Function at 0x4610c0
Capabilities:
Encode data using xor
Extract resource via kernel32 functions
Hash data with crc32

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xd8
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x80], xmm7
movaps xmmword [rsp + 0x90], xmm8
movaps xmmword [rsp + 0xa0], xmm9
movaps xmmword [rsp + 0xb0], xmm10
movaps xmmword [rsp + 0xc0], xmm11
test r8d, r8d
mov r13, rcx
mov dword [rsp + 0x130], r8d
jle 0x43422d
movq xmm6, qword [0x0047b080]
lea r14d, [r8 - 1]
mov rbx, rdx
xor r15d, r15d
movq xmm7, qword [0x0047b090]
movapd xmm11, xmm6
movapd xmm10, xmm6
movapd xmm8, xmm6
movapd xmm9, xmm7
nop word cs:[rax + rax]
mov qword [r13 + r15*8], 0
movzx r12d, byte [rbx]
lea rsi, [rbx + 1]
lea eax, [r12 - 0x2e]
cmp al, 0x49
ja case.0x43372f.1
lea rdx, [0x004798a0]
movzx eax, al
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
mov edx, 1
mov rcx, rsi
add rbx, 2
call qword [sym.imp.python38.dll_PyUnicode_FromStringAndSize]
lea rdi, [rsp + 0x50]
mov qword [rsp + 0x50], rax
mov rcx, rdi
call qword [sym.imp.python38.dll_PyUnicode_InternInPlace]
mov rax, qword [rsp + 0x50]
mov qword [r13 + r15*8], rax
add qword [rax], 2
lea rax, [r15 + 1]
cmp r14, r15
je 0x433aaf
mov r15, rax
jmp 0x433700
lea rsi, [rbx + 5]
movsxd rbx, dword [rbx + 1]
lea r8, str.surrogatepass
mov rcx, rsi
mov rdx, rbx
add rbx, rsi
call qword [sym.imp.python38.dll_PyUnicode_DecodeUTF8]
mov qword [r13 + r15*8], rax
jmp 0x433760
mov rax, qword [sym.imp.python38.dll__Py_TrueStruct]
mov rbx, rsi
mov qword [r13 + r15*8], rax
jmp 0x433760
mov rcx, qword [rbx + 1]
add rbx, 9
call qword [sym.imp.python38.dll_PyLong_FromLongLong]
mov rdi, qword [0x00486cc8]
mov rsi, rax
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.python38.dll_PyDict_GetItem]
test rax, rax
je 0x433ee0
mov qword [r13 + r15*8], rax
jmp 0x433760
mov rax, qword [sym.imp.python38.dll__Py_NoneStruct]
mov rbx, rsi
mov qword [r13 + r15*8], rax
jmp 0x433760
mov ecx, dword [rbx + 1]
add rbx, 5
call qword [sym.imp.python38.dll_PyLong_FromLong]
mov rdi, qword [0x00486cc8]
mov rsi, rax
jmp 0x4337d8
mov rax, qword [rbx + 9]
add rbx, 0x11
movsd xmm0, qword [rbx - 0x10]
movq xmm1, rax
call qword [sym.imp.python38.dll_PyComplex_FromDoubles]
mov qword [r13 + r15*8], rax
jmp 0x433760
mov rdi, qword [sym.imp.python38.dll_PyLong_FromLong]
lea r12, [rbx + 6]
xor ecx, ecx
mov qword [rsp + 0x38], rdi
call rdi
mov ebp, dword [rbx + 2]
mov qword [rsp + 0x28], r12
mov ecx, 0x40
mov rsi, rax
movzx eax, byte [rbx + 1]
mov byte [rsp + 0x27], al
call rdi
test ebp, ebp
mov rdi, rax
jle 0x4341f8
lea eax, [rbp - 1]
lea rbp, [rbx + rax*8 + 0xe]
mov qword [rsp + 0x30], rax
mov rbx, r12
jmp 0x4338a5
cmp rbx, rbp
je 0x4338e9
mov rdx, rdi
mov rcx, rsi
add rbx, 8
call qword [sym.imp.python38.dll_PyNumber_InPlaceLshift]
mov rcx, qword [rbx - 8]
mov rsi, rax
call qword [sym.imp.python38.dll_PyLong_FromUnsignedLongLong]
mov rcx, rsi
mov r12, rax
mov rdx, rax
call qword [sym.imp.python38.dll_PyNumber_InPlaceAdd]
sub qword [r12], 1
mov rsi, rax
jne 0x4338a0
mov rcx, r12
call qword [sym.imp.python38.dll__Py_Dealloc]
cmp rbx, rbp
jne 0x4338a5
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
lea rbx, [rax + rcx*8 + 8]
mov rax, qword [rdi]
sub rax, 1
mov qword [rdi], rax
je 0x433ec0
cmp byte [rsp + 0x27], 0x2d
je 0x433fa1
mov rdi, qword [0x00486cc8]
jmp 0x4337d8
mov rax, qword [rbx + 1]
add rbx, 9
movq xmm0, rax
call qword [sym.imp.python38.dll_PyFloat_FromDouble]
mov rsi, qword [0x00486cc0]
lea rcx, [0x00423e30]
mov r12, rax
mov rax, qword [rax + 8]
mov rbp, qword [rax + 0x78]
mov rdi, qword [rax + 0xc8]
mov qword [rax + 0xc8], rcx
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.python38.dll_PyDict_GetItem]
test rax, rax
je 0x433f20
mov rdx, qword [rax + 8]
mov qword [rdx + 0x78], rbp
mov qword [rdx + 0xc8], rdi
mov qword [r13 + r15*8], rax
jmp 0x433760
mov rcx, rsi
mov edx, 1
add rbx, 2
call qword [sym.imp.python38.dll_PyBytes_FromStringAndSize]
mov rdi, qword [0x00486cb8]
mov rsi, rax
jmp 0x4337d8
mov rcx, rsi
call sub.msvcrt.dll_strlen
mov rcx, rsi
mov rbx, rax
mov rdx, rax
call qword [sym.imp.python38.dll_PyBytes_FromStringAndSize]
lea rbx, [rsi + rbx + 1]
mov rdi, rax
mov rsi, qword [0x00486cb8]
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.python38.dll_PyDict_GetItem]
test rax, rax
jne 0x4337ed
mov r8, rdi
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.python38.dll_PyDict_SetItem]
mov rax, rdi
jmp 0x4337ed
lea rsi, [rbx + 5]
movsxd rbx, dword [rbx + 1]
mov rcx, rsi
mov rdx, rbx
add rbx, rsi
call qword [sym.imp.python38.dll_PyBytes_FromStringAndSize]
mov rdi, rax
jmp 0x4339d0
mov rcx, rsi
call sub.msvcrt.dll_strlen
lea r8, str.surrogatepass
mov rcx, rsi
mov rbx, rax
mov rdx, rax
call qword [sym.imp.python38.dll_PyUnicode_DecodeUTF8]
lea rbx, [rsi + rbx + 1]
cmp r12b, 0x61
mov qword [rsp + 0x50], rax
jne 0x4337ed
lea rdi, [rsp + 0x50]
mov rcx, rdi
call qword [sym.imp.python38.dll_PyUnicode_InternInPlace]
mov rax, qword [rsp + 0x50]
jmp 0x4337ed
cmp byte [rbx + 1], 5
lea rsi, [rbx + 2]
ja case.default.0x433a90
movzx eax, byte [rbx + 1]
lea rdx, [0x004799c8]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
movsxd rax, dword [rbx + 1]
add rbx, 5
mov qword [r13 + r15*8], rbx
add rbx, rax
cmp r14, r15
lea rax, [r15 + 1]
jne 0x433771
movaps xmm6, xmmword [rsp + 0x70]
mov rax, rbx
movaps xmm7, xmmword [rsp + 0x80]
movaps xmm8, xmmword [rsp + 0x90]
movaps xmm9, xmmword [rsp + 0xa0]
movaps xmm10, xmmword [rsp + 0xb0]
movaps xmm11, xmmword [rsp + 0xc0]
add rsp, 0xd8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rcx, dword [rbx + 1]
add rbx, 5
mov rdi, rcx
call qword [sym.imp.python38.dll_PyTuple_New]
test edi, edi
mov rsi, rax
jg 0x433e80
mov rax, qword [rsi + 8]
lea rcx, [0x0041b060]
mov rdi, qword [0x00486cb0]
mov rbp, qword [rax + 0xc8]
mov r12, qword [rax + 0x78]
mov qword [rax + 0x78], rcx
lea rcx, [0x00423ed0]
mov qword [rax + 0xc8], rcx
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.python38.dll_PyDict_GetItem]
test rax, rax
je 0x433f00
mov rdx, qword [rax + 8]
mov qword [rdx + 0x78], r12
mov qword [rdx + 0xc8], rbp
jmp 0x4337ed
movzx eax, byte [rbx + 1]
lea rsi, [rbx + 2]
test al, al
je 0x433e60
cmp al, 1
jne 0x4342aa
lea rdx, str.NotImplemented
mov rcx, qword [0x00486978]
call qword [sym.imp.python38.dll_PyObject_GetAttrString]
mov qword [r13 + r15*8], rax
mov rbx, rsi
jmp 0x433760
mov rbx, rsi
add rbx, 1
cmp byte [rbx - 1], 0
jne 0x433bb3
mov rdx, rsi
mov rcx, qword [0x00486978]
call qword [sym.imp.python38.dll_PyObject_GetAttrString]
jmp 0x4337ed
mov edi, dword [rbx + 1]
add rbx, 5
cmp r12b, 0x53
je 0x433f50
test edi, edi
jne 0x4341c6
mov rsi, qword [0x00486a10]
test rsi, rsi
je 0x434202
mov rdi, qword [0x00486c90]
mov rax, qword [rsi + 8]
lea rcx, [0x00423f30]
mov r12, qword [rax + 0x78]
mov qword [rax + 0x78], rcx
lea rcx, [0x00428320]
mov rbp, qword [rax + 0xc8]
jmp 0x433b44
movzx eax, byte [rbx + 1]
lea rcx, [rbx + 2]
cmp al, 6
ja case.default.0x433c4e
lea rdx, [0x004799e0]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
movsxd rcx, dword [rbx + 1]
add rbx, 5
mov rsi, rcx
call qword [sym.imp.python38.dll_PyList_New]
test esi, esi
mov r12, rax
jg 0x433ea0
mov rax, qword [r12 + 8]
lea rcx, [0x0041aff0]
mov rsi, qword [0x00486ca8]
mov rbp, qword [rax + 0x78]
mov qword [rax + 0x78], rcx
lea rcx, [0x00423e70]
mov rdi, qword [rax + 0xc8]
jmp 0x433953
lea rcx, [rsp + 0x40]
mov rdx, rsi
mov r8d, 2
call 0x433670
mov rdx, qword [rsp + 0x48]
mov rbx, rax
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x433f40
lea rdi, [rsp + 0x50]
movq xmm2, rdx
movq xmm0, rax
mov rcx, qword [sym.imp.python38.dll_PyComplex_Type]
mov rdx, rdi
punpcklqdq xmm0, xmm2
movaps xmmword [rsp + 0x50], xmm0
call fcn.00401eb0
mov qword [r13 + r15*8], rax
jmp 0x433760
mov rax, qword [sym.imp.python38.dll__Py_FalseStruct]
mov rbx, rsi
mov qword [r13 + r15*8], rax
jmp 0x433760
mov rbx, rsi
nop word [rax + rax]
add rbx, 1
cmp byte [rbx - 1], 0
jne 0x433d20
mov rdx, rsi
mov rcx, qword [0x00486978]
call qword [sym.imp.python38.dll_PyObject_GetAttrString]
jmp 0x4337ed
movsxd rcx, dword [rbx + 1]
add rbx, 5
mov rdi, rcx
call qword [sym.imp.python38.dll__PyDict_NewPresized]
lea ebp, [rdi - 1]
test edi, edi
mov rsi, rax
jle 0x433d93
mov r12, qword [sym.imp.python38.dll_PyDict_SetItem]
lea rdi, [rsp + 0x50]
mov rdx, rbx
mov r8d, 2
mov rcx, rdi
call 0x433670
sub ebp, 1
mov r8, qword [rsp + 0x58]
mov rcx, rsi
mov rbx, rax
mov rdx, qword [rsp + 0x50]
call r12
cmp ebp, 0xffffffff
jne 0x433d67
mov rax, qword [rsi + 8]
lea rcx, [0x00424110]
mov rdi, qword [0x00486ca0]
mov r12, qword [rax + 0x78]
mov qword [rax + 0x78], rcx
lea rcx, [0x00424030]
mov rbp, qword [rax + 0xc8]
jmp 0x433b44
lea rsi, [rbx + 5]
movsxd rbx, dword [rbx + 1]
mov rcx, rsi
mov rdx, rbx
add rbx, rsi
call qword [sym.imp.python38.dll_PyByteArray_FromStringAndSize]
mov qword [r13 + r15*8], rax
jmp 0x433760
lea rdi, [rsp + 0x50]
mov r8d, 3
mov rdx, rsi
mov rcx, rdi
call 0x433670
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rbx, rax
mov rcx, qword [rsp + 0x50]
call fcn.0042ba60
mov qword [r13 + r15*8], rax
jmp 0x433760
lea rdi, [rsp + 0x50]
mov r8d, 3
mov rdx, rsi
mov rcx, rdi
call 0x433670
mov r8, qword [rsp + 0x60]
mov rbx, rax
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.python38.dll_PySlice_New]
mov qword [r13 + r15*8], rax
jmp 0x433760
lea rdx, str.Ellipsis
mov rcx, qword [0x00486978]
call qword [sym.imp.python38.dll_PyObject_GetAttrString]
jmp 0x433ba0
lea rcx, [rax + 0x18]
mov rdx, rbx
mov r8d, edi
call 0x433670
mov rbx, rax
jmp 0x433b1c
mov rcx, qword [rax + 0x18]
mov rdx, rbx
mov r8d, esi
call 0x433670
mov rbx, rax
jmp 0x433c6c
mov rcx, rdi
call qword [sym.imp.python38.dll__Py_Dealloc]
cmp byte [rsp + 0x27], 0x2d
jne 0x433913
jmp 0x433fa1
mov r8, rsi
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.python38.dll_PyDict_SetItem]
mov rax, rsi
jmp 0x4337ed
mov r8, rsi
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.python38.dll_PyDict_SetItem]
mov rax, rsi
jmp 0x433b60
mov r8, r12
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.python38.dll_PyDict_SetItem]
mov rax, r12
jmp 0x43396f
mov rax, qword [0x0047beb0]
mov rax, qword [rax + 0x10]
jmp 0x433cc9
lea ebp, [rdi - 1]
xor ecx, ecx
call qword [sym.imp.python38.dll_PySet_New]
test edi, edi
mov rsi, rax
jle 0x4341ba
lea rdi, [rsp + 0x50]
nop dword [rax + rax]
mov rdx, rbx
mov r8d, 1
mov rcx, rdi
call 0x433670
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
mov rbx, rax
call qword [sym.imp.python38.dll_PySet_Add]
lea eax, [rbp - 1]
test ebp, ebp
jle 0x4341b0
mov ebp, eax
jmp 0x433f70
mov ecx, 0xffffffff
mov rax, qword [rsp + 0x38]
call rax
mov rcx, rsi
mov rdi, rax
mov rdx, rax
call qword [sym.imp.python38.dll_PyNumber_InPlaceMultiply]
mov rsi, rax
mov rax, qword [rdi]
sub rax, 1
mov qword [rdi], rax
jne 0x433913
mov rcx, rdi
call qword [sym.imp.python38.dll__Py_Dealloc]
jmp 0x433913
mov r12, qword [0x004869e0]
test r12, r12
je 0x434265
nop dword [rax]
mov rax, qword [r12 + 8]
lea rcx, [0x00423e30]
mov rdx, r12
mov rbx, qword [0x00486cc0]
mov rdi, qword [rax + 0xc8]
mov qword [rax + 0xc8], rcx
mov rbp, qword [rax + 0x78]
mov rcx, rbx
call qword [sym.imp.python38.dll_PyDict_GetItem]
test rax, rax
je 0x4341e1
mov rdx, qword [rax + 8]
mov qword [rdx + 0x78], rbp
mov qword [rdx + 0xc8], rdi
jmp 0x433ba0
mov r12, qword [0x00486a08]
test r12, r12
jne 0x433ff0
pxor xmm0, xmm0
call qword [sym.imp.python38.dll_PyFloat_FromDouble]
mov r12, rax
mov qword [0x00486a08], rax
jmp 0x433ff0
mov r12, qword [0x004869e8]
test r12, r12
jne 0x433ff0
movsd xmm0, qword [0x0047b0a8]
call qword [sym.imp.python38.dll_PyFloat_FromDouble]
movsd xmm0, qword [rax + 0x10]
mov qword [0x004869e8], rax
mov r12, rax
andpd xmm0, xmm11
movsd qword [rax + 0x10], xmm0
jmp 0x433ff0
mov r12, qword [0x004869f8]
test r12, r12
jne 0x433ff0
movsd xmm0, qword [0x0047b0a0]
call qword [sym.imp.python38.dll_PyFloat_FromDouble]
movsd xmm0, qword [rax + 0x10]
mov qword [0x004869f8], rax
mov r12, rax
andpd xmm0, xmm8
movsd qword [rax + 0x10], xmm0
jmp 0x433ff0
mov r12, qword [0x004869f0]
test r12, r12
jne 0x433ff0
movsd xmm0, qword [0x0047b0a0]
call qword [sym.imp.python38.dll_PyFloat_FromDouble]
movsd xmm0, qword [rax + 0x10]
mov qword [0x004869f0], rax
mov r12, rax
andpd xmm0, xmm10
xorpd xmm0, xmm9
movsd qword [rax + 0x10], xmm0
jmp 0x433ff0
mov r12, qword [0x00486a00]
test r12, r12
jne 0x433ff0
pxor xmm0, xmm0
call qword [sym.imp.python38.dll_PyFloat_FromDouble]
movsd xmm0, qword [rax + 0x10]
mov qword [0x00486a00], rax
mov r12, rax
andpd xmm0, xmmword [0x0047b080]
xorpd xmm0, xmmword [0x0047b090]
movsd qword [rax + 0x10], xmm0
jmp 0x433ff0
mov rax, qword [sym.imp.python38.dll_PyFunction_Type]
nop
mov qword [r13 + r15*8], rax
mov rbx, rcx
jmp 0x433760
mov rax, qword [sym.imp.python38.dll_PyGen_Type]
jmp 0x434160
mov rax, qword [sym.imp.python38.dll_PyCode_Type]
jmp 0x434160
mov rax, qword [sym.imp.python38.dll__Py_NoneStruct]
mov rax, qword [rax + 8]
jmp 0x434160
mov rax, qword [sym.imp.python38.dll_PyEllipsis_Type]
jmp 0x434160
mov rax, qword [sym.imp.python38.dll__Py_NotImplementedStruct]
mov rax, qword [rax + 8]
jmp 0x434160
mov rax, qword [sym.imp.python38.dll_PyCFunction_Type]
jmp 0x434160
cmp r12b, 0x53
jne 0x433bfb
mov rdi, qword [0x00486c98]
jmp 0x433c02
lea ebp, [rdi - 1]
xor ecx, ecx
call qword [sym.imp.python38.dll_PyFrozenSet_New]
test edi, edi
mov rsi, rax
jg 0x433f66
jmp 0x433bfb
mov r8, r12
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.python38.dll_PyDict_SetItem]
mov rax, r12
jmp 0x43402a
mov rbx, qword [rsp + 0x28]
jmp 0x4338f8
lea rcx, [0x00479814]
call qword [sym.imp.python38.dll_PyBytes_FromString]
mov rcx, qword [sym.imp.python38.dll_PyFrozenSet_Type]
mov rdx, rax
call fcn.00432d10
mov rsi, rax
mov qword [0x00486a10], rax
jmp 0x433bfb
mov rbx, rdx
jmp 0x433aaf
mov edx, dword [rsp + 0x130]
lea rcx, str.Missing_values__d_n
sub edx, r15d
call fcn.004307f0
call sub.msvcrt.dll_abort
lea rcx, str.Missing_decoding_for__d_n
movsx edx, r12b
call fcn.004307f0
call sub.msvcrt.dll_abort
movsd xmm0, qword [0x0047b0a8]
call qword [sym.imp.python38.dll_PyFloat_FromDouble]
movsd xmm0, qword [rax + 0x10]
mov qword [0x004869e0], rax
mov r12, rax
andpd xmm0, xmm6
xorpd xmm0, xmm7
movsd qword [rax + 0x10], xmm0
jmp 0x433ff0
lea rcx, str.Missing_decoding_for__d_n
mov edx, 0x5a
call fcn.004307f0
call sub.msvcrt.dll_abort
lea rcx, str.Missing_special_value_for__d_n
movzx edx, al
call fcn.004307f0
call sub.msvcrt.dll_abort
lea rcx, str.Missing_anon_value_for__d_n
movzx edx, al
call fcn.004307f0
call sub.msvcrt.dll_abort
nop
nop dword [rax]
nop word cs:[rax + rax]
push rsi
push rbx
sub rsp, 0x38
mov rsi, r8
mov r8, qword [rcx + 8]
mov rax, qword [r8 + 0x90]
test rax, rax
je 0x434320
call rax
mov rbx, rax
test rbx, rbx
je 0x434370
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.0042b8b0
sub qword [rbx], 1
je 0x434340
add rsp, 0x38
pop rbx
pop rsi
ret
mov r9, qword [r8 + 0x40]
movzx eax, byte [rdx + 0x20]
and eax, 0x60
test r9, r9
je 0x434374
cmp al, 0x60
je 0x434360
mov rdx, qword [rdx + 0x38]
call r9
mov rbx, rax
jmp 0x4342fe
mov qword [rsp + 0x28], rax
mov rcx, rbx
call qword [sym.imp.python38.dll__Py_Dealloc]
mov rax, qword [rsp + 0x28]
add rsp, 0x38
pop rbx
pop rsi
ret
add rdx, 0x30
jmp 0x434338
xor eax, eax
jmp 0x434317
lea r9, [rdx + 0x30]
cmp al, 0x60
je 0x434380
mov r9, qword [rdx + 0x38]
mov rax, qword [sym.imp.python38.dll_PyExc_AttributeError]
lea rdx, str._s_object_has_no_attribute__s
mov r8, qword [r8 + 0x18]
mov rcx, qword [rax]
call qword [sym.imp.python38.dll_PyErr_Format]
xor eax, eax
jmp 0x434317
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
cmp byte [0x00486a19], 0
mov r12, rcx
mov rbp, rdx
je 0x461140
lea rdi, str..bytecode
mov ecx, 0xa
mov rsi, rbp
repe cmpsb byte [rsi], byte [rdi]
seta al
sbb al, 0
test al, al
jne 0x461250
mov rbx, qword [0x00486940]
jmp 0x461105
lea rbx, [rcx + rax + 4]
mov rdx, rbx
mov rcx, rbp
call sub.msvcrt.dll_strcmp
mov rcx, rbx
mov esi, eax
call sub.msvcrt.dll_strlen
test esi, esi
lea rcx, [rbx + rax + 1]
mov eax, dword [rcx]
jne 0x461100
movzx r8d, word [rcx + 4]
lea rdx, [rcx + 6]
mov rcx, r12
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp 0x433670
mov r8d, 0xa
xor ecx, ecx
mov edx, 3
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
lea rdx, [rax + 4]
mov qword [0x00486940], rax
mov r9d, dword [rax]
mov qword [0x00486940], rdx
mov edx, dword [rax + 4]
lea rcx, [rax + 8]
mov qword [0x00486940], rcx
test edx, edx
je 0x46123a
sub edx, 1
lea r8, [rax + rdx + 9]
mov eax, 0xffffffff
nop
movzx edx, byte [rcx]
xor edx, eax
mov eax, edx
and edx, 1
neg edx
shr eax, 1
and edx, 0xedb88320
xor eax, edx
mov edx, eax
and eax, 1
neg eax
shr edx, 1
and eax, 0xedb88320
xor edx, eax
mov eax, edx
and edx, 1
neg edx
shr eax, 1
and edx, 0xedb88320
xor eax, edx
mov edx, eax
and eax, 1
neg eax
shr edx, 1
and eax, 0xedb88320
xor edx, eax
mov eax, edx
and edx, 1
neg edx
shr eax, 1
and edx, 0xedb88320
xor eax, edx
mov edx, eax
and eax, 1
neg eax
shr edx, 1
and eax, 0xedb88320
xor edx, eax
mov eax, edx
shr eax, 1
and edx, 1
add rcx, 1
neg edx
and edx, 0xedb88320
xor eax, edx
mov edx, eax
and eax, 1
neg eax
shr edx, 1
and eax, 0xedb88320
xor eax, edx
cmp r8, rcx
jne 0x4611a0
not eax
mov edx, eax
cmp r9d, edx
jne 0x4612e7
mov byte [0x00486a19], 1
jmp 0x4610d9
cmp byte [0x00486a18], 0
jne 0x4610f7
mov rbx, qword [sym.imp.python38.dll_PyDict_New]
lea rsi, [0x00487920]
call rbx
mov qword [0x00486cc8], rax
call rbx
mov qword [0x00486cc0], rax
call rbx
mov qword [0x00486cb8], rax
call rbx
mov qword [0x00486cb0], rax
call rbx
mov qword [0x00486ca8], rax
call rbx
mov qword [0x00486ca0], rax
call rbx
mov qword [0x00486c98], rax
call rbx
mov rdi, qword [sym.imp.python38.dll_PyLong_FromLong]
mov rbx, 0xfffffffffffffffb
mov qword [0x00486c90], rax
mov ecx, ebx
call rdi
add qword [rax], 1
mov qword [rsi + rbx*8 + 0x28], rax
add rbx, 1
cmp rbx, 0x102
jne 0x4612c1
mov byte [0x00486a18], 1
jmp 0x4610f7
lea rcx, str.Error__corrupted_constants_object
call sub.msvcrt.dll_puts
call sub.msvcrt.dll_abort
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [r8 - 2]
cmp eax, 1
ja 0x46134a
mov rax, qword [0x0047bc70]
cmp rcx, rax
je 0x461351
cmp rcx, qword [0x0047bca0]
je 0x461370
cmp rcx, qword [0x0047bc80]
cmove rcx, qword [sym.imp.python38.dll_PyGen_Type]
cmp rdx, rax
je 0x46135d
cmp rdx, qword [0x0047bca0]
je 0x461380
cmp rdx, qword [0x0047bc80]
cmove rdx, qword [sym.imp.python38.dll_PyGen_Type]
jmp qword [0x00486cf0]
cmp rdx, rax
mov rcx, qword [sym.imp.python38.dll_PyFunction_Type]
jne 0x461332
mov rdx, qword [sym.imp.python38.dll_PyFunction_Type]
jmp qword [0x00486cf0]
mov rcx, qword [sym.imp.python38.dll_PyMethod_Type]
jmp 0x46132d
mov rdx, qword [sym.imp.python38.dll_PyMethod_Type]
jmp qword [0x00486cf0]