Function at 0x425a80
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x550
call 0x425a91
pop eax
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x42e170
mov esi, edx
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x5c], eax
mov eax, dword fs:[0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov dword fs:[0], eax
movzx eax, byte [edx + 0x34]
mov edi, dword [edx + 0x30]
test al, al
jne 0x425ae8
test edi, edi
jne 0x425ae8
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x38], 0
jmp 0x426429
test al, al
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x104], 0
jne 0x425c43
call dword [sym.imp.kernel32.dll_GetEnvironmentStringsW]
test eax, eax
je 0x42909e
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0xf8], eax
nop word cs:[eax + eax]
nop dword [eax + eax]
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x10], 5
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00423730
add esp, 8
cmp byte [ebp - 0x550], 2
je 0x425c31
mov eax, dword [ebp - 0x55c]
mov ecx, dword [ebp - 0x554]
lea edx, [ebp - 0x90]
mov dword [ebp - 0x10], 7
add ecx, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x134]
mov word [ebp - 0x88], 0
call fcn.00418230
movsd xmm0, qword [ebp - 0x55c]
movsd xmm1, qword [ebp - 0x554]
lea eax, [ebp - 0xd8]
mov byte [ebp - 0x9d], 0
mov dword [ebp - 0x10], 6
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x10c]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [ebp - 0x12c]
movsd xmm1, qword [ebp - 0x134]
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0x54c]
movsd qword [ebp - 0xe4], xmm1
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004152b0
add esp, 8
cmp byte [ebp - 0x84], 2
je 0x425b30
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x425b30
push 1
push eax
push dword [ebp - 0x90]
call fcn.00402ca0
add esp, 0xc
jmp 0x425b30
push dword [ebp - 0xfc]
call dword [sym.imp.kernel32.dll_FreeEnvironmentStringsW]
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x24]
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x2c]
xor edx, edx
test eax, eax
setne dl
cmove edi, eax
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x10], 1
nop dword [eax + eax]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x10], 1
call fcn.00412e20
mov dword [ebp - 0x24], edx
mov edi, eax
test eax, eax
je 0x42623a
mov eax, dword [ebp - 0x24]
cmp byte [eax + 0xc], 2
jne 0x425e20
mov edx, dword [ebp - 0x10c]
test edx, edx
je 0x425ca0
mov eax, dword [ebp - 0x108]
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x28], edx
push dword [edi + 8]
push dword [edi]
mov dword [ebp - 0x24], eax
push eax
call fcn.00417af0
add esp, 0xc
cmp dword [ebp - 0xfc], 0
jne 0x425ca0
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xf0]
mov byte [ebp - 0x140], 0
test ecx, ecx
jne 0x425d67
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x140]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], edx
lea ecx, [ebp - 0x55c]
lea edx, [ebp - 0xe4]
push eax
call fcn.004175d0
add esp, 4
jmp 0x426105
movzx edx, word [eax + 0x1ea]
mov eax, dword [eax + edx*4 + 0x1ec]
dec ecx
jne 0x425d60
movzx ecx, word [eax + 0x1ea]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x140]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x10], 1
lea edx, [ebp - 0x54]
dec ecx
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x55c]
push eax
call fcn.004175d0
add esp, 4
movsd xmm2, qword [ebp - 0x544]
movsd xmm1, qword [ebp - 0x54c]
mov eax, dword [ebp - 0x534]
movsd xmm0, qword [ebp - 0x53c]
mov edx, dword [ebp - 0x530]
movsd qword [ebp - 0x78], xmm2
movsd qword [ebp - 0x80], xmm1
movsd xmm2, qword [ebp - 0x55c]
movsd xmm1, qword [ebp - 0x554]
mov dword [ebp - 0x68], eax
movsd qword [ebp - 0x70], xmm0
mov eax, dword [ebp - 0x528]
movsd qword [ebp - 0x88], xmm1
movsd qword [ebp - 0x90], xmm2
movzx ecx, word [edx + 0x1ea]
cmp eax, ecx
jae 0x425fc4
mov ecx, edx
jmp 0x425ff3
mov esi, dword [edi + 0x14]
mov eax, dword [edi + 0xc]
test esi, esi
je 0x425e53
mov dword [ebp - 0x28], eax
js 0x428f9f
movzx eax, byte [0x529189]
push 1
push esi
call fcn.00402c90
add esp, 8
mov ebx, eax
test eax, eax
mov eax, dword [ebp - 0x28]
jne 0x425e58
jmp 0x428fe6
mov ebx, 1
push esi
push eax
push ebx
call fcn.0043b9a0
add esp, 0xc
movzx eax, byte [edi + 0x18]
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0xdc], esi
mov byte [ebp - 0xd8], al
xor eax, eax
mov ebx, dword [edi + 8]
mov ecx, dword [edi]
mov edi, 2
test ebx, ebx
je 0x425ecc
cmp ebx, 0x3fffffff
ja 0x428fba
lea esi, [ebx + ebx]
test esi, esi
js 0x428fa9
je 0x425ecc
mov dword [ebp - 0x28], ecx
movzx eax, byte [0x529189]
push 2
push esi
call fcn.00402c90
add esp, 8
test eax, eax
je 0x42900b
mov ecx, dword [ebp - 0x28]
mov edi, eax
mov eax, esi
push eax
push ecx
push edi
call fcn.0043b9a0
add esp, 0xc
movsd xmm0, qword [ebp - 0xe4]
movsd xmm1, qword [ebp - 0xdc]
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x550]
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
mov dword [ebp - 0x55c], edi
mov dword [ebp - 0x558], ebx
mov dword [ebp - 0x554], ebx
mov ebx, dword [ecx + 8]
mov esi, dword [ecx]
test ebx, ebx
je 0x425f37
js 0x428ff6
movzx eax, byte [0x529189]
push 1
push ebx
call fcn.00402c90
add esp, 8
mov edi, eax
test eax, eax
jne 0x425f3c
jmp 0x428fcb
mov edi, 1
push ebx
push esi
push edi
call fcn.0043b9a0
add esp, 0xc
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x10c]
movzx eax, byte [eax + 0xc]
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov byte [ebp - 0x5d], 0
mov dword [ebp - 0x10], 2
mov byte [ebp - 0xd8], al
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.004152b0
add esp, 8
cmp byte [ebp - 0x84], 2
je 0x425ca0
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x425ca0
push 1
push eax
push dword [ebp - 0x90]
call fcn.00402ca0
add esp, 0xc
jmp 0x425ca0
mov esi, dword [ebp - 0x52c]
nop word [eax + eax]
mov ecx, dword [edx + 0xb0]
test ecx, ecx
je 0x425fef
movzx eax, word [edx + 0x1e8]
inc esi
mov edx, ecx
cmp ax, word [ecx + 0x1ea]
jae 0x425fd0
jmp 0x425ff3
xor ecx, ecx
mov eax, esi
lea edx, [eax + eax*8]
lea edx, [edx + edx*2]
add edx, eax
shl eax, 4
mov esi, dword [ecx + edx + 0xcc]
mov dword [ebp - 0xcc], esi
mov esi, dword [ebp - 0x78]
movsd xmm0, qword [ecx + edx + 0xc4]
movsd qword [ebp - 0xd4], xmm0
movsd xmm0, qword [ecx + edx + 0xb4]
movsd xmm1, qword [ecx + edx + 0xbc]
movsd qword [ebp - 0xdc], xmm1
movsd qword [ebp - 0xe4], xmm0
mov dword [ecx + edx + 0xcc], esi
lea esi, [ebp - 0x74]
movsd xmm0, qword [ebp - 0x80]
movsd qword [ecx + edx + 0xc4], xmm0
movsd xmm0, qword [ebp - 0x90]
movsd xmm1, qword [ebp - 0x88]
movsd qword [ecx + edx + 0xbc], xmm1
movsd qword [ecx + edx + 0xb4], xmm0
lea edx, [ebp - 0xc8]
movsd xmm0, qword [ecx + eax]
movsd xmm1, qword [ecx + eax + 8]
movsd qword [edx + 8], xmm1
movsd qword [edx], xmm0
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
movsd qword [ecx + eax], xmm0
movsd qword [ecx + eax + 8], xmm1
movsd xmm2, qword [ebp - 0xcc]
movsd xmm1, qword [ebp - 0xd4]
mov eax, dword [ebp - 0xbc]
movsd xmm0, qword [ebp - 0xc4]
movsd qword [ebp - 0x544], xmm2
movsd qword [ebp - 0x54c], xmm1
movsd xmm2, qword [ebp - 0xe4]
movsd xmm1, qword [ebp - 0xdc]
mov dword [ebp - 0x534], eax
movsd qword [ebp - 0x53c], xmm0
movsd qword [ebp - 0x554], xmm1
movsd qword [ebp - 0x55c], xmm2
movsd xmm2, qword [ebp - 0x544]
movsd xmm1, qword [ebp - 0x54c]
mov eax, dword [ebp - 0x534]
movsd xmm0, qword [ebp - 0x53c]
dec dword [ebp - 0x104]
cmp byte [ebp - 0x140], 0
movsd qword [ebp - 0xcc], xmm2
movsd qword [ebp - 0xd4], xmm1
movsd xmm2, qword [ebp - 0x55c]
movsd xmm1, qword [ebp - 0x554]
mov dword [ebp - 0xbc], eax
movsd qword [ebp - 0xc4], xmm0
movsd qword [ebp - 0xdc], xmm1
movsd qword [ebp - 0xe4], xmm2
je 0x4261ab
mov edx, dword [ebp - 0x24]
test edx, edx
je 0x429022
mov ecx, dword [ebp - 0x28]
dec edx
mov eax, dword [ecx + 0x1ec]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], edx
mov dword [eax + 0xb0], 0
push 4
push 0x21c
push ecx
call fcn.00402ca0
add esp, 0xc
cmp byte [ebp - 0xcc], 2
je 0x425ca0
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xe4]
mov esi, dword [ebp - 0xe0]
mov edi, dword [ebp - 0xc4]
movzx ebx, byte [ebp - 0xbc]
test eax, eax
mov dword [ebp - 0x24], ecx
je 0x426204
push 1
push eax
push dword [ebp - 0xd8]
mov byte [ebp - 0x28], bl
mov ebx, edi
mov edi, edx
call fcn.00402ca0
mov edx, edi
mov edi, ebx
movzx ebx, byte [ebp - 0x28]
add esp, 0xc
test esi, esi
je 0x426216
add esi, esi
push 2
push esi
push edx
call fcn.00402ca0
add esp, 0xc
cmp bl, 2
je 0x425ca0
test edi, edi
je 0x425ca0
push 1
push edi
push dword [ebp - 0x24]
call fcn.00402ca0
add esp, 0xc
jmp 0x425c91
movsd xmm0, qword [ebp - 0x10c]
mov eax, dword [ebp - 0x104]
movsd qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x154], 1
movzx eax, byte [0x529189]
push 1
push 4
call fcn.00402c90
add esp, 8
test eax, eax
je 0x429042
mov ecx, eax
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x90]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], 4
mov dword [ebp - 0xdc], 4
mov dword [eax], 0x48544150
mov byte [ebp - 0xd8], 0
mov dword [ebp - 0x10], 0x16
add ecx, 4
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x134]
mov word [ebp - 0x88], 0
call fcn.00418230
movsd xmm1, qword [ebp - 0xdc]
movsd xmm0, qword [ebp - 0xe4]
mov eax, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x150]
movsd qword [ebp - 0x548], xmm1
movsd xmm1, qword [ebp - 0x134]
movsd qword [ebp - 0x550], xmm0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x554], eax
test edx, edx
movsd qword [ebp - 0x55c], xmm1
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x28], eax
je 0x4263e7
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], eax
movzx esi, word [edx + 0x1ea]
lea ecx, [edx + 0xb4]
lea edi, [edx - 8]
mov dword [ebp - 0x2c], edx
lea eax, [esi + esi*8]
mov dword [ebp - 0x3c], esi
lea ebx, [eax + eax*2]
add ebx, esi
mov esi, 0xffffffff
nop dword [eax]
test ebx, ebx
je 0x4263a0
lea eax, [ecx + 0x1c]
mov dword [ebp - 0x24], eax
push 1
push dword [ecx + 8]
push dword [ecx]
push dword [ebp - 0x30]
push dword [ebp - 0x28]
call dword [sym.imp.kernel32.dll_CompareStringOrdinal]
mov ecx, dword [ebp - 0x24]
add ebx, 0xffffffe4
add edi, 0x10
inc esi
cmp eax, 3
je 0x426360
cmp eax, 1
jne 0x4263c1
jmp 0x4263a3
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
sub eax, 1
jb 0x4268bb
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov edx, dword [edx + esi*4 + 0x1ec]
jmp 0x42633a
cmp eax, 2
jne 0x428f22
cmp dword [ebp - 0x2c], 0
mov esi, dword [ebp - 0x44]
je 0x4263f1
mov eax, dword [edi - 8]
mov edi, dword [edi]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x54c]
test eax, eax
jne 0x4263fb
jmp 0x42640c
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x54c]
test eax, eax
je 0x42640c
push 1
push eax
push dword [ebp - 0x550]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x2c], edi
test eax, eax
je 0x426429
add eax, eax
push 2
push eax
push dword [ebp - 0x28]
call fcn.00402ca0
add esp, 0xc
mov edi, dword [esi + 0x20]
test edi, edi
je 0x426491
mov edx, dword [esi + 0x18]
mov eax, 0x4243e0
cmp edi, 4
jb 0x426467
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x10], 9
bswap eax
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
mov eax, 0x4243e0
adc ecx, 0xffffffff
mov ecx, 0x424400
cmove eax, ecx
movzx ecx, byte [edi + edx - 1]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], edi
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
mov dword [ebp - 0x30], ecx
push ecx
call eax
add esp, 4
mov ebx, dword [ebp - 0x24]
test al, al
je 0x42651b
mov byte [ebp - 0x50], 2
mov dword [ebp - 0x4c], 0x51de68
mov edx, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x98]
mov dword [ecx], edx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], 2
cmp dword [ebp - 0x154], 0
je 0x4265ca
mov ecx, dword [ebp - 0x150]
test ecx, ecx
je 0x42659f
mov edx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x554], ecx
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x550], edx
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], ecx
mov ecx, 1
mov dword [ebp - 0x540], edx
jmp 0x4265a3
mov edi, dword [ebp - 0x28]
xor eax, eax
cmp ebx, 3
mov ecx, 0
jbe 0x4265ee
movzx ecx, byte [ebx + edi - 4]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x2e
jne 0x4265ec
movzx ecx, byte [edi + ebx - 3]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
jne 0x4265ec
movzx ecx, byte [edi + ebx - 2]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x78
jne 0x4265ec
mov edx, dword [ebp - 0x30]
mov ecx, edx
add cl, 0xbf
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, dl
cmp cl, 0x65
sete cl
jmp 0x4265ee
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x54c], ecx
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x53c], eax
mov dword [ebp - 0x10], 0
call fcn.00413da0
mov eax, dword [ebp + 8]
cmp dword [eax], 4
jb 0x4265d8
push dword [eax + 4]
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
add esp, 0x550
pop esi
pop edi
pop ebx
pop ebp
ret
xor ecx, ecx
lea edx, [edi + ebx]
mov dword [ebp - 0x30], edx
nop word cs:[eax + eax]
nop
cmp ebx, eax
je 0x42667a
movzx edx, byte [edi + eax]
cmp edx, 0x2f
je 0x426613
inc eax
cmp edx, 0x5c
jne 0x426600
test cl, cl
je 0x426734
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
lea ecx, [ebp - 0x55c]
mov edx, edi
push ebx
call fcn.0042bc00
add esp, 4
mov edx, dword [ebp - 0x55c]
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x554]
test edx, edx
je 0x426842
mov dword [ebp - 0x55c], edx
mov dword [ebp - 0x554], ecx
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x55c]
mov dword [ebp - 0x558], eax
mov byte [ebp - 0x1d], 1
call fcn.004226a0
jmp 0x42684f
xor esi, esi
mov eax, edi
jmp 0x42668b
xor esi, esi
test dx, dx
je 0x42682f
mov dx, 1
test si, si
jne 0x426680
cmp eax, dword [ebp - 0x30]
je 0x426892
movzx ebx, byte [eax]
movzx ecx, bl
test bl, bl
js 0x4266ad
mov ebx, dword [ebp - 0x24]
inc eax
jmp 0x426702
movzx edi, byte [eax + 1]
and ecx, 0x1f
and edi, 0x3f
cmp bl, 0xdf
jbe 0x4266f4
movzx esi, byte [eax + 2]
shl edi, 6
and esi, 0x3f
or esi, edi
cmp bl, 0xf0
jb 0x42670b
movzx edi, byte [eax + 3]
and ecx, 7
shl esi, 6
add eax, 4
shl ecx, 0x12
and edi, 0x3f
or edi, esi
or ecx, edi
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
cmp ecx, 0xffff
jbe 0x426702
jmp 0x426721
shl ecx, 6
mov ebx, dword [ebp - 0x24]
add eax, 2
or ecx, edi
mov edi, dword [ebp - 0x28]
xor esi, esi
mov edx, ecx
jmp 0x426682
shl ecx, 0xc
add eax, 3
or ecx, esi
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
cmp ecx, 0xffff
jbe 0x426702
and ecx, 0x3ff
or ecx, 0xdc00
mov esi, ecx
jmp 0x426682
test ebx, ebx
js 0x42911b
movzx eax, byte [0x529189]
push 1
push ebx
call fcn.00402c90
add esp, 8
test eax, eax
je 0x429130
mov esi, eax
push ebx
push edi
push eax
call fcn.0043b9a0
add esp, 0xc
mov dword [ebp - 0xe4], esi
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov byte [ebp - 0xd8], 0
mov dword [ebp - 0x10], 0x14
lea eax, [ebp - 0x55c]
movsd xmm0, qword [ebp - 0xdc]
movsd xmm1, qword [ebp - 0xe4]
movsd qword [ebp - 0x554], xmm0
movsd qword [ebp - 0x55c], xmm1
push 4
push str..exeprogram_not_found
push eax
call fcn.00423da0
add esp, 0xc
movsd xmm0, qword [ebp - 0x55c]
movsd xmm1, qword [ebp - 0x554]
mov byte [ebp - 0x9e], 1
mov dword [ebp - 0x10], 0x13
lea ecx, [ebp - 0x90]
movsd qword [ebp - 0xe4], xmm0
movsd qword [ebp - 0xdc], xmm1
mov eax, dword [ebp - 0xdc]
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x2c], eax
push eax
call fcn.004299a0
add esp, 4
cmp dword [ebp - 0x90], 0
mov esi, dword [ebp - 0x44]
je 0x426857
mov eax, dword [ebp - 0x88]
movsd xmm0, qword [ebp - 0x90]
mov dword [ebp - 0x4c], eax
movsd qword [ebp - 0x54], xmm0
jmp 0x427287
mov dword [ebp - 0x50], 2
mov dword [ebp - 0x4c], 0x51de18
jmp 0x42649c
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x54], 0
mov esi, dword [ebp - 0x44]
jmp 0x42729f
mov dword [ebp - 0x10], 0x15
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
call fcn.0041db00
add esp, 8
test eax, eax
je 0x426937
mov edi, edx
cmp edx, 2
jne 0x4268d1
movzx ecx, word [eax]
cmp ecx, 0x2e2e
jne 0x4268d1
mov ecx, 2
mov ebx, eax
jmp 0x426911
cmp ebx, 7
ja 0x42691b
xor eax, eax
nop dword [eax]
cmp byte [edi + eax], 0x2e
je 0x42694b
inc eax
cmp ebx, eax
jne 0x4268a0
mov dword [ebp - 0x40], 0
jmp 0x426952
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x54c]
test eax, eax
jne 0x4263fb
jmp 0x42640c
xor esi, esi
mov ebx, eax
nop word cs:[eax + eax]
nop
cmp edi, esi
je 0x42693f
cmp byte [ebx + edi - 1], 0x2e
lea ecx, [ebx - 1]
mov edx, esi
lea esi, [esi + 1]
mov ebx, ecx
jne 0x4268e0
mov ebx, edi
sub ebx, esi
mov dword [ebp - 0x34], ebx
inc ebx
cmp ebx, edi
ja 0x42917f
mov ebx, eax
cmp edi, esi
jne 0x4271f3
mov ecx, edi
mov esi, dword [ebp - 0x2c]
xor eax, eax
jmp 0x4271fd
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
push ebx
push edi
push 0x2e
call fcn.004383a0
add esp, 0xc
mov dword [ebp - 0x40], eax
jmp 0x426952
mov esi, dword [ebp - 0x2c]
jmp 0x427223
mov esi, dword [ebp - 0x2c]
mov edx, edi
xor ebx, ebx
jmp 0x4271fd
mov dword [ebp - 0x40], 1
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 9
test eax, eax
je 0x426adf
add ecx, eax
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x8c], ecx
mov word [ebp - 0x88], 0
mov byte [ebp - 0x84], 1
lea ecx, [ebp - 0x55c]
push eax
push ecx
call fcn.00423900
add esp, 8
jmp 0x4269ca
lea eax, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00423900
add esp, 8
movzx eax, byte [ebp - 0x550]
cmp al, 2
je 0x426adf
mov esi, dword [ebp - 0x554]
mov ecx, dword [ebp - 0x55c]
mov edx, dword [ebp - 0x558]
mov ebx, dword [ebp - 0x24]
test esi, esi
jne 0x426a04
test edx, edx
je 0x4269b0
push 1
push edx
push ecx
call fcn.00402ca0
add esp, 0xc
jmp 0x4269b0
lea edi, [ebp - 0x54f]
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xd7]
mov dword [ebp - 0x10], 0x12
movzx edi, word [edi]
mov word [ecx], di
lea edi, [ebp - 0x54f]
mov ah, byte [edi + 2]
mov edi, dword [ebp - 0x2c]
mov byte [ecx + 2], ah
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], esi
mov byte [ebp - 0xd8], al
push ebx
push dword [ebp - 0x28]
lea eax, [ebp - 0xe4]
push eax
call fcn.0041cab0
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x426a76
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0xe4]
push eax
call fcn.0041d660
add esp, 0xc
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x2c], edx
push dword [ebp - 0xdc]
call fcn.004299a0
add esp, 4
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x426aab
push 1
push eax
push dword [ebp - 0x2c]
call fcn.00402ca0
add esp, 0xc
mov edi, dword [ebp - 0x55c]
test edi, edi
jne 0x42825e
lea eax, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00423900
add esp, 8
jmp 0x4269ca
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
call fcn.00423b60
cmp byte [ebp - 0x84], 2
jne 0x426b0b
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
call fcn.004148f0
jmp 0x426c11
movsd xmm0, qword [ebp - 0x90]
movsd xmm1, qword [ebp - 0x88]
mov byte [ebp - 0x9f], 1
mov dword [ebp - 0x10], 0x10
movsd qword [ebp - 0xe4], xmm0
movsd qword [ebp - 0xdc], xmm1
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x2c], ecx
push ecx
push eax
call fcn.0041d9c0
add esp, 8
test eax, eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
je 0x426b67
cmp dword [ebp - 0x2c], edx
jb 0x426b67
mov dword [ebp - 0xdc], edx
movsd xmm0, qword [ebp - 0xe4]
movsd xmm1, qword [ebp - 0xdc]
mov dword [ebp - 0x10], 0x11
lea edx, [ebp - 0x55c]
movsd qword [ebp - 0x554], xmm1
movsd qword [ebp - 0x55c], xmm0
push ecx
push eax
push edx
call fcn.0041cab0
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x426bbb
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0x55c]
push eax
call fcn.0041d660
add esp, 0xc
mov edx, dword [ebp - 0x55c]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x2c], edx
push dword [ebp - 0x554]
call fcn.004299a0
add esp, 4
mov eax, dword [ebp - 0x558]
test eax, eax
je 0x426bf0
push 1
push eax
push dword [ebp - 0x2c]
call fcn.00402ca0
add esp, 0xc
mov edi, dword [ebp - 0x134]
mov esi, dword [ebp - 0x44]
test edi, edi
je 0x426c11
mov eax, dword [ebp - 0x130]
mov ebx, dword [ebp - 0x12c]
mov dword [ebp - 0x2c], eax
jmp 0x4272b6
mov esi, 0x200
mov dword [ebp - 0xfc], 2
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x34], 0
cmp esi, 0x201
jb 0x426c6e
jmp 0x426c80
jbe 0x426d20
cmp esi, 0x201
jae 0x426c80
mov dword [ebp - 0x38], 0x200
lea ebx, [ebp - 0x55c]
mov edi, esi
jmp 0x426cc7
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
sub esi, edi
sub eax, edi
cmp eax, esi
jae 0x426cb5
mov dword [ebp - 0x10], 0xe
lea ecx, [ebp - 0xfc]
mov edx, edi
push esi
call fcn.00441c90
add esp, 4
mov eax, dword [ebp - 0xfc]
mov edi, dword [ebp - 0xf8]
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x2c], edi
push 0
call dword [sym.imp.kernel32.dll_SetLastError]
push edi
push ebx
call dword [sym.imp.kernel32.dll_GetSystemDirectoryW]
mov esi, eax
test eax, eax
jne 0x426ceb
call dword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x426dda
cmp esi, edi
jne 0x426c60
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x42905e
lea esi, [edi + edi]
test edi, edi
mov eax, 0xffffffff
cmovs esi, eax
cmp esi, 0x201
jae 0x426c80
jmp 0x426c6e
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xe
cmp esi, eax
ja 0x42916b
lea eax, [ebp - 0xe4]
push esi
push ebx
push eax
call fcn.0041b8f0
add esp, 0xc
mov dword [ebp - 0x10], 0xf
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0xe4]
push eax
call fcn.0041cab0
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x426d7b
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0xe4]
push eax
call fcn.0041d660
add esp, 0xc
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x34], edx
push dword [ebp - 0xdc]
call fcn.004299a0
add esp, 4
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x426db0
push 1
push eax
push dword [ebp - 0x34]
call fcn.00402ca0
add esp, 0xc
movsd xmm0, qword [ebp - 0x134]
mov eax, dword [ebp - 0x12c]
mov bl, 1
movsd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x90], 0
jmp 0x426df9
call dword [sym.imp.kernel32.dll_GetLastError]
xor ebx, ebx
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], 1
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x426e10
add eax, eax
push 2
push eax
push dword [ebp - 0x3c]
call fcn.00402ca0
add esp, 0xc
test bl, bl
je 0x426e22
mov edi, dword [ebp - 0x8c]
test edi, edi
jne 0x42703e
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
call fcn.00413b30
mov esi, 0x200
mov dword [ebp - 0xfc], 2
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x34], 0
cmp esi, 0x201
jb 0x426e8e
jmp 0x426ea0
jbe 0x426f40
cmp esi, 0x201
jae 0x426ea0
mov dword [ebp - 0x38], 0x200
lea ebx, [ebp - 0x55c]
mov edi, esi
jmp 0x426ee7
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
sub esi, edi
sub eax, edi
cmp eax, esi
jae 0x426ed5
mov dword [ebp - 0x10], 0xc
lea ecx, [ebp - 0xfc]
mov edx, edi
push esi
call fcn.00441c90
add esp, 4
mov eax, dword [ebp - 0xfc]
mov edi, dword [ebp - 0xf8]
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x2c], edi
push 0
call dword [sym.imp.kernel32.dll_SetLastError]
push edi
push ebx
call dword [sym.imp.kernel32.dll_GetWindowsDirectoryW]
mov esi, eax
test eax, eax
jne 0x426f0b
call dword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x426ffa
cmp esi, edi
jne 0x426e80
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x42907e
lea esi, [edi + edi]
test edi, edi
mov eax, 0xffffffff
cmovs esi, eax
cmp esi, 0x201
jae 0x426ea0
jmp 0x426e8e
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xc
cmp esi, eax
ja 0x429197
lea eax, [ebp - 0xe4]
push esi
push ebx
push eax
call fcn.0041b8f0
add esp, 0xc
mov dword [ebp - 0x10], 0xd
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0xe4]
push eax
call fcn.0041cab0
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x426f9b
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0xe4]
push eax
call fcn.0041d660
add esp, 0xc
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x34], edx
push dword [ebp - 0xdc]
call fcn.004299a0
add esp, 4
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x426fd0
push 1
push eax
push dword [ebp - 0x34]
call fcn.00402ca0
add esp, 0xc
movsd xmm0, qword [ebp - 0x134]
mov eax, dword [ebp - 0x12c]
mov bl, 1
movsd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x90], 0
jmp 0x427019
call dword [sym.imp.kernel32.dll_GetLastError]
xor ebx, ebx
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], 1
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x427030
add eax, eax
push 2
push eax
push dword [ebp - 0x3c]
call fcn.00402ca0
add esp, 0xc
test bl, bl
je 0x427055
mov edi, dword [ebp - 0x8c]
test edi, edi
je 0x427055
mov eax, dword [ebp - 0x88]
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x44]
jmp 0x4272b6
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
call fcn.00413b30
mov byte [ebp - 0x1d], 1
lea eax, [ebp - 0x134]
push 4
push str.PATHRUST_MIN_STACKfatal_runtime_error:_assertion_failed:_thread_info.stack_guard.get__.is_none____thread_info.thread.get__.is_none___n
push eax
call fcn.004196b0
add esp, 0xc
cmp byte [ebp - 0x128], 2
je 0x427d96
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x130]
add edx, ecx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x8c], edx
mov word [ebp - 0x88], 0
mov byte [ebp - 0x84], 1
jmp 0x4270db
mov edi, dword [ebp - 0x55c]
mov esi, dword [ebp - 0x44]
test edi, edi
jne 0x428851
lea eax, [ebp - 0x90]
mov dword [ebp - 0x10], 0xa
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00423900
add esp, 8
jmp 0x427110
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00423900
add esp, 8
movzx eax, byte [ebp - 0x550]
cmp al, 2
je 0x427d81
mov esi, dword [ebp - 0x554]
mov ecx, dword [ebp - 0x55c]
mov edx, dword [ebp - 0x558]
test esi, esi
jne 0x427147
test edx, edx
je 0x4270fa
push 1
push edx
push ecx
call fcn.00402ca0
add esp, 0xc
jmp 0x4270fa
lea edi, [ebp - 0x54f]
lea ebx, [ebp - 0xd7]
mov dword [ebp - 0x10], 0xb
movzx edi, word [edi]
mov word [ebx], di
lea edi, [ebp - 0x54f]
mov ah, byte [edi + 2]
mov byte [ebx + 2], ah
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], esi
mov byte [ebp - 0xd8], al
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0xe4]
push eax
call fcn.0041cab0
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x4271b5
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0xe4]
push eax
call fcn.0041d660
add esp, 0xc
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x2c], edx
push dword [ebp - 0xdc]
call fcn.004299a0
add esp, 4
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x4270ca
push 1
push eax
push dword [ebp - 0x2c]
call fcn.00402ca0
add esp, 0xc
jmp 0x4270ca
lea eax, [ecx + edi + 1]
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
test ebx, ebx
cmovne eax, ebx
test eax, eax
je 0x427223
test ebx, ebx
cmove ecx, edx
add eax, ecx
sub eax, dword [ebp - 0x24]
cmp esi, eax
jb 0x427223
mov esi, eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x10], 0x15
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x15
lea ecx, [ebp - 0x55c]
push esi
call fcn.0042bc00
add esp, 4
mov esi, dword [ebp - 0x44]
mov edx, dword [ebp - 0x55c]
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x554]
test edx, edx
je 0x42727a
mov dword [ebp - 0x55c], edx
mov dword [ebp - 0x554], ecx
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x55c]
mov dword [ebp - 0x558], eax
call fcn.004226a0
mov esi, dword [ebp - 0x44]
jmp 0x427287
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x54], 0
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x42729f
push 1
push eax
push dword [ebp - 0x24]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x50]
mov edi, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 8]
test edi, edi
je 0x4279d7
cmp ebx, 5
mov dword [ebp - 0x34], edi
jb 0x4272d2
cmp word [edi + ebx*2 - 0xa], 0x2e
jne 0x4272d2
cmp word [edi + ebx*2 - 2], 0
je 0x427b0f
movzx ecx, byte [esi + 0x65]
mov eax, dword [esi + 0x48]
mov edi, dword [esi + 0x50]
xor edx, edx
mov dword [ebp - 0xe4], 2
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x10], 0x18
mov byte [ebp - 0x38], cl
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x3c], edi
call fcn.00417fc0
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x28]
mov word [eax + ecx*2], 0x22
inc ecx
mov dword [ebp - 0x55c], edx
lea edx, [ebp - 0x55c]
mov dword [ebp - 0xdc], ecx
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x558], ecx
lea ecx, [ebp - 0xe4]
mov word [ebp - 0x554], 0
call fcn.004180e0
mov edx, dword [ebp - 0xdc]
cmp edx, dword [ebp - 0xe0]
jne 0x42737b
lea ecx, [ebp - 0xe4]
call fcn.00417fc0
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe4]
mov esi, dword [ebp - 0x24]
movzx ecx, byte [ebp - 0x38]
mov word [eax + edx*2], 0x22
mov eax, dword [ebp - 0x3c]
inc edx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0xdc], edx
lea eax, [eax + eax*4]
lea eax, [esi + eax*4]
mov dword [ebp - 0x28], eax
cmp esi, dword [ebp - 0x28]
je 0x42741a
nop dword [eax]
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0x24], esi
cmp edx, dword [ebp - 0xe0]
jne 0x4273d5
lea ecx, [ebp - 0xe4]
call fcn.00417fc0
mov edx, dword [ebp - 0xdc]
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe4]
lea ecx, [ebp - 0x90]
mov word [eax + edx*2], 0x20
inc edx
mov dword [ebp - 0xdc], edx
lea edx, [ebp - 0xe4]
push dword [ebp - 0x30]
push esi
call fcn.00422220
add esp, 8
movzx eax, byte [ebp - 0x90]
cmp al, 4
jne 0x4279df
mov esi, dword [ebp - 0x24]
add esi, 0x14
cmp esi, dword [ebp - 0x28]
jne 0x4273b0
mov eax, dword [ebp - 0xe4]
mov edi, dword [ebp - 0xe0]
mov esi, dword [ebp - 0xdc]
test eax, eax
je 0x427a29
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
mov cl, 1
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x5c], edx
cmp esi, edi
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], edi
mov dword [ebp - 0x138], esi
jne 0x427489
lea ecx, [ebp - 0x140]
mov edx, esi
mov byte [ebp - 0x55], 1
mov dword [ebp - 0x10], 0x1e
call fcn.00417fc0
mov eax, dword [ebp - 0x140]
mov esi, dword [ebp - 0x138]
mov word [eax + esi*2], 0
inc esi
mov eax, 0x400
mov ebx, 0x608
mov dword [ebp - 0x138], esi
mov esi, dword [ebp - 0x44]
cmp byte [esi + 0x64], 0
cmove ebx, eax
or ebx, dword [esi + 0x54]
cmp dword [ebp - 0x154], 0
mov dword [ebp - 0x110], ebx
je 0x427ad4
mov edi, dword [ebp - 0x148]
mov edx, dword [ebp - 0x150]
mov esi, dword [ebp - 0x14c]
mov eax, 2
mov ecx, 0
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
test edi, edi
mov dword [ebp - 0x10c], edx
mov dword [ebp - 0x108], esi
mov dword [ebp - 0x104], edi
jne 0x42753e
mov dword [ebp - 0x24], edx
lea ecx, [ebp - 0x54]
xor edx, edx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x28], esi
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x10], 0x1f
call fcn.00417fc0
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x30]
mov word [eax + ecx*2], 0
inc ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x40], eax
xor eax, eax
test edx, edx
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x10], 0x20
mov dword [ebp - 0xec], 0
setne al
cmove edi, edx
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x554], edx
mov dword [ebp - 0x550], esi
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], edx
lea edx, [ebp - 0x55c]
mov dword [ebp - 0x540], esi
mov dword [ebp - 0x53c], edi
call fcn.004166d0
mov edx, dword [ebp - 0x134]
test edx, edx
je 0x4281c4
mov eax, dword [ebp - 0x12c]
lea ecx, [eax + eax*8]
lea esi, [ecx + ecx*2]
add esi, eax
shl eax, 4
mov ecx, dword [edx + esi + 0xb4]
mov edi, dword [edx + esi + 0xb8]
mov dword [ebp - 0xe8], ecx
movzx ecx, byte [edx + esi + 0xcc]
mov dword [ebp - 0x9c], edi
mov edi, dword [edx + esi + 0xbc]
mov byte [ebp - 0x24], cl
movzx ecx, byte [edx + esi + 0xcf]
mov dword [ebp - 0x100], edi
mov edi, dword [edx + esi + 0xc0]
cmp byte [ebp - 0x24], 2
mov byte [ebp - 0x64], cl
mov ecx, dword [edx + esi + 0xc4]
movzx ebx, byte [ebp - 0x64]
mov dword [ebp - 0x94], ecx
mov ecx, dword [edx + esi + 0xc8]
mov byte [ebp - 0xe2], bl
movzx esi, word [edx + esi + 0xcd]
mov word [ebp - 0xe4], si
movsd xmm0, qword [edx + eax]
movsd xmm1, qword [edx + eax + 8]
lea eax, [ebp - 0xe1]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [ebp - 0xd5]
movsd xmm0, qword [ebp - 0xe4]
movsd xmm1, qword [ebp - 0xdc]
mov dword [ebp - 0x81], eax
movsd qword [ebp - 0x88], xmm1
movsd qword [ebp - 0x90], xmm0
je 0x4281c4
lea eax, [ebp - 0x8d]
add ecx, edi
xor ebx, ebx
mov edx, edi
mov dword [ebp - 0x64], edi
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
mov dword [ebp - 0x24], ecx
movsd qword [ebp - 0x12c], xmm1
movsd qword [ebp - 0x134], xmm0
jmp 0x4276db
xor ebx, ebx
test di, di
je 0x427a68
mov di, 1
test bx, bx
jne 0x4276d0
cmp edx, ecx
je 0x427772
movzx eax, byte [edx]
movzx esi, al
test al, al
js 0x4276f9
inc edx
jmp 0x427746
movzx ecx, byte [edx + 1]
and esi, 0x1f
and ecx, 0x3f
cmp al, 0xdf
jbe 0x42773b
movzx ebx, byte [edx + 2]
shl ecx, 6
and ebx, 0x3f
or ebx, ecx
cmp al, 0xf0
jb 0x42774c
movzx eax, byte [edx + 3]
and esi, 7
shl ebx, 6
add edx, 4
shl esi, 0x12
and eax, 0x3f
or eax, ebx
or esi, eax
mov ecx, dword [ebp - 0x24]
cmp esi, 0xffff
jbe 0x427746
jmp 0x42775f
shl esi, 6
add edx, 2
or esi, ecx
mov ecx, dword [ebp - 0x24]
xor ebx, ebx
mov edi, esi
jmp 0x4276d2
shl esi, 0xc
add edx, 3
or esi, ebx
mov ecx, dword [ebp - 0x24]
cmp esi, 0xffff
jbe 0x427746
and esi, 0x3ff
or esi, 0xdc00
mov ebx, esi
jmp 0x4276d2
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x42778a
push 1
push eax
push dword [ebp - 0x64]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x50]
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x40]
sub eax, edi
cmp eax, esi
jae 0x4277c0
mov dword [ebp - 0x10], 0x23
lea ecx, [ebp - 0x54]
mov edx, edi
push esi
call fcn.00441c90
add esp, 4
mov ecx, dword [ebp - 0x54]
mov edi, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x100]
lea eax, [esi + esi]
mov dword [ebp - 0x40], ecx
lea ecx, [ecx + edi*2]
push eax
mov ebx, dword [ebp - 0xe8]
push ebx
push ecx
call fcn.0043b9a0
add esp, 0xc
mov eax, dword [ebp - 0x9c]
add edi, esi
mov dword [ebp - 0x4c], edi
test eax, eax
je 0x4277f7
add eax, eax
push 2
push eax
push ebx
call fcn.00402ca0
add esp, 0xc
cmp edi, dword [ebp - 0x50]
jne 0x427819
lea ecx, [ebp - 0x54]
mov edx, edi
mov byte [ebp - 0x56], 1
mov dword [ebp - 0x10], 0x21
call fcn.00417fc0
mov eax, dword [ebp - 0x54]
mov edi, dword [ebp - 0x4c]
jmp 0x42781c
mov eax, dword [ebp - 0x40]
mov word [eax + edi*2], 0x3d
and dword [ebp - 0x64], 0xffffff00
inc edi
mov eax, dword [ebp - 0x130]
mov esi, dword [ebp - 0x134]
mov dh, byte [ebp - 0x128]
mov dword [ebp - 0x4c], edi
xor edi, edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x40], esi
lea ecx, [esi + eax]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], ecx
jmp 0x427863
xor edi, edi
test bx, bx
je 0x427d51
mov bx, 1
test di, di
jne 0x427858
cmp esi, ecx
je 0x4278ee
mov dl, byte [esi]
movzx eax, dl
test dl, dl
js 0x42787c
inc esi
jmp 0x4278e5
movzx ecx, byte [esi + 1]
and eax, 0x1f
and ecx, 0x3f
cmp dl, 0xdf
jbe 0x4278b5
movzx edi, byte [esi + 2]
shl ecx, 6
and edi, 0x3f
or edi, ecx
cmp dl, 0xf0
jb 0x4278c2
movzx ecx, byte [esi + 3]
and eax, 7
shl edi, 6
add esi, 4
shl eax, 0x12
and ecx, 0x3f
or ecx, edi
or eax, ecx
jmp 0x4278ca
shl eax, 6
add esi, 2
or eax, ecx
mov ecx, dword [ebp - 0x24]
jmp 0x4278e5
shl eax, 0xc
add esi, 3
or eax, edi
mov ecx, dword [ebp - 0x24]
cmp eax, 0xffff
jbe 0x4278e5
and eax, 0x3ff
or eax, 0xdc00
mov edi, eax
jmp 0x42785a
xor edi, edi
mov ebx, eax
jmp 0x42785a
mov ebx, dword [ebp - 0x40]
mov eax, ebx
shr eax, 8
cmp dh, 2
je 0x428ed2
lea esi, [ebp - 0x127]
mov dword [ebp - 0xec], eax
lea ecx, [ebp - 0xe1]
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x10], 0x22
movzx eax, word [esi]
mov dl, byte [esi + 2]
mov esi, dword [ebp - 0x30]
mov word [ecx + 0xa], ax
mov byte [ecx + 0xc], dl
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xdc], esi
mov byte [ebp - 0xd8], dh
lea edx, [ebp - 0xfc]
mov dword [ebp - 0xf8], ecx
lea ecx, [ebp - 0x54]
mov word [ebp - 0xf4], 0
call fcn.004180e0
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x64]
test eax, eax
je 0x427981
push 1
push eax
push dword [ebp - 0x40]
call fcn.00402ca0
add esp, 0xc
mov esi, dword [ebp - 0x4c]
cmp esi, dword [ebp - 0x50]
jne 0x4279a4
lea ecx, [ebp - 0x54]
mov edx, esi
mov byte [ebp - 0x56], 0
mov dword [ebp - 0x10], 0x21
call fcn.00417fc0
mov esi, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x64]
lea edx, [ebp - 0x55c]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x28], edi
lea ecx, [ebp - 0x134]
mov word [eax + esi*2], 0
inc esi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x20
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x4c], esi
call fcn.004166d0
jmp 0x4275b5
mov edx, dword [ebp - 0x2c]
jmp 0x4264a5
movzx ecx, byte [ebp - 0x89]
movzx esi, word [ebp - 0x8b]
mov ebx, dword [ebp - 0x8f]
shl ecx, 0x10
mov edi, ebx
or esi, ecx
movzx ecx, al
mov eax, dword [ebp - 0xe0]
shl edi, 8
test eax, eax
je 0x427a23
add eax, eax
push 2
push eax
push dword [ebp - 0xe4]
mov dword [ebp - 0x24], ecx
call fcn.00402ca0
mov ecx, dword [ebp - 0x24]
add esp, 0xc
shld esi, ebx, 8
or edi, ecx
mov eax, dword [ebp - 0x98]
mov dword [eax], edi
mov dword [eax + 4], esi
mov dword [eax + 8], 2
mov eax, dword [ebp + 8]
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
xor ebx, ebx
test esi, esi
je 0x427a5b
add esi, esi
push 2
push esi
push edi
call fcn.00402ca0
mov eax, dword [ebp + 8]
add esp, 0xc
test bl, bl
je 0x4264b7
jmp 0x4265ca
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x427a80
push 1
push eax
push dword [ebp - 0x64]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x130]
mov esi, dword [ebp - 0xe8]
test eax, eax
je 0x427aa1
push 1
push eax
push dword [ebp - 0x134]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x9c]
or dword [ebp - 0x28], 2
mov dword [ebp - 0x30], 0x51de18
test eax, eax
je 0x428174
add eax, eax
push 2
push eax
push esi
call fcn.00402ca0
add esp, 0xc
mov dword [ebp - 0x10], 0x1f
jmp 0x428174
xor ecx, ecx
mov eax, 2
mov dword [ebp - 0x40], 0
cmp byte [esi + 0x44], 2
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], ecx
jne 0x427c7a
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x9c], 2
xor eax, eax
xor ecx, ecx
jmp 0x427e27
movzx eax, word [edi + ebx*2 - 8]
lea ecx, [eax - 0x42]
cmp ecx, 0x21
ja 0x4272d2
mov edx, dword [ebp - 0x5c]
add edx, dword [ecx*4 + 0x42990c]
jmp edx
mov edx, dword [esi + 0x38]
mov ecx, dword [esi + 0x40]
mov esi, dword [ebp - 0x2c]
xor ebx, ebx
add ecx, edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x24], ecx
jmp 0x427c9a
xor ebx, ebx
test di, di
je 0x427d2f
mov di, 1
test bx, bx
jne 0x427c8f
cmp edx, ecx
je 0x427da6
movzx eax, byte [edx]
movzx esi, al
test al, al
js 0x427cb8
inc edx
jmp 0x427d1f
movzx ecx, byte [edx + 1]
and esi, 0x1f
and ecx, 0x3f
cmp al, 0xdf
jbe 0x427cef
movzx ebx, byte [edx + 2]
shl ecx, 6
and ebx, 0x3f
or ebx, ecx
cmp al, 0xf0
jb 0x427cfc
movzx eax, byte [edx + 3]
and esi, 7
shl ebx, 6
add edx, 4
shl esi, 0x12
and eax, 0x3f
or eax, ebx
or esi, eax
jmp 0x427d04
shl esi, 6
add edx, 2
or esi, ecx
mov ecx, dword [ebp - 0x24]
jmp 0x427d1f
shl esi, 0xc
add edx, 3
or esi, ebx
mov ecx, dword [ebp - 0x24]
cmp esi, 0xffff
jbe 0x427d1f
and esi, 0x3ff
or esi, 0xdc00
mov ebx, esi
jmp 0x427d23
xor ebx, ebx
mov edi, esi
mov esi, dword [ebp - 0x2c]
test di, di
jne 0x427c9a
mov eax, dword [ebp - 0x98]
mov edi, dword [ebp - 0x34]
mov dword [eax + 4], 0x51de18
mov dword [eax], 2
mov dword [eax + 8], 2
jmp 0x428b00
mov eax, dword [ebp - 0x28]
mov esi, 2
test eax, eax
je 0x428158
mov dword [ebp - 0x30], str.nul_byte_found_in_provided_data
push 1
push eax
push dword [ebp - 0x40]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0xec]
jmp 0x428165
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x427d96
push 1
push eax
push dword [ebp - 0x38]
call fcn.00402ca0
add esp, 0xc
mov byte [ebp - 0x50], 2
mov dword [ebp - 0x4c], 0x51de3c
jmp 0x42649c
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x55c]
mov dword [ebp - 0x10], 0x24
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x558], ecx
lea ecx, [ebp - 0xe4]
mov word [ebp - 0x554], 0
call fcn.00418230
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
cmp edx, eax
jne 0x427e04
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x10], 0x25
call fcn.00417fc0
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
mov edi, dword [ebp - 0xe4]
mov esi, dword [ebp - 0x44]
mov ecx, eax
and ecx, 0xffffff00
mov word [edi + edx*2], 0
mov dword [ebp - 0x15c], edi
mov dword [ebp - 0x9c], edi
movzx eax, al
xorps xmm0, xmm0
or eax, ecx
movups xmmword [ebp - 0x134], xmm0
mov dword [ebp - 0x24], eax
push 0x529218
call dword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov eax, dword [0x5291f4]
test eax, 0x7fffffff
je 0x427e63
mov dword [ebp - 0x10], 0x26
call fcn.00442030
mov esi, dword [ebp - 0x44]
xor al, 1
jmp 0x427e65
xor eax, eax
mov ch, byte [0x52921c]
mov cl, byte [ebp + 0xc]
mov dword [ebp - 0x50], 0x529218
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x4c], al
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x10c], 2
mov dword [ebp - 0x10], 0x27
test ch, ch
mov byte [ebp - 0xe8], ch
setne dl
test cl, cl
lea ecx, [esi + 8]
mov dword [ebp - 0x54], edx
lea edx, [ebp - 0x10c]
cmovne edx, eax
cmp dword [esi], 6
cmovne edx, esi
cmp dword [esi + 8], 6
cmove ecx, eax
cmp dword [esi + 0x10], 6
mov dword [ebp - 0x94], ecx
lea ecx, [esi + 0x10]
cmove ecx, eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x100], ecx
lea ecx, [ebp - 0x55c]
push eax
push 0xfffffffffffffff6
call fcn.00429a50
add esp, 8
movzx eax, byte [ebp - 0x55c]
cmp al, 4
jne 0x428074
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x94]
lea eax, [ebp - 0x88]
mov dword [ebp - 0x10], 0x28
mov dword [ebp - 0xec], ecx
lea ecx, [ebp - 0x55c]
push eax
push 0xfffffffffffffff5
call fcn.00429a50
add esp, 8
movzx eax, byte [ebp - 0x55c]
cmp al, 4
jne 0x4280b3
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x100]
lea eax, [ebp - 0x80]
mov dword [ebp - 0x10], 0x29
mov dword [ebp - 0x94], ecx
lea ecx, [ebp - 0x55c]
push eax
push 0xfffffffffffffff4
call fcn.00429a50
add esp, 8
movzx eax, byte [ebp - 0x55c]
mov edx, dword [ebp - 0x44]
mov ebx, dword [ebp - 0x110]
cmp al, 4
jne 0x42822c
mov ecx, dword [ebp - 0x558]
cmp dword [ebp - 0xec], 0
xorps xmm0, xmm0
mov dword [ebp - 0xa4], 0
movups xmmword [ebp - 0xb4], xmm0
movups xmmword [ebp - 0xc4], xmm0
movups xmmword [ebp - 0xd4], xmm0
movups xmmword [ebp - 0xe4], xmm0
jne 0x427fda
cmp dword [ebp - 0x94], 0
jne 0x427fda
test ecx, ecx
je 0x428002
mov eax, dword [ebp - 0xec]
mov esi, dword [ebp - 0x94]
mov dword [ebp - 0xb8], 0x100
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xa4], ecx
mov eax, dword [edx + 0x60]
mov dword [ebp - 0x100], ecx
test eax, eax
mov dword [ebp - 0x158], eax
je 0x42883f
add edx, 0x58
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0xe4], 0x48
mov dword [ebp - 0x10], 0x2a
call fcn.0042a3e0
cmp dword [ebp - 0xfc], 0
mov edi, dword [ebp - 0xf8]
mov esi, dword [ebp - 0xf4]
mov ebx, dword [ebp - 0x110]
lea ecx, [ebp - 0x55c]
je 0x42887e
mov eax, dword [ebp - 0x98]
mov dword [eax], edi
mov dword [eax + 4], esi
mov dword [eax + 8], 2
jmp 0x428a1e
movzx ecx, byte [ebp - 0x559]
mov edx, dword [ebp - 0x98]
movzx edi, word [ebp - 0x55b]
mov esi, dword [ebp - 0x558]
movzx ebx, byte [ebp - 0xe8]
mov word [edx + 1], di
mov byte [edx + 3], cl
mov byte [edx], al
mov dword [edx + 4], esi
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
mov dword [edx + 8], 2
jmp 0x428a4f
movzx ecx, byte [ebp - 0x559]
mov edx, dword [ebp - 0x98]
movzx edi, word [ebp - 0x55b]
mov esi, dword [ebp - 0x558]
movzx ebx, byte [ebp - 0xe8]
mov word [edx + 1], di
mov byte [edx + 3], cl
mov byte [edx], al
mov dword [edx + 4], esi
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
mov dword [edx + 8], 2
jmp 0x428a43
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x30], 0x51de18
shl eax, 8
mov dword [ebp - 0x10], 0x1f
or eax, esi
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x10], 0x1f
call fcn.00413da0
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x4281a1
add eax, eax
push 2
push eax
push dword [ebp - 0x54]
call fcn.00402ca0
add esp, 0xc
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x98]
mov edx, dword [ebp - 0x30]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], 2
jmp 0x428b17
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x10], 0x1f
call fcn.00413da0
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
cmp edx, dword [ebp - 0x50]
jne 0x4281f7
lea ecx, [ebp - 0x54]
mov byte [ebp - 0x47], 0
call fcn.00417fc0
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x4c]
mov word [eax + edx*2], 0
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
test eax, eax
jne 0x427ae2
mov esi, dword [ebp - 0x2c]
inc edx
mov dword [ebp - 0x30], edx
jmp 0x4281aa
movzx ecx, byte [ebp - 0x559]
mov edx, dword [ebp - 0x98]
movzx edi, word [ebp - 0x55b]
mov esi, dword [ebp - 0x558]
mov byte [edx + 3], cl
mov word [edx + 1], di
mov byte [edx], al
mov dword [edx + 4], esi
mov dword [edx + 8], 2
jmp 0x428a2a
mov eax, dword [ebp - 0x558]
mov ebx, dword [ebp - 0x554]
jmp 0x42704a
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x44
jmp 0x4288a2
mov eax, dword [ebp - 0x558]
mov ebx, dword [ebp - 0x554]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x4272b6
push 1
push eax
push dword [ebp - 0x38]
call fcn.00402ca0
add esp, 0xc
jmp 0x4272b6
or ebx, 0x80000
lea eax, [ebp - 0xe4]
push 0x44
push eax
push ecx
call fcn.0043b9a0
lea edx, [ebp - 0x55c]
add esp, 0xc
mov dword [ebp - 0x518], edi
mov ecx, dword [ebp - 0x140]
lea eax, [ebp - 0x134]
push eax
push edx
push dword [ebp - 0x15c]
push dword [ebp - 0x40]
push ebx
push 1
push 0
push 0
mov dword [ebp - 0x44], ecx
push ecx
push dword [ebp - 0x3c]
call dword [sym.imp.kernel32.dll_CreateProcessW]
test eax, eax
je 0x4289df
mov eax, dword [ebp - 0x98]
movsd xmm1, qword [ebp - 0x88]
cmp dword [ebp - 0x158], 0
movsd xmm0, qword [ebp - 0x80]
movsd xmm2, qword [ebp - 0x90]
movsd qword [eax + 0x10], xmm1
movsd xmm1, qword [ebp - 0x134]
movsd qword [eax + 0x18], xmm0
movsd qword [eax + 8], xmm2
movsd qword [eax], xmm1
je 0x428924
mov ecx, edi
mov edx, esi
call fcn.004147f0
mov dword [ebp - 0x10], 0x26
mov esi, dword [sym.imp.kernel32.dll_CloseHandle]
push dword [ebp - 0x100]
call esi
push dword [ebp - 0x94]
call esi
push dword [ebp - 0xec]
call esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x10], 0x26
call fcn.00413fc0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x42896b
add eax, eax
push 2
push eax
push dword [ebp - 0x9c]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x34]
test eax, eax
je 0x428985
add eax, eax
push 2
push eax
push dword [ebp - 0x30]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x42899f
add eax, eax
push 2
push eax
push dword [ebp - 0x44]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x4289b6
add eax, eax
push 2
push eax
push dword [ebp - 0x3c]
call fcn.00402ca0
add esp, 0xc
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x38]
test ecx, ecx
sete al
or dl, al
cmp dl, 1
je 0x4265c7
add ecx, ecx
push 2
push ecx
push esi
call fcn.00402ca0
add esp, 0xc
jmp 0x4265c7
call dword [sym.imp.kernel32.dll_GetLastError]
movzx ecx, word [ebp - 0xfc]
mov edx, dword [ebp - 0x98]
cmp dword [ebp - 0x158], 0
mov word [edx + 1], cx
mov ch, byte [ebp - 0xfa]
mov byte [edx + 3], ch
mov byte [edx], 0
mov dword [edx + 4], eax
mov dword [edx + 8], 2
je 0x428a1e
mov ecx, edi
mov edx, esi
call fcn.004147f0
push dword [ebp - 0x100]
call dword [sym.imp.kernel32.dll_CloseHandle]
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
movzx ebx, byte [ebp - 0xe8]
push dword [ebp - 0x94]
call dword [sym.imp.kernel32.dll_CloseHandle]
push dword [ebp - 0xec]
call dword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [ebp - 0x90], 0
je 0x428a64
push dword [ebp - 0x8c]
call dword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [ebp - 0x88], 0
je 0x428a79
push dword [ebp - 0x84]
call dword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [ebp - 0x80], 0
je 0x428a88
push dword [ebp - 0x7c]
call dword [sym.imp.kernel32.dll_CloseHandle]
test bl, bl
je 0x428aac
cmp byte [ebp - 0x64], 0
jne 0x428adb
mov eax, dword [0x5291f4]
test eax, 0x7fffffff
je 0x428adb
mov dword [ebp - 0x10], 0x26
call fcn.00442030
jmp 0x428aca
cmp byte [ebp - 0x64], 0
jne 0x428adb
mov eax, dword [0x5291f4]
test eax, 0x7fffffff
je 0x428adb
mov dword [ebp - 0x10], 0x26
call fcn.00442030
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
test al, al
jne 0x428adb
mov byte [0x52921c], 1
push 0x529218
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x428b00
add eax, eax
push 2
push eax
push dword [ebp - 0x9c]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x428b17
add eax, eax
push 2
push eax
push dword [ebp - 0x30]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x428b34
add eax, eax
push 2
push eax
push dword [ebp - 0x140]
call fcn.00402ca0
add esp, 0xc
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x428b4b
add eax, eax
push 2
push eax
push dword [ebp - 0x3c]
call fcn.00402ca0
add esp, 0xc
cmp byte [ebp - 0x38], 0
mov eax, dword [ebp + 8]
mov bl, 1
jne 0x4265ca
jmp 0x427a46
mov ecx, dword [ebp - 0x28]
movzx esi, bl
mov dword [ebp - 0x30], ecx
jmp 0x428165
call dword [sym.imp.kernel32.dll_GetLastError]
mov byte [ebp - 0x90], 0
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0xe4], 0x51ddb8
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0x10], 0x2c
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x134]
mov dword [ebp - 0x130], 0x419e10
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], 1
push 0x51dde8
lea eax, [ebp - 0xe4]
push eax
call fcn.00442850
add esp, 8
jmp 0x429209
call fcn.00434ef0
jmp 0x429209
mov dword [ebp - 0x10], 4
call fcn.00434ef0
jmp 0x429209
mov dword [ebp - 0x10], 4
call fcn.00434ef0
jmp 0x429209
mov byte [ebp - 0x5d], 1
mov dword [ebp - 0x10], 2
push ebx
push 1
call fcn.00442780
add esp, 8
jmp 0x429209
push esi
push 1
call fcn.00442780
add esp, 8
jmp 0x429209
mov byte [ebp - 0x5d], 1
mov dword [ebp - 0x10], 2
call fcn.00434ef0
jmp 0x429209
mov dword [ebp - 0x10], 4
push esi
push 2
call fcn.00442780
add esp, 8
jmp 0x429209
mov dword [ebp - 0x10], 3
push 0x51c12c
push 0x21
push str.assertion_failed:_self.height___0
call fcn.00442910
add esp, 0xc
jmp 0x429209
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
push 4
push 1
call fcn.00442780
add esp, 8
jmp 0x429209
mov dword [ebp - 0x10], 0xe
push 0x51e2f8
push 0x28
push 0x51c258
call fcn.00442910
add esp, 0xc
jmp 0x429209
mov dword [ebp - 0x10], 0xc
push 0x51e2f8
push 0x28
push 0x51c258
call fcn.00442910
add esp, 0xc
jmp 0x429209
call dword [sym.imp.kernel32.dll_GetLastError]
mov byte [ebp - 0xe4], 0
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0xe4]
mov dword [ebp - str.failure_getting_env_string_from_OS:_L], 0x51dc70
mov dword [ebp - 0x558], 1
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x8c], 0x419e10
mov dword [ebp - 0x554], eax
mov dword [ebp - 0x550], 1
lea eax, [ebp - 0x55c]
push 0x51dc78
push eax
call fcn.00442850
add esp, 8
jmp 0x429209
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
call fcn.00434ef0
jmp 0x429209
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
push ebx
push 1
call fcn.00442780
add esp, 8
jmp 0x429209
push 0x51e2e8
push eax
push esi
call fcn.00442ca0
add esp, 0xc
jmp 0x429209
mov dword [ebp - 0x10], 0x15
push 0x51bcf8
push edi
push ebx
call fcn.00442c30
add esp, 0xc
jmp 0x429209
push 0x51e2e8
push eax
push esi
call fcn.00442ca0
add esp, 0xc
jmp 0x429209
ud2