul eax, ebx, 0x1f1585b9
mov dword [0x411ee4], eax
xor eax, eax
cmp byte [eax + 0x412ab4], 0
je 0x406d40
inc eax
cmp eax, 0x461
jne 0x406d1e
call fcn.0040c924
imul ebx, ebx, 0x3e508879
mov dword [0x411ee4], ebx
mov edx, dword [0x411ee4]
lea ebx, [edx - 0x6f1faca1]
lea eax, [edx - 0x5418088b]
mov dword [0x41210c], ebx
mov dword [esp + 0xc], 0x412638
mov dword [esp + 8], 0x412638
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0040cd40
mov al, byte [ebp + edi - 0x418]
mov edx, dword [0x411ee4]
mov byte [ebp + esi - 0x418], al
mov al, byte [ebp - 0x51c]
sub edx, 0x2405f6a2
inc esi
mov dword [0x411ee4], edx
mov byte [ebp + edi - 0x418], al
cmp esi, 0x100
jne 0x406ce1
imul edi, ebx, 0x21c2e337
xor esi, esi
xor ecx, ecx
xor edx, edx
inc edx
movzx edx, dl
mov al, byte [ebp + edx - 0x418]
add ecx, eax
mov byte [ebp - 0x51c], al
movzx ecx, cl
mov al, byte [ebp + ecx - 0x418]
mov byte [ebp + edx - 0x418], al
mov al, byte [ebp - 0x51c]
mov byte [ebp + ecx - 0x418], al
add al, byte [ebp + edx - 0x418]
movzx eax, al
mov al, byte [ebp + eax - 0x418]
xor al, byte [esi + ebp - 0x48a]
movzx eax, al
mov word [ebp + esi*2 - 0x464], ax
inc esi
cmp esi, 0x26
jne 0x406dba
or ebx, 0x3ed2110c
xor eax, eax
mov word [ebp - 0x418], 0
mov dword [0x41210c], ebx
cmp byte [eax + 0x412638], 0
je 0x406e60
inc eax
cmp eax, 0x1dbf
jne 0x406e2b
mov ebx, edi
mov dword [esp + 4], str.hi_IN
and ebx, 0xb7379b97
mov dword [esp], ebx
imul ebx, ebx, 0x2bfb2c99
call fcn.0040c514
mov dword [0x41210c], ebx
mov ebx, dword [0x41210c]
lea eax, [ebx - 0x6d3a928b]
mov dword [0x41210c], eax
mov dword [esp + 4], 0x413588
mov dword [esp], edi
call fcn.0040c514
cmp byte [0x412638], 0
mov word [ebp - 0x513], 0x55e1
mov byte [ebp - 0x511], 0x1e
mov dword [ebp - 0x4f4], 0x5a2d7473
mov word [ebp - 0x4f0], 0x41
je 0x406eb2
call fcn.0040e4a0
add ebx, 0xae39527
mov dword [0x411ee4], ebx
call fcn.0040e4a0
xor eax, eax
mov byte [ebp + eax - 0x318], al
inc eax
cmp eax, 0x100
jne 0x406ec5
xor edi, edi
xor esi, esi
mov ecx, 5
xor edx, edx
mov ebx, dword [0x41210c]
imul eax, dword [0x411ee4], 0x293b16b1
mov dword [0x411ee4], eax
mov al, byte [ebp + esi - 0x318]
mov byte [ebp - 0x51c], al
mov eax, esi
div ecx
mov al, byte [ebp - 0x51c]
add al, byte [ebp + edx - 0x4f4]
add eax, edi
movzx edi, al
xor eax, eax
cmp byte [eax + 0x412638], 0
je 0x406f3a
inc eax
cmp eax, 0x2450
jne 0x406f19
lea eax, [ebx + 0x79973857]
xor eax, 0x59c19775
mov dword [0x411ee4], eax
xor ebx, 0x2175028e
imul eax, ebx, 0x2489ee39
mov dword [0x41210c], eax
call fcn.0040bfc0
imul eax, ebx, 0x7eebdc19
mov dword [ebp - 0x520], eax
mov dword [0x41208c], eax
mov al, byte [ebp + edi - 0x318]
mov byte [ebp + esi - 0x318], al
mov al, byte [ebp - 0x51c]
inc esi
mov byte [ebp + edi - 0x318], al
cmp esi, 0x100
jne 0x406ed8
mov edi, dword [0x411ee4]
xor esi, esi
xor ecx, ecx
xor edx, edx
inc edx
movzx edx, dl
mov al, byte [ebp + edx - 0x318]
add ecx, eax
movzx ecx, cl
mov bl, byte [ebp + ecx - 0x318]
mov byte [ebp + edx - 0x318], bl
mov byte [ebp + ecx - 0x318], al
add al, byte [ebp + edx - 0x318]
movzx eax, al
mov al, byte [ebp + eax - 0x318]
xor al, byte [esi + ebp - 0x513]
movzx eax, al
mov word [ebp + esi*2 - 0x500], ax
inc esi
cmp esi, 3
jne 0x406f95
add edi, 0x37abe3a9
xor eax, eax
mov dword [ebp - 0x4e8], 0xa9bfa7c2
mov dword [0x41210c], edi
mov word [ebp - 0x4fa], 0
mov dword [ebp - 0x4e5], 0xfde12ba9
cmp byte [eax + str.MaxMSinFilter], 0
je 0x407036
inc eax
cmp eax, 0x2520
jne 0x40700e
call fcn.0040e4a0
mov ebx, dword [ebp - 0x520]
xor ebx, 0xa09c8268
mov dword [0x41208c], ebx
mov esi, dword [0x41208c]
call fcn.0040bfc0
xor eax, eax
mov dword [ebp - 0x4ee], 0x4d2d6e6d
mov word [ebp - 0x4ea], 0x4e
imul ebx, esi, 0x5da33d0d
xor ebx, 0x763a004f
and ebx, 0x6e3fbfd6
mov dword [0x411ee4], ebx
mov byte [ebp + eax - 0x218], al
inc eax
xor esi, 0xd3a72b2d
cmp eax, 0x100
jne 0x40706e
lea eax, [ebx + 0x1c60aa4e]
mov dword [0x41208c], esi
xor edi, edi
xor esi, esi
mov dword [0x41210c], eax
mov al, byte [ebp + esi - 0x218]
mov ecx, 5
xor edx, edx
mov byte [ebp - 0x51c], al
mov eax, esi
div ecx
movzx eax, byte [ebp + edx - 0x4ee]
movzx edx, byte [ebp - 0x51c]
add eax, edx
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x218]
mov byte [ebp + esi - 0x218], al
mov al, byte [ebp - 0x51c]
inc esi
mov byte [ebp + edi - 0x218], al
cmp esi, 0x100
jne 0x407098
mov edx, str.isBackedOff
mov ecx, 0x272
movsx eax, byte [edx]
inc edx
test al, al
je 0x407116
add ecx, eax
cmp ecx, 0x1c7a
jbe 0x4070f4
call fcn.0040c924
lea eax, [ebx + 0x3392905d]
mov dword [0x41208c], eax
mov eax, dword [0x41208c]
xor edi, edi
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x51c], eax
inc ecx
movzx ecx, cl
mov al, byte [ebp + ecx - 0x218]
add esi, eax
mov edx, esi
movzx esi, dl
mov dl, byte [ebp + esi - 0x218]
mov byte [ebp + ecx - 0x218], dl
mov byte [ebp + esi - 0x218], al
add al, byte [ebp + ecx - 0x218]
movzx eax, al
mov al, byte [ebp + eax - 0x218]
xor al, byte [edi + ebp - 0x4e8]
mov byte [ebp + edi - 0x4e1], al
inc edi
cmp edi, 7
jne 0x407127
mov edx, dword [ebp - 0x51c]
lea edi, [ebp - 0x4d1]
mov esi, 0x413026
xor eax, eax
mov ecx, 0xd
sub ebx, 0x23f234fc
mov dword [ebp - 0x4da], 0x21736825
rep movsb byte es:[edi], byte [esi]
sub edx, 0xb4c1ef4
mov dword [0x41208c], ebx
mov dword [ebp - 0x4d6], 0x203a7025
mov byte [ebp - 0x4d2], 0
mov dword [0x411ee4], edx
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x4071c0
xor edx, 0x8e356b02
xor edi, edi
xor ebx, ebx
mov dword [0x41210c], edx
mov edx, 0x4135c0
mov ecx, 0x11ec
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x40721f
add ecx, eax
cmp ecx, 0x2418
jbe 0x4071e9
mov eax, dword [0x411ee4]
lea edx, [eax + 0x2f057700]
mov dword [0x41208c], edx
mov dword [esp + 4], str.hi_IN
mov dword [esp], eax
call fcn.0040c514
mov esi, dword [0x411ee4]
xor esi, 0x25d83906
mov dword [0x41210c], esi
call fcn.0040bfc0
cmp byte [str.invalid_seek], 0
je 0x407250
call fcn.0040bfc0
and esi, 0x349415bc
mov dword [0x411ee4], esi
mov esi, dword [0x411ee4]
mov cl, byte [ebp + ebx - 0x118]
lea edx, [esi - 0x37f5cbef]
mov dword [0x41208c], edx
mov edx, ebx
and edx, 7
mov al, byte [ebp + edx - 0x4da]
add eax, ecx
mov edx, eax
lea eax, [esi - 0x13451a9b]
add edx, edi
mov dword [0x41210c], eax
movzx edi, dl
mov al, byte [ebp + edi - 0x118]
mov byte [ebp + ebx - 0x118], al
inc ebx
mov byte [ebp + edi - 0x118], cl
cmp ebx, 0x100
jne 0x4071df
xor esi, esi
xor edx, edx
xor edi, edi
lea eax, [edi + 1]
mov ebx, dword [0x41210c]
movzx edi, al
mov cl, byte [ebp + edi - 0x118]
lea eax, [ebx + 0x11028dcc]
mov dword [ebp - 0x51c], eax
add edx, ecx
mov dword [0x411ee4], eax
mov eax, ebx
xor ebx, 0x52040a1d
movzx edx, dl
or eax, 0xc5e12788
mov byte [ebp - 0x524], cl
mov dword [ebp - 0x520], edx
mov dword [0x41208c], eax
call fcn.0040e4a0
mov edx, dword [ebp - 0x520]
mov cl, byte [ebp - 0x524]
mov dword [0x41210c], ebx
mov al, byte [ebp + edx - 0x118]
mov byte [ebp + edi - 0x118], al
mov byte [ebp + edx - 0x118], cl
mov al, byte [ebp + edi - 0x118]
add eax, ecx
movzx eax, al
mov al, byte [ebp + eax - 0x118]
xor al, byte [ebp + esi - 0x4d1]
movzx eax, al
mov word [ebp + esi*2 - 0x4a4], ax
inc esi
cmp esi, 0xd
jne 0x4072b1
mov word [ebp - 0x48a], 0
xor esi, esi
xor edi, edi
mov dword [ebp - 0x510], esi
mov esi, 0x410080
mov dword [esp], ebx
and ebx, 0x52519782
mov dword [esp + 4], str.hi_IN
call fcn.0040e414
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x50c], edi
mov ecx, 4
mov dword [0x41208c], ebx
lea edi, [ebp - 0x4c4]
xor ebx, 0x9ec87274
rep movsd dword es:[edi], dword [esi]
xor eax, 0xd704a811
mov dword [0x41210c], ebx
mov ebx, dword [0x410be0]
add eax, 0x5a5bb77f
lea esi, [ebp - 0x4c4]
or eax, 0x36485b61
mov dword [0x411ee4], eax
mov eax, dword fs:[0x18]
mov dword [ebx + 0x1a0], eax
mov dword [esp], 0x94a1619f
call fcn.0040572c
test eax, eax
mov dword [ebx + 0x124], eax
je 0x408471
mov dword [esp + 4], 0x7eb42da8
mov eax, dword [0x410be0]
mov eax, dword [eax + 0x124]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x10], edx
mov dword [esp + 4], 0xcce23135
mov eax, dword [eax + 0x124]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0xc], edx
imul edx, dword [0x411ee4], 0xc29bb339
mov dword [0x41210c], edx
mov dword [esp + 4], 0xfdf23a8c
mov eax, dword [eax + 0x124]
mov dword [esp], eax
call fcn.00405260
mov edi, dword [0x410be0]
cmp byte [0x412ab4], 0
mov ebx, dword [0x411ee4]
mov dword [edi + 0x14], eax
je 0x407489
mov dword [esp + 4], str.hi_IN
mov dword [esp], 0x412638
call fcn.0040d46c
mov eax, ebx
and eax, 0x2ffdca53
mov dword [0x41208c], eax
or eax, 0x207476a6
mov dword [0x41210c], eax
mov dword [esp + 4], 0x17714623
mov eax, dword [edi + 0x124]
mov dword [esp], eax
call fcn.00405260
mov edx, dword [0x410be0]
mov dword [edx + 0x18], eax
mov eax, dword [0x41210c]
add eax, 0x5aab8f22
mov dword [0x411ee4], eax
mov dword [esp + 4], 0x75df8a09
mov eax, dword [edx + 0x124]
mov dword [esp], eax
call fcn.00405260
or dword [0x41208c], 0x980bb996
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x1c], edx
mov dword [esp + 4], 0x7403de78
mov eax, dword [eax + 0x124]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x20], edx
mov dword [esp + 4], 0x7412168f
mov eax, dword [eax + 0x124]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x24], edx
mov dword [esp + 4], 0x8147ca27
mov eax, dword [eax + 0x124]
mov dword [esp], eax
call fcn.00405260
mov edx, dword [0x410be0]
mov dword [edx + 0x28], eax
mov eax, dword [0x41210c]
lea ecx, [eax - 0x550f18c2]
xor eax, 0xb734c4a8
mov dword [0x411ee4], ecx
mov dword [0x41208c], eax
mov dword [esp + 4], 0x6a60f54d
mov eax, dword [edx + 0x124]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x2c], edx
mov dword [esp + 4], 0x67fd6021
mov eax, dword [eax + 0x124]
mov dword [esp], eax
call fcn.00405260
mov ebx, dword [0x410be0]
mov dword [ebx + 0x30], eax
mov dword [esp], 0xb6c5e0c7
call fcn.0040572c
mov dword [ebx + 0x128], eax
test eax, eax
je 0x408471
mov dword [esp + 4], 0xd389bbb0
mov eax, dword [0x410be0]
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
add dword [0x41208c], 0x42e4394e
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x34], edx
mov dword [esp + 4], 0x26916749
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x38], edx
mov dword [esp + 4], 0x3e75e447
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x3c], edx
mov dword [esp + 4], 0x52660dc9
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x40], edx
mov dword [esp + 4], 0x6dbd2694
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x44], edx
mov dword [esp + 4], 0x6ab2c642
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x5c], edx
mov dword [esp + 4], 0x6798b882
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x60], edx
mov dword [esp + 4], 0xe3a2a68e
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x64], edx
mov dword [esp + 4], 0x8c2d577c
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, dword [0x410be0]
mov dword [edx + 0x68], eax
mov eax, dword [0x411ee4]
and eax, 0x3a3ff255
mov dword [0x41210c], eax
mov dword [esp + 4], 0xe37a4b40
mov eax, dword [edx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x48], edx
mov dword [esp + 4], 0x631ec965
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x7c], edx
mov dword [esp + 4], 0x5becc1a6
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, str.value_too_large
mov ecx, 0x1901
mov ebx, dword [0x410be0]
mov dword [ebx + 0x80], eax
movzx eax, byte [edx]
inc edx
test al, al
je 0x407794
add ecx, eax
cmp ecx, 0x227f
jbe 0x407773
mov eax, dword [0x41210c]
and eax, 0x2b8dc65a
mov dword [0x411ee4], eax
mov eax, dword [0x411ee4]
xor eax, 0xf5b3ec64
mov dword [0x41208c], eax
and eax, 0x97610c63
mov dword [0x411ee4], eax
mov dword [esp + 4], str.onecoreuap_baseAppModelSearch_search_searchgatherinclude_fltrhost.hxx
mov eax, dword [0x41210c]
mov dword [esp], eax
call fcn.0040c514
mov dword [esp + 4], 0x9a1f3c7a
mov eax, dword [ebx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x84], edx
mov dword [esp + 4], 0x949c2f6d
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x88], edx
mov dword [esp + 4], 0x8d5785e8
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, dword [0x410be0]
mov dword [edx + 0x74], eax
mov eax, dword [0x41210c]
add eax, 0x70694d68
mov dword [0x411ee4], eax
mov dword [esp + 4], 0x1f38a3da
mov eax, dword [edx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov ebx, dword [0x410be0]
and dword [0x411ee4], 0x14aa20f8
add dword [0x41208c], 0x30c3f611
mov dword [ebx + 0x78], eax
call fcn.0040c924
mov dword [esp + 4], 0x285a80c1
mov eax, dword [ebx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x8c], edx
mov dword [esp + 4], 0xc531b0d9
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edi, dword [0x410be0]
mov ebx, dword [0x411ee4]
mov dword [edi + 0x90], eax
mov dword [esp + 0xc], str.MaxMSinFilter
mov dword [esp + 8], str.invalid_seek
mov eax, dword [0x41208c]
mov dword [esp], ebx
xor ebx, 0x68073be8
mov dword [esp + 4], eax
call fcn.0040cd40
mov eax, dword [0x41210c]
mov dword [0x41208c], ebx
sub ebx, 0x49b71730
mov dword [0x41210c], ebx
add eax, 0x7407f415
mov dword [0x411ee4], eax
mov dword [esp + 4], 0x4135c0
mov dword [esp], str.invalid_seek
call fcn.0040d46c
mov dword [esp + 4], 0x2b4bb2d3
mov eax, dword [edi + 0x128]
mov dword [esp], eax
call fcn.00405260
mov ebx, dword [0x410be0]
mov dword [ebx + 0x94], eax
mov eax, dword [0x41208c]
and eax, 0x38752855
xor eax, 0x207885a5
mov dword [0x411ee4], eax
call fcn.0040bfc0
mov dword [esp + 4], 0xffeece19
mov eax, dword [ebx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x98], edx
mov dword [esp + 4], 0x1b7fc6a7
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x9c], edx
mov dword [esp + 4], 0x72788fda
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0xa0], edx
mov dword [esp + 4], 0x70a1d751
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, str.value_too_large
mov ecx, 0x101e
mov ebx, dword [0x410be0]
mov dword [ebx + 0xa4], eax
movzx eax, byte [edx]
inc edx
test al, al
je 0x407a06
add ecx, eax
cmp ecx, 0x2216
jbe 0x4079e5
imul eax, dword [0x41210c], 0x6c79fdd6
mov dword [0x41210c], eax
mov eax, dword [0x411ee4]
or eax, 0x6e91c97a
mov dword [0x41208c], eax
mov dword [esp + 4], 0x66edfc39
mov eax, dword [ebx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0xac], edx
mov dword [esp + 4], 0xfa10da44
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, dword [0x410be0]
mov dword [edx + 0xb0], eax
mov eax, dword [0x41210c]
add eax, 0xd6f9710
mov dword [0x41208c], eax
mov dword [esp + 4], 0x8f798ebe
mov eax, dword [edx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, dword [0x410be0]
mov dword [edx + 0xb4], eax
mov eax, dword [0x411ee4]
or eax, 0x3832951e
mov dword [0x41208c], eax
mov dword [esp + 4], 0x5417f55b
mov eax, dword [edx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov ebx, dword [0x410be0]
mov dword [ebx + 0xb8], eax
xor eax, eax
cmp byte [eax + 0x412ab4], 0
je 0x407afa
inc eax
cmp eax, 0x622
jne 0x407abe
mov eax, dword [0x411ee4]
mov dword [esp + 0xc], str.MaxMSinFilter
mov dword [esp + 8], str.MaxMSinFilter
mov dword [esp + 4], eax
mov dword [esp], eax
call fcn.0040cd40
xor dword [0x41210c], 0x47a793f8
mov eax, dword [0x41210c]
mov edx, eax
and eax, 0xf989b701
and edx, 0xa42034dd
mov dword [0x41210c], eax
mov dword [0x41208c], edx
mov dword [esp + 4], 0xf03c5562
mov eax, dword [ebx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, str.onecoreuap_baseAppModelSearch_search_searchgatherinclude_fltrhost.hxx
mov ecx, 0x7d8
mov edi, dword [0x410be0]
mov dword [edi + 0xbc], eax
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x407b7a
add ecx, eax
cmp ecx, 0x2306
jbe 0x407b43
mov ebx, dword [0x41208c]
mov dword [esp + 4], str.hi_IN
mov dword [esp], ebx
or ebx, 0xe25cf1f5
call fcn.0040c514
mov dword [0x411ee4], ebx
mov eax, dword [0x41210c]
lea edx, [eax - 0x53abc17c]
mov dword [0x41208c], edx
mov dword [esp + 4], 0x413588
mov dword [esp], eax
call fcn.0040e414
mov dword [esp + 4], 0x38861aea
mov eax, dword [edi + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0xc0], edx
mov dword [esp + 4], 0xd23d3475
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x6c], edx
mov dword [esp + 4], 0xca4b0935
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x70], edx
mov dword [esp + 4], 0x2ecee3cc
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov ebx, dword [0x410be0]
mov dword [ebx + 0x4c], eax
xor eax, eax
cmp byte [eax + str.isBackedOff], 0
je 0x407c46
inc eax
cmp eax, 0x22b0
jne 0x407c1f
call fcn.0040bfc0
mov eax, dword [0x41210c]
or eax, 0xf8ba5297
mov dword [0x41208c], eax
jmp 0x407c4d
cmp eax, 0x1f11
jle 0x407c61
mov dword [esp + 4], str.hi_IN
mov dword [esp], str.isBackedOff
call fcn.0040d46c
imul eax, dword [0x41210c], 0xc1e548e5
and dword [0x41208c], 0xe0b39429
mov dword [0x411ee4], eax
mov dword [esp + 4], 0xa0a4024d
mov eax, dword [ebx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, dword [0x410be0]
mov dword [edx + 0x50], eax
mov eax, dword [0x411ee4]
and eax, 0x1f621cde
mov dword [0x41208c], eax
mov dword [esp + 4], 0x652f3404
mov eax, dword [edx + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, eax
mov eax, dword [0x410be0]
mov dword [eax + 0x54], edx
mov dword [esp + 4], 0xa7c9bf44
mov eax, dword [eax + 0x128]
mov dword [esp], eax
call fcn.00405260
mov edx, dword [0x410be0]
mov dword [edx + 0x58], eax
call fcn.004014e0
mov dword [ebp - 0x51c], eax
test eax, eax
jne 0x408471
mov eax, dword [0x411ee4]
xor ecx, ecx
and eax, 0x6e275c99
mov dword [0x41210c], eax
lea eax, [ebp - 0x464]
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov dword [esp], ecx
mov eax, dword [0x410be0]
call dword [eax + 0x6c]
mov eax, dword [0x410be0]
sub esp, 0xc
call dword [eax + 0x70]
cmp eax, 0xb7
je 0x408471
call fcn.00405d0c
mov edx, str.invalid_seek
mov al, byte [edx]
test al, al
je 0x407d64
sub eax, 0x30
cmp al, 9
jbe 0x407d61
sub dword [0x41210c], 0x39879a1d
jmp 0x407d64
inc edx
jmp 0x407d48
mov eax, dword [0x41210c]
mov edx, eax
and edx, 0xb5d39632
mov dword [0x41208c], edx
mov dword [esp + 0xc], 0x412ab4
mov dword [esp + 8], str.isBackedOff
mov dword [esp + 4], eax
mov eax, dword [0x411ee4]
mov dword [esp], eax
call fcn.0040cd40
mov dword [esp], 1
call fcn.0040b80c
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.0040b7ac
mov edx, str.onecoreuap_baseAppModelSearch_search_searchgatherinclude_fltrhost.hxx
mov ecx, 0x1247
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x407de2
add ecx, eax
cmp ecx, 0x1f85
jbe 0x407dbe
mov eax, dword [0x411ee4]
add eax, 0xf80ca2f
mov dword [0x41210c], eax
mov eax, dword [0x411ee4]
xor ebx, ebx
and eax, 0x23238c2f
mov dword [0x41208c], eax
add eax, 0x6f626b6e
mov dword [0x411ee4], eax
call dword [esi + ebx*4]
test eax, eax
je 0x408471
inc ebx
cmp ebx, 4
jne 0x407dfd
mov eax, dword [0x410be0]
mov dword [eax + 0x150], 0xffff
mov dword [esp], 0xffffffff
call fcn.00409de0
test eax, eax
je 0x407e3d
mov eax, dword [0x410be0]
mov word [eax + 0x150], 9
jmp 0x407e6b
mov edx, 0x412638
mov al, byte [edx]
sub eax, 0x30
cmp al, 9
ja 0x407e4e
inc edx
jmp 0x407e42
mov eax, dword [0x41208c]
add eax, 0x5df80cbc
mov dword [0x41210c], eax
mov eax, dword [0x410be0]
mov word [eax + 0x150], 0
lea eax, [ebp - 0x510]
xor ecx, ecx
xor ebx, ebx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x500]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 8], ebx
mov dword [esp + 4], ebx
mov dword [esp], eax
mov eax, dword [0x410be0]
call dword [eax + 0x4c]
sub esp, 0x20
mov dword [esp + 4], 0x208
mov dword [esp], 0x40
mov eax, dword [0x410be0]
call dword [eax + 0x50]
push esi
mov edi, eax
push esi
mov dword [esp + 4], 0x208
mov dword [esp], 0x40
mov eax, dword [0x410be0]
call dword [eax + 0x50]
mov ecx, 0xad6
push edx
mov esi, eax
push edx
mov edx, str.isBackedOff
mov dword [ebp - 0x508], 0x208
movsx eax, byte [edx]
inc edx
test al, al
je 0x407f01
add ecx, eax
cmp ecx, 0x1281
jbe 0x407eef
mov dword [ebp - 0x504], 0x208
xor eax, eax
cmp byte [eax + 0x412638], 0
je 0x407f32
inc eax
cmp eax, 0x1292
jne 0x407f0d
mov dword [esp + 4], 0x4135c0
mov dword [esp], str.onecoreuap_baseAppModelSearch_search_searchgatherinclude_fltrhost.hxx
call fcn.0040e69c
mov eax, dword [0x41208c]
lea edx, [eax + 0x2b6e99d5]
add eax, 0x41012cba
mov dword [0x411ee4], edx
mov dword [0x41210c], eax
call fcn.0040bfc0
mov dword [esp + 4], 0x400
mov dword [esp], 0x40
mov eax, dword [0x410be0]
call dword [eax + 0x50]
push ecx
mov ebx, eax
lea eax, [ebp - 0x508]
push ecx
mov dword [esp + 4], eax
mov dword [esp], edi
mov eax, dword [0x410be0]
call dword [eax + 0xec]
push edx
push edx
test eax, eax
je 0x408471
lea eax, [ebp - 0x504]
mov dword [esp], esi
mov dword [esp + 4], eax
mov eax, dword [0x410be0]
call dword [eax + 0xb4]
push edx
push edx
test eax, eax
je 0x408471
imul eax, dword [0x411ee4], 0x927d8274
mov edx, str.kn_IN
mov ecx, 0xb0e
mov dword [0x411ee4], eax
movsx eax, byte [edx]
test al, al
je 0x408083
add ecx, eax
cmp ecx, 0x1bc9
jbe 0x407ff0
call fcn.0040bfc0
mov edx, 0x413588
mov ecx, 0x16a
jmp 0x408050
xor eax, eax
cmp byte [eax + str.MaxMSinFilter], 0
je 0x40802a
inc eax
cmp eax, 0x24df
jne 0x407ff2
mov dword [ebp - 0x524], edx
mov dword [ebp - 0x520], ecx
call fcn.0040bfc0
mov ecx, dword [ebp - 0x520]
xor dword [0x41210c], 0x9160e8b8
mov edx, dword [ebp - 0x524]
imul eax, dword [0x411ee4], 0x81b4810c
inc edx
mov dword [0x411ee4], eax
add eax, 0x7671cb9e
mov dword [0x41208c], eax
jmp 0x407fca
add ecx, eax
cmp ecx, 0x1d09
ja 0x40805b
movzx eax, word [edx]
add edx, 2
test ax, ax
jne 0x408046
mov eax, dword [0x41210c]
add eax, 0x2a89d395
and eax, 0x4b8bcf21
mov dword [0x411ee4], eax
mov dword [esp + 4], str.hi_IN
mov dword [esp], str.value_too_large
call fcn.0040d46c
mov edx, 0x412ab4
mov ecx, 0x1c4e
movzx eax, byte [edx]
inc edx
test al, al
je 0x4080a9
add ecx, eax
cmp ecx, 0x238a
jbe 0x40808d
call fcn.0040bfc0
call fcn.0040c924
mov eax, dword [0x41208c]
lea edx, [eax - 0x14b5a612]
or eax, 0x3d5e7019
mov dword [0x411ee4], eax
imul eax, eax, 0xba16861b
mov dword [0x41210c], edx
mov dword [0x41208c], eax
call fcn.0040bfc0
lea eax, [ebp - 0x4e1]
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ebx
mov eax, dword [0x410be0]
call dword [eax + 0xd4]
mov edx, dword [ebp - 0x510]
mov dword [ebp - 0x520], edx
mov dword [esp], ebx
call fcn.0040bc48
mov edx, dword [ebp - 0x520]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00404190
mov dword [ebp - 0x50c], eax
test ebx, ebx
je 0x40814a
xor eax, eax
mov dword [esp + 8], 0x400
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00405c64
mov dword [esp], ebx
mov eax, dword [0x410be0]
call dword [eax + 0x58]
push eax
test edi, edi
je 0x40817c
mov eax, dword [ebp - 0x508]
or dword [0x41210c], 0x7384270f
mov dword [esp], edi
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 4], eax
call fcn.00405c64
mov dword [esp], edi
mov eax, dword [0x410be0]
call dword [eax + 0x58]
push eax
test esi, esi
je 0x4081ae
mov eax, dword [ebp - 0x504]
xor ecx, ecx
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00405c64
or dword [0x41210c], 0x4bfef84b
mov dword [esp], esi
mov eax, dword [0x410be0]
call dword [eax + 0x58]
push ebx
mov eax, dword [0x41210c]
lea edi, [ebp - 0x510]
sub eax, 0x319d41a4
mov dword [0x41208c], eax
lea eax, [ebp - 0x50c]
mov dword [esp], eax
call fcn.00409ee0
mov esi, eax
mov eax, dword [0x41210c]
and eax, 0x3bd549a
mov dword [0x411ee4], eax
mov dword [esp], edi
call fcn.00409ee0
mov dword [esp], edi
call fcn.00409ee0
mov ebx, eax
mov eax, dword [0x41208c]
lea edx, [eax - 0x75cde902]
mov dword [0x411ee4], edx
mov dword [esp + 0xc], 0x412638
mov dword [esp + 8], 0x412ab4
mov edx, dword [0x41210c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0040cd40
mov dword [esp], edi
call fcn.00409ee0
mov ecx, dword [ebp - 0x51c]
inc dword [ebp - 0x51c]
cmp dword [ebp - 0x51c], 8
mov byte [ebp + ecx - 0x4ac], al
jne 0x408227
mov edi, dword [0x410be0]
mov dword [esp], 0x208
call fcn.00405cd8
mov dword [edi + 0x13c], eax
mov eax, dword [0x410be0]
mov edx, dword [eax + 0x13c]
test edx, edx
je 0x40847d
mov ecx, dword [ebp - 0x4a8]
movzx ebx, bx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
lea ecx, [ebp - 0x4a4]
mov dword [esp + 4], ecx
mov dword [esp], edx
call dword [eax + 0xc4]
mov ebx, dword [0x410be0]
cmp dword [ebx + 0x158], 0
je 0x4082e1
call fcn.0040a160
mov ecx, 0x19
xor edx, edx
mov ebx, dword [0x411ee4]
div ecx
mov edi, dword [0x410be0]
mov esi, ebx
mov ecx, 0x7c5
and esi, 0x78b7289c
mov dword [edi + 0x15c], edx
mov edx, str.invalid_seek
jmp 0x40831a
mov dword [esp + 4], 0x20
mov dword [esp], 0x40
call dword [ebx + 0x50]
push edx
push edx
mov dword [ebx + 0x158], eax
xor ebx, ebx
call fcn.0040a160
mov edx, eax
mov eax, dword [0x410be0]
mov eax, dword [eax + 0x158]
mov byte [eax + ebx], dl
inc ebx
cmp ebx, 0x20
jne 0x4082fd
jmp 0x4082ad
movzx eax, byte [edx]
inc edx
test al, al
je 0x408348
add ecx, eax
cmp ecx, 0xa96
jbe 0x40831a
mov dword [esp + 0xc], 0x412638
mov dword [esp + 8], str.kn_IN
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.0040cd40
mov eax, dword [0x41208c]
mov edx, dword [edi + 0x1a0]
mov ecx, str.onecoreuap_baseAppModelSearch_search_searchgatherinclude_fltrhost.hxx
mov ebx, 0x1939
and eax, 0x43217fad
mov dword [ebp - 0x51c], eax
mov esi, dword [ebp - 0x51c]
mov dword [0x41210c], eax
mov eax, dword [edx + 0x20]
xor esi, 0x5453e5cf
mov dword [edi + 0x144], eax
mov dword [0x411ee4], esi
movzx eax, word [ecx]
add ecx, 2
test ax, ax
je 0x4083da
add ebx, eax
cmp ebx, 0x2634
jbe 0x408388
mov dword [ebp - 0x520], edx
call fcn.0040c924
mov eax, dword [ebp - 0x51c]
or eax, 0x972fc807
mov dword [0x41208c], eax
mov dword [esp + 0xc], str.invalid_seek
mov dword [esp + 8], str.value_too_large
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.0040cd40
mov edx, dword [ebp - 0x520]
imul ebx, esi, 0x2769bccb
mov eax, esi
mov dword [ebp - 0x51c], edx
and eax, 0xb0f3e14e
mov dword [0x411ee4], eax
mov dword [0x41210c], ebx
mov dword [esp + 4], 0x413588
mov eax, dword [0x41208c]
mov dword [esp], eax
call fcn.0040e414
mov edx, dword [ebp - 0x51c]
mov eax, dword [edx + 0x24]
mov dword [edi + 0x148], eax
xor eax, eax
cmp byte [0x412638], 0
mov dword [edi + 0x140], eax
je 0x40844d
mov dword [esp + 4], 0x413588
and esi, 0x8052810e
mov dword [esp], str.MaxMSinFilter
call fcn.0040d46c
mov dword [0x411ee4], esi
call fcn.0040c924
xor ebx, 0x77ac70d2
mov dword [0x41210c], ebx
and ebx, 0x9ca8f729
mov dword [0x41208c], ebx
call fcn.0040bfc0
jmp 0x40847d
mov eax, dword [0x410be0]
mov dword [eax + 8], 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret