Function at 0x4643b0
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x338
mov r13, rdx
mov r15, rcx
mov qword [rsp + 0x270], r8
mov qword [rsp + 0x328], r8
mov qword [rsp + 0x268], r9
mov qword [rsp + 0x330], r9
lea rdx, [rdx + 0x30]
lea rsi, [rsp + 0x278]
mov rcx, rsi
call fcn.00469170
mov rax, qword [rsp + 0x278]
test rax, rax
mov qword [rsp + 0x68], r13
je 0x4646e4
mov rcx, qword [rsp + 0x280]
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rsi
lea r8, [0x004cd28f]
lea rcx, [rsp + 0x2a8]
lea rdx, [rsp + 0x130]
mov r9d, 4
call fcn.00479700
cmp qword [rsp + 0x2a8], 1
je 0x4646e4
mov qword [rsp + 0xa8], r15
mov rax, qword [rsp + 0x2b8]
mov rcx, qword [rsp + 0x2c8]
lea rcx, [rcx + rcx*2]
mov rdx, qword [rax + rcx*8 + 0x118]
mov rax, qword [rax + rcx*8 + 0x128]
add rax, rdx
mov qword [rsp + 0xe0], rdx
mov qword [rsp + 0xe8], rax
mov word [rsp + 0xf0], 0
mov byte [rsp + 0xf8], 1
lea r15, [rsp + 0x138]
lea r14, [rsp + 0x2a8]
lea r13, [rsp + 0xe0]
lea r12, [rsp + 0x70]
jmp 0x4644ee
mov r8d, 1
mov rcx, rdi
call fcn.00409ea0
mov rcx, r14
mov rdx, r13
call fcn.00475c00
cmp qword [rsp + 0x2a8], 0
je 0x4646d7
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x210], rax
movups xmm0, xmmword [rsp + 0x2a8]
movaps xmmword [rsp + 0x200], xmm0
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0xc0], rax
movaps xmm0, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0xb0], xmm0
mov rdi, qword [rsp + 0xb0]
mov r8, qword [rsp + 0xc0]
mov rax, qword [rsp + 0x68]
mov r9, qword [rax]
mov rax, qword [rax + 0x10]
test rax, rax
je 0x464609
lea rcx, [r9 + rax]
mov rdx, r9
nop word cs:[rax + rax]
nop
lea rsi, [rdx + 1]
movzx ebx, byte [rdx]
test bl, bl
js 0x4645a0
mov rdx, rsi
cmp rdx, rcx
jne 0x464580
jmp 0x464609
add rdx, 2
cmp bl, 0xdf
ja 0x4645b7
cmp rsi, rcx
cmove rdx, rsi
cmp rdx, rcx
jne 0x464580
jmp 0x464609
cmp bl, 0xed
jne 0x4645db
cmp rsi, rcx
cmove rdx, rsi
cmp rdx, rcx
je 0x464609
add rdx, 1
cmp rsi, rcx
je 0x464600
cmp byte [rsi], 0x9f
jbe 0x464600
jmp 0x465945
cmp rsi, rcx
mov rbp, rdx
cmove rbp, rsi
lea rdx, [rbp + 1]
cmp rbp, rcx
cmove rdx, rbp
cmp bl, 0xf0
jb 0x464600
lea rbp, [rdx + 1]
cmp rdx, rcx
cmovne rdx, rbp
cmp rdx, rcx
jne 0x464580
mov qword [rsp + 0x20], rax
mov rcx, r14
mov rdx, rdi
call fcn.0044cfc0
mov rsi, qword [rsp + 0x2a8]
mov r8, qword [rsp + 0x2b8]
mov qword [rsp + 0x20], 3
mov rcx, r12
mov rdx, rsi
lea r9, [0x004cd293]
call fcn.0044d390
mov rdx, qword [rsp + 0x2b0]
test rdx, rdx
je 0x46465f
mov r8d, 1
mov rcx, rsi
call fcn.00409ea0
mov rsi, qword [rsp + 0x70]
mov r8, qword [rsp + 0x80]
mov rcx, r14
mov rdx, rsi
call fcn.00471d90
cmp qword [rsp + 0x2a8], 1
jne 0x464a4b
lea rax, [rsp + 0x2b0]
movups xmm0, xmmword [rax]
movups xmmword [r15], xmm0
mov qword [rsp + 0x130], 1
mov rcx, r15
call fcn.00460be0
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x4646c1
mov r8d, 1
mov rcx, rsi
call fcn.00409ea0
mov rdx, qword [rsp + 0xb8]
test rdx, rdx
jne 0x4644e0
jmp 0x4644ee
mov r15, qword [rsp + 0xa8]
mov r13, qword [rsp + 0x68]
mov qword [rsp + 0x1d0], 0
xor eax, eax
mov qword [rsp + 0x2f0], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x2dc], xmm0
movups xmmword [rsp + 0x2d0], xmm0
movups xmmword [rsp + 0x2c0], xmm0
movups xmmword [rsp + 0x2b0], xmm0
mov qword [rsp + 0x2f8], 0xffffffffffffffff
mov qword [rsp + 0x300], 0xffffffffffffffff
mov qword [rsp + 0x308], 0xffffffffffffffff
mov dword [rsp + 0x2a8], 0x68
mov dword [rsp + 0x2e4], 0x100
test rax, rax
lea rax, [rsp + 0x1d0]
cmove rax, r13
mov r8, qword [rax]
mov r9, qword [rax + 0x10]
mov rbp, qword [r13 + 0x18]
mov rsi, qword [r13 + 0x28]
mov qword [rsp + 0xe0], 2
movups xmmword [rsp + 0xe8], xmm0
mov byte [rsp + 0x20], 1
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0xe0]
call fcn.00466310
mov bl, byte [rsp + 0x70]
mov rax, qword [rsp + 0x71]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xb7], rax
cmp bl, 3
jne 0x464918
test rsi, rsi
je 0x4648e6
lea rax, [rsi + rsi*2]
lea r13, [rax*8]
add r13, rbp
lea rdi, [rsp + 0x71]
lea r14, [rsp + 0x70]
lea r12, [rsp + 0xe0]
nop word cs:[rax + rax]
nop
mov rax, qword [rsp + 0xf0]
cmp rax, qword [rsp + 0xe8]
jne 0x464889
mov rsi, rax
add rsi, 1
jb 0x465956
lea rdx, [rax + rax]
cmp rsi, rdx
cmovb rsi, rdx
mov rbx, rsi
add rbx, rsi
jb 0x465956
test rax, rax
je 0x46485b
mov rcx, qword [rsp + 0xe0]
mov r8d, 2
mov r9, rbx
call fcn.00409eb0
test rax, rax
jne 0x464871
jmp 0x465974
mov edx, 2
mov rcx, rbx
call fcn.00409e90
test rax, rax
je 0x465974
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rsi
mov rax, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0xe0]
mov word [rcx + rax*2], 0x20
add qword [rsp + 0xf0], 1
mov r8, qword [rbp]
mov r9, qword [rbp + 0x10]
mov byte [rsp + 0x20], 0
mov rcx, r14
mov rdx, r12
call fcn.00466310
movzx ebx, byte [rsp + 0x70]
mov rax, qword [rdi]
mov rcx, qword [rdi + 7]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb7], rcx
cmp bl, 3
jne 0x464934
add rbp, 0x18
cmp rbp, r13
jne 0x464800
mov bl, byte [rsp + 0xe0]
mov rax, qword [rsp + 0xe1]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x77], rax
mov rcx, qword [rsp + 0xf0]
xor esi, esi
mov r13, qword [rsp + 0x68]
jmp 0x46497b
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb7]
mov qword [rsp + 0x77], rcx
mov qword [rsp + 0x70], rax
jmp 0x464953
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb7]
mov qword [rsp + 0x77], rcx
mov qword [rsp + 0x70], rax
mov r13, qword [rsp + 0x68]
mov rdx, qword [rsp + 0xe8]
mov esi, 1
test rdx, rdx
je 0x46497b
add rdx, rdx
mov rcx, qword [rsp + 0xe0]
mov r8d, 2
call fcn.00409ea0
mov qword [rsp + 0x130], rsi
lea rbp, [rsp + 0x138]
mov byte [rsp + 0x138], bl
mov rax, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x77]
mov qword [rsp + 0x139], rax
mov qword [rsp + 0x140], rdx
mov qword [rsp + 0x148], rcx
test rsi, rsi
je 0x4649d1
movups xmm0, xmmword [rbp]
movups xmmword [r15 + 8], xmm0
mov qword [r15], 1
mov sil, 1
jmp 0x4655d7
mov rax, qword [rbp + 0x10]
mov qword [rsp + 0x240], rax
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x230], xmm0
mov rbx, qword [rsp + 0x238]
mov rdi, qword [rsp + 0x240]
cmp rdi, rbx
jne 0x464ac3
mov rbx, rdi
add rbx, 1
jb 0x465983
lea rdx, [rdi + rdi]
cmp rbx, rdx
cmovb rbx, rdx
mov rsi, rbx
add rsi, rbx
jb 0x465983
test rdi, rdi
je 0x464a9d
mov rcx, qword [rsp + 0x230]
mov r8d, 2
mov r9, rsi
call fcn.00409eb0
test rax, rax
jne 0x464ab3
jmp 0x4658bf
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x1e0], rax
movups xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x1d0], xmm0
mov rdx, qword [rsp + 0xb8]
test rdx, rdx
je 0x464a83
mov r8d, 1
mov rcx, rdi
call fcn.00409ea0
mov rax, qword [rsp + 0x1d0]
mov r15, qword [rsp + 0xa8]
mov r13, qword [rsp + 0x68]
jmp 0x4646f2
mov edx, 2
mov rcx, rsi
call fcn.00409e90
test rax, rax
je 0x4658bf
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rbx
mov qword [rsp + 0x1c8], rbx
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x1f0], rax
mov word [rax + rdi*2], 0
add rdi, 1
mov qword [rsp + 0x240], rdi
cmp byte [r13 + 0x9c], 0
mov eax, 0x400
mov ecx, 0x608
cmove ecx, eax
or ecx, dword [r13 + 0x98]
mov dword [rsp + 0x1fc], ecx
movups xmm0, xmmword [rsp + 0x278]
movaps xmmword [rsp + 0x290], xmm0
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x2a0], rax
cmp qword [rsp + 0x290], 0
je 0x464f81
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x320], rax
movaps xmm0, xmmword [rsp + 0x290]
movaps xmmword [rsp + 0x310], xmm0
mov qword [rsp + 0x50], 2
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x140], rax
movaps xmm0, xmmword [rsp + 0x290]
movaps xmmword [rsp + 0x130], xmm0
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x130]
call fcn.0043d660
mov qword [rsp + 0xa8], r15
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x170], rax
movups xmm0, xmmword [rsp + 0xe0]
movups xmm1, xmmword [rsp + 0xf0]
movups xmm2, xmmword [rsp + 0x100]
movups xmm3, xmmword [rsp + 0x110]
movaps xmmword [rsp + 0x160], xmm3
movaps xmmword [rsp + 0x150], xmm2
movaps xmmword [rsp + 0x140], xmm1
movaps xmmword [rsp + 0x130], xmm0
lea r12, [rsp + 0xc8]
lea rbx, [rsp + 0x1a8]
lea rbp, [rsp + 0x82]
lea rdi, [rsp + 0x70]
lea r13, [rsp + 0x130]
lea r15, [rsp + 0x180]
lea r14, [rsp + 0x50]
jmp 0x464c51
mov rcx, qword [rsp + 0x50]
mov word [rcx + rax*2], 0
add qword [rsp + 0x60], 1
mov rcx, rdi
mov rdx, r13
call fcn.0043d250
cmp qword [rsp + 0x70], 0
je 0x464f99
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0xd0], xmm2
movaps xmmword [rsp + 0xc0], xmm1
movaps xmmword [rsp + 0xb0], xmm0
mov rax, qword [r12 + 0x10]
mov qword [rsp + 0x260], rax
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x250], xmm0
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x190], rax
movaps xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x180], xmm0
mov rcx, rdi
mov rdx, r15
call fcn.00463ea0
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x1b0], xmm1
movaps xmmword [rsp + 0x1a0], xmm0
cmp qword [rsp + 0x1a0], 1
je 0x465011
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x180], xmm0
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x190], rax
mov rsi, qword [rsp + 0x180]
add rax, rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rax
mov word [rsp + 0x80], 0
movzx eax, word [rsp + 0x19e]
mov word [rbp + 4], ax
mov eax, dword [rsp + 0x19a]
mov dword [rbp], eax
mov rcx, r14
mov rdx, rdi
call fcn.0045d090
mov rdx, qword [rsp + 0x188]
test rdx, rdx
je 0x464d78
mov r8d, 1
mov rcx, rsi
call fcn.00409ea0
mov rax, qword [rsp + 0x60]
cmp rax, qword [rsp + 0x58]
jne 0x464e0d
mov r14, rax
add r14, 1
jb 0x465960
lea rdx, [rax + rax]
cmp r14, rdx
cmovb r14, rdx
mov rsi, r14
add rsi, r14
jb 0x465960
test rax, rax
je 0x464dce
mov rcx, qword [rsp + 0x50]
mov r8d, 2
mov r9, rsi
call fcn.00409eb0
test rax, rax
jne 0x464de4
jmp 0x4658bf
mov edx, 2
mov rcx, rsi
call fcn.00409e90
test rax, rax
je 0x4658bf
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], r14
mov rax, qword [rsp + 0x60]
lea r14, [rsp + 0x50]
lea rbx, [rsp + 0x1a8]
lea rbp, [rsp + 0x82]
lea rdi, [rsp + 0x70]
mov rcx, qword [rsp + 0x50]
mov word [rcx + rax*2], 0x3d
add qword [rsp + 0x60], 1
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x190], rax
movaps xmm0, xmmword [rsp + 0x250]
movaps xmmword [rsp + 0x180], xmm0
mov rcx, rdi
mov rdx, r15
call fcn.00463ea0
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x1b0], xmm1
movaps xmmword [rsp + 0x1a0], xmm0
cmp qword [rsp + 0x1a0], 1
je 0x465043
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x180], xmm0
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x190], rax
mov rsi, qword [rsp + 0x180]
add rax, rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rax
mov word [rsp + 0x80], 0
movzx eax, word [rsp + 0x19e]
mov word [rbp + 4], ax
mov eax, dword [rsp + 0x19a]
mov dword [rbp], eax
mov rcx, r14
mov rdx, rdi
call fcn.0045d090
mov rdx, qword [rsp + 0x188]
test rdx, rdx
je 0x464ee7
mov r8d, 1
mov rcx, rsi
call fcn.00409ea0
mov rax, qword [rsp + 0x60]
cmp rax, qword [rsp + 0x58]
jne 0x464c40
mov rdi, rax
add rdi, 1
jb 0x46596a
lea rdx, [rax + rax]
cmp rdi, rdx
cmovb rdi, rdx
mov rsi, rdi
add rsi, rdi
jb 0x46596a
test rax, rax
je 0x464f3d
mov rcx, qword [rsp + 0x50]
mov r8d, 2
mov r9, rsi
call fcn.00409eb0
test rax, rax
jne 0x464f53
jmp 0x4658bf
mov edx, 2
mov rcx, rsi
call fcn.00409e90
test rax, rax
je 0x4658bf
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdi
mov rax, qword [rsp + 0x60]
lea r14, [rsp + 0x50]
lea rbx, [rsp + 0x1a8]
lea rbp, [rsp + 0x82]
lea rdi, [rsp + 0x70]
jmp 0x464c40
xorps xmm0, xmm0
movaps xmmword [rsp + 0x130], xmm0
mov esi, 2
xor r14d, r14d
jmp 0x4650df
lea rcx, [rsp + 0x130]
call fcn.0043d090
mov r15, qword [rsp + 0xa8]
mov r13, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
cmp rax, qword [rsp + 0x58]
jne 0x4650b6
mov rdi, rax
add rdi, 1
jb 0x46598d
lea rdx, [rax + rax]
cmp rdi, rdx
cmovb rdi, rdx
mov rsi, rdi
add rsi, rdi
jb 0x46598d
test rax, rax
je 0x465091
mov rcx, qword [rsp + 0x50]
mov r8d, 2
mov r9, rsi
call fcn.00409eb0
test rax, rax
jne 0x4650a7
jmp 0x4658bf
mov r14, qword [rsp + 0x1a8]
mov rsi, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x258]
test rdx, rdx
je 0x465053
mov rcx, qword [rsp + 0x250]
mov r8d, 1
call fcn.00409ea0
jmp 0x465053
mov r14, qword [rsp + 0x1a8]
mov rsi, qword [rsp + 0x1b0]
mov r15, qword [rsp + 0xa8]
mov r13, qword [rsp + 0x68]
lea rcx, [rsp + 0x130]
call fcn.0043d090
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x46508a
add rdx, rdx
mov rcx, qword [rsp + 0x50]
mov r8d, 2
call fcn.00409ea0
mov eax, 1
jmp 0x4650e1
mov edx, 2
mov rcx, rsi
call fcn.00409e90
test rax, rax
je 0x4658bf
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdi
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
mov word [rcx + rax*2], 0
add qword [rsp + 0x60], 1
mov rsi, qword [rsp + 0x50]
lea rax, [rsp + 0x58]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x130], xmm0
mov r14, rsi
xor eax, eax
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], r14
mov qword [rsp + 0x210], rsi
movaps xmm0, xmmword [rsp + 0x130]
movups xmmword [rsp + 0x218], xmm0
test rax, rax
je 0x465143
mov rax, qword [rsp + 0x208]
mov qword [r15 + 8], rax
mov rax, qword [rsp + 0x210]
mov qword [r15 + 0x10], rax
mov qword [r15], 1
mov rsi, qword [rsp + 0x1c8]
test rsi, rsi
jne 0x4655bc
jmp 0x4655d5
lea rax, [rsp + 0x210]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1b0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1a0], xmm0
mov rax, qword [r13 + 0x50]
test rax, rax
je 0x4652ae
lea r12, [r13 + 0x50]
mov rcx, rax
add rax, qword [r13 + 0x60]
xor r8d, r8d
xor ebp, ebp
nop
test bp, bp
je 0x465190
xor ebx, ebx
jmp 0x465250
cmp rcx, rax
je 0x465729
lea rdx, [rcx + 1]
movzx ebp, byte [rcx]
test bpl, bpl
js 0x4651af
mov rcx, rdx
xor ebx, ebx
jmp 0x465250
cmp rdx, rax
je 0x4651c1
movzx ebx, byte [rcx + 1]
add rcx, 2
and ebx, 0x3f
jmp 0x4651c6
xor ebx, ebx
mov rcx, rax
mov edi, ebp
and edi, 0x1f
cmp bpl, 0xe0
jb 0x4651e2
cmp rcx, rax
je 0x4651e9
movzx esi, byte [rcx]
add rcx, 1
and esi, 0x3f
jmp 0x4651ee
shl edi, 6
or ebx, edi
jmp 0x465223
xor esi, esi
mov rcx, rax
shl ebx, 6
or ebx, esi
cmp bpl, 0xf0
jb 0x46520a
cmp rcx, rax
je 0x465211
movzx ebp, byte [rcx]
add rcx, 1
and ebp, 0x3f
jmp 0x465216
shl edi, 0xc
or ebx, edi
jmp 0x465223
xor ebp, ebp
mov rcx, rax
and edi, 7
shl edi, 0x12
shl ebx, 6
or ebx, edi
or ebx, ebp
mov ebp, ebx
cmp ebx, 0xffff
jbe 0x465185
and ebp, 0x3ff
or ebp, 0xdc00
mov ebx, ebp
mov bp, 1
nop word cs:[rax + rax]
nop dword [rax]
test bp, bp
mov ebp, ebx
jne 0x465180
lea r8, str.nul_byte_found_in_provided_dataPATHexe
lea rcx, [rsp + 0xe0]
mov dl, 0xb
mov r9d, 0x1f
call fcn.00446060
mov r12, qword [rsp + 0xe0]
mov rbp, qword [rsp + 0xe8]
mov r8d, 1
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x80], rbp
test r8, r8
je 0x4652c8
mov eax, 1
jmp 0x4653c2
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
mov ebp, 2
xor r12d, r12d
xor eax, eax
jmp 0x4653c2
mov rax, qword [r12]
mov rcx, qword [r12 + 0x10]
add rcx, rax
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rcx
mov word [rsp + 0xf0], 0
mov eax, dword [rsp + 0x200]
mov dword [rsp + 0xf2], eax
movzx eax, word [rsp + 0x204]
mov word [rsp + 0xf6], ax
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0xe0]
call fcn.0045d5b0
mov rdi, qword [rsp + 0xc0]
cmp rdi, qword [rsp + 0xb8]
jne 0x46538f
mov rbx, rdi
add rbx, 1
jb 0x465997
lea rdx, [rdi + rdi]
cmp rbx, rdx
cmovb rbx, rdx
mov rsi, rbx
add rsi, rbx
jb 0x465997
test rdi, rdi
je 0x4658a9
mov rcx, qword [rsp + 0xb0]
mov r8d, 2
mov r9, rsi
call fcn.00409eb0
test rax, rax
je 0x4658bf
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rbx
lea rax, [rsp + 0xb8]
mov r12, qword [rsp + 0xb0]
mov word [r12 + rdi*2], 0
add rdi, 1
mov qword [rsp + 0xc0], rdi
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xe0], xmm0
xor eax, eax
mov rbp, r12
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], r12
mov qword [rsp + 0x140], rbp
movaps xmm0, xmmword [rsp + 0xe0]
movups xmmword [rsp + 0x148], xmm0
test rax, rax
je 0x46540b
lea rax, [rsp + 0x138]
movups xmm0, xmmword [rax]
movups xmmword [r15 + 8], xmm0
mov qword [r15], 1
jmp 0x46558c
lea rax, [rsp + 0x140]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xc0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xb0], xmm0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], 0
lea rsi, [0x00502198]
mov rcx, rsi
call fcn.0046a830
mov al, byte [rsp + 0x3a0]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x130], 0
mov qword [rsp + 0x140], 0
mov qword [rsp + 0x150], 0
mov qword [rsp + 0x200], 1
test al, al
lea rax, [rsp + 0x328]
lea rcx, [rsp + 0x200]
cmovne rcx, rax
lea rdx, [r13 + 0x68]
cmp qword [r13 + 0x68], 4
cmove rdx, rcx
lea rdi, [r13 + 0x78]
cmp qword [r13 + 0x78], 4
cmove rdi, rax
cmp qword [r13 + 0x88], 4
lea rbp, [r13 + 0x88]
cmove rbp, rax
lea rcx, [rsp + 0xe0]
lea r9, [rsp + 0x130]
mov r8d, 0xfffffff6
call fcn.00465d60
mov rsi, qword [rsp + 0xe8]
cmp qword [rsp + 0xe0], 1
jne 0x46567f
mov rax, qword [rsp + 0xf0]
mov qword [r15 + 8], rsi
mov qword [r15 + 0x10], rax
mov qword [r15], 1
cmp qword [rsp + 0x130], 0
je 0x46552d
mov rcx, qword [rsp + 0x138]
call fcn.004a5064
cmp qword [rsp + 0x140], 0
je 0x465545
mov rcx, qword [rsp + 0x148]
call fcn.004a5064
cmp qword [rsp + 0x150], 0
je 0x46555d
mov rcx, qword [rsp + 0x158]
call fcn.004a5064
lea rcx, [0x00502198]
call fcn.0046aac0
mov rdx, qword [rsp + 0xb8]
test rdx, rdx
je 0x46558c
add rdx, rdx
mov rcx, qword [rsp + 0xb0]
mov r8d, 2
call fcn.00409ea0
mov rsi, qword [rsp + 0x1c8]
mov rdx, qword [rsp + 0x1a8]
test rdx, rdx
je 0x4655b7
add rdx, rdx
mov rcx, qword [rsp + 0x1a0]
mov r8d, 2
call fcn.00409ea0
test rsi, rsi
je 0x4655d5
add rsi, rsi
mov r8d, 2
mov rcx, qword [rsp + 0x1f0]
mov rdx, rsi
call fcn.00409ea0
xor esi, esi
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x4655fc
mov rdx, qword [rsp + 0x1d8]
test rdx, rdx
je 0x4655fc
mov r8d, 1
call fcn.00409ea0
test sil, sil
je 0x465650
mov rax, qword [rsp + 0x278]
test rax, rax
je 0x465650
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rsp + 0x278]
movaps xmmword [rsp + 0x130], xmm0
lea rcx, [rsp + 0x2a8]
lea rdx, [rsp + 0x130]
call fcn.0043d660
lea rcx, [rsp + 0x2a8]
call fcn.0043d090
cmp qword [rsp + 0x270], 3
jne 0x465668
mov rcx, qword [rsp + 0x268]
call fcn.004a5064
mov rax, r15
add rsp, 0x338
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r9, [rsp + 0x140]
mov qword [rsp + 0x250], rsi
lea rcx, [rsp + 0xe0]
mov r8d, 0xfffffff5
mov rdx, rdi
call fcn.00465d60
mov rdi, qword [rsp + 0xe8]
cmp qword [rsp + 0xe0], 1
jne 0x4656d4
mov rax, qword [rsp + 0xf0]
mov qword [r15 + 8], rdi
mov qword [r15 + 0x10], rax
mov qword [r15], 1
jmp 0x465929
lea r9, [rsp + 0x150]
mov qword [rsp + 0x180], rdi
lea rcx, [rsp + 0xe0]
mov r8d, 0xfffffff4
mov rdx, rbp
call fcn.00465d60
mov rbp, qword [rsp + 0xe8]
cmp qword [rsp + 0xe0], 1
jne 0x46572e
mov rax, qword [rsp + 0xf0]
mov qword [r15 + 8], rbp
mov qword [r15 + 0x10], rax
mov qword [r15], 1
jmp 0x465921
jmp 0x46528d
mov qword [rsp + 0x2f8], rsi
mov qword [rsp + 0x300], rdi
mov qword [rsp + 0x308], rbp
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x2a8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r14
mov eax, dword [rsp + 0x1fc]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
mov rdx, qword [rsp + 0x1f0]
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
je 0x4658ce
mov rcx, qword [rsp + 0x78]
call fcn.004a5064
mov rax, qword [rsp + 0x70]
mov qword [r15 + 8], rax
movups xmm0, xmmword [rsp + 0x130]
movups xmm1, xmmword [rsp + 0x140]
movups xmm2, xmmword [rsp + 0x150]
movups xmmword [r15 + 0x30], xmm2
movups xmmword [r15 + 0x20], xmm1
movups xmmword [r15 + 0x10], xmm0
mov qword [r15], 0
mov rcx, rbp
call fcn.004a5064
mov rcx, rdi
call fcn.004a5064
mov rcx, rsi
call fcn.004a5064
lea rcx, [0x00502198]
call fcn.0046aac0
mov rdx, qword [rsp + 0xb8]
test rdx, rdx
je 0x46581f
add rdx, rdx
mov rcx, qword [rsp + 0xb0]
mov r8d, 2
call fcn.00409ea0
mov rdx, qword [rsp + 0x1a8]
test rdx, rdx
mov rsi, qword [rsp + 0x1c8]
je 0x46584a
add rdx, rdx
mov rcx, qword [rsp + 0x1a0]
mov r8d, 2
call fcn.00409ea0
test rsi, rsi
je 0x465868
add rsi, rsi
mov r8d, 2
mov rcx, qword [rsp + 0x1f0]
mov rdx, rsi
call fcn.00409ea0
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x465650
mov rdx, qword [rsp + 0x1d8]
test rdx, rdx
je 0x465650
mov r8d, 1
call fcn.00409ea0
cmp qword [rsp + 0x270], 3
je 0x46565b
jmp 0x465668
mov edx, 2
mov rcx, rsi
call fcn.00409e90
test rax, rax
jne 0x46537f
mov edx, 2
mov rcx, rsi
call fcn.00481e70
ud2
call sub.KERNEL32.dll_GetLastError
movzx ecx, word [rsp + 0xe0]
mov word [rsp + 0x310], cx
mov cl, byte [rsp + 0xe2]
mov byte [rsp + 0x312], cl
mov byte [r15 + 8], 0
mov cl, byte [rsp + 0x312]
mov byte [r15 + 0xb], cl
movzx ecx, word [rsp + 0x310]
mov word [r15 + 9], cx
mov dword [r15 + 0xc], eax
mov qword [r15], 1
mov rcx, rbp
call fcn.004a5064
mov rcx, rdi
call fcn.004a5064
mov rcx, rsi
call fcn.004a5064
cmp qword [rsp + 0x130], 0
jne 0x465520
jmp 0x46552d
lea rcx, [0x004ccd40]
call fcn.00488de0
call fcn.00481da0
call fcn.00481da0
call fcn.00481da0
mov edx, 2
mov rcx, rbx
call fcn.00481e70
ud2
call fcn.00481da0
call fcn.00481da0
call fcn.00481da0