Function at 0x469370
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x550
call 0x469381
pop eax
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x471de0
mov esi, edx
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x5c], eax
mov eax, dword fs:[0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov dword fs:[0], eax
movzx eax, byte [edx + 0x34]
mov edi, dword [edx + 0x30]
test al, al
jne 0x4693d8
test edi, edi
jne 0x4693d8
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x38], 0
jmp 0x469d19
test al, al
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x104], 0
jne 0x469533
call dword [sym.imp.kernel32.dll_GetEnvironmentStringsW]
test eax, eax
je 0x46c98e
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0xf8], eax
nop word cs:[eax + eax]
nop dword [eax + eax]
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x10], 5
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00466d90
add esp, 8
cmp byte [ebp - 0x550], 2
je 0x469521
mov eax, dword [ebp - 0x55c]
mov ecx, dword [ebp - 0x554]
lea edx, [ebp - 0x90]
mov dword [ebp - 0x10], 7
add ecx, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x134]
mov word [ebp - 0x88], 0
call fcn.00459f00
movsd xmm0, qword [ebp - 0x55c]
movsd xmm1, qword [ebp - 0x554]
lea eax, [ebp - 0xd8]
mov byte [ebp - 0x9d], 0
mov dword [ebp - 0x10], 6
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x10c]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [ebp - 0x12c]
movsd xmm1, qword [ebp - 0x134]
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0x54c]
movsd qword [ebp - 0xe4], xmm1
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.00456e20
add esp, 8
cmp byte [ebp - 0x84], 2
je 0x469420
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x469420
push 1
push eax
push dword [ebp - 0x90]
call fcn.00421c20
add esp, 0xc
jmp 0x469420
push dword [ebp - 0xfc]
call dword [sym.imp.kernel32.dll_FreeEnvironmentStringsW]
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x24]
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x2c]
xor edx, edx
test eax, eax
setne dl
cmove edi, eax
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x10], 1
nop dword [eax + eax]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x10], 1
call fcn.00454850
mov dword [ebp - 0x24], edx
mov edi, eax
test eax, eax
je 0x469b2a
mov eax, dword [ebp - 0x24]
cmp byte [eax + 0xc], 2
jne 0x469710
mov edx, dword [ebp - 0x10c]
test edx, edx
je 0x469590
mov eax, dword [ebp - 0x108]
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x28], edx
push dword [edi + 8]
push dword [edi]
mov dword [ebp - 0x24], eax
push eax
call fcn.00459660
add esp, 0xc
cmp dword [ebp - 0xfc], 0
jne 0x469590
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xf0]
mov byte [ebp - 0x140], 0
test ecx, ecx
jne 0x469657
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x140]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], edx
lea ecx, [ebp - 0x55c]
lea edx, [ebp - 0xe4]
push eax
call fcn.00459140
add esp, 4
jmp 0x4699f5
movzx edx, word [eax + 0x1ea]
mov eax, dword [eax + edx*4 + 0x1ec]
dec ecx
jne 0x469650
movzx ecx, word [eax + 0x1ea]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x140]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x10], 1
lea edx, [ebp - 0x54]
dec ecx
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x55c]
push eax
call fcn.00459140
add esp, 4
movsd xmm2, qword [ebp - 0x544]
movsd xmm1, qword [ebp - 0x54c]
mov eax, dword [ebp - 0x534]
movsd xmm0, qword [ebp - 0x53c]
mov edx, dword [ebp - 0x530]
movsd qword [ebp - 0x78], xmm2
movsd qword [ebp - 0x80], xmm1
movsd xmm2, qword [ebp - 0x55c]
movsd xmm1, qword [ebp - 0x554]
mov dword [ebp - 0x68], eax
movsd qword [ebp - 0x70], xmm0
mov eax, dword [ebp - 0x528]
movsd qword [ebp - 0x88], xmm1
movsd qword [ebp - 0x90], xmm2
movzx ecx, word [edx + 0x1ea]
cmp eax, ecx
jae 0x4698b4
mov ecx, edx
jmp 0x4698e3
mov esi, dword [edi + 0x14]
mov eax, dword [edi + 0xc]
test esi, esi
je 0x469743
mov dword [ebp - 0x28], eax
js 0x46c88f
movzx eax, byte [0x599449]
push 1
push esi
call fcn.00421c10
add esp, 8
mov ebx, eax
test eax, eax
mov eax, dword [ebp - 0x28]
jne 0x469748
jmp 0x46c8d6
mov ebx, 1
push esi
push eax
push ebx
call fcn.00517140
add esp, 0xc
movzx eax, byte [edi + 0x18]
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0xdc], esi
mov byte [ebp - 0xd8], al
xor eax, eax
mov ebx, dword [edi + 8]
mov ecx, dword [edi]
mov edi, 2
test ebx, ebx
je 0x4697bc
cmp ebx, 0x3fffffff
ja 0x46c8aa
lea esi, [ebx + ebx]
test esi, esi
js 0x46c899
je 0x4697bc
mov dword [ebp - 0x28], ecx
movzx eax, byte [0x599449]
push 2
push esi
call fcn.00421c10
add esp, 8
test eax, eax
je 0x46c8fb
mov ecx, dword [ebp - 0x28]
mov edi, eax
mov eax, esi
push eax
push ecx
push edi
call fcn.00517140
add esp, 0xc
movsd xmm0, qword [ebp - 0xe4]
movsd xmm1, qword [ebp - 0xdc]
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x550]
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
mov dword [ebp - 0x55c], edi
mov dword [ebp - 0x558], ebx
mov dword [ebp - 0x554], ebx
mov ebx, dword [ecx + 8]
mov esi, dword [ecx]
test ebx, ebx
je 0x469827
js 0x46c8e6
movzx eax, byte [0x599449]
push 1
push ebx
call fcn.00421c10
add esp, 8
mov edi, eax
test eax, eax
jne 0x46982c
jmp 0x46c8bb
mov edi, 1
push ebx
push esi
push edi
call fcn.00517140
add esp, 0xc
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x10c]
movzx eax, byte [eax + 0xc]
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov byte [ebp - 0x5d], 0
mov dword [ebp - 0x10], 2
mov byte [ebp - 0xd8], al
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00456e20
add esp, 8
cmp byte [ebp - 0x84], 2
je 0x469590
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x469590
push 1
push eax
push dword [ebp - 0x90]
call fcn.00421c20
add esp, 0xc
jmp 0x469590
mov esi, dword [ebp - 0x52c]
nop word [eax + eax]
mov ecx, dword [edx + 0xb0]
test ecx, ecx
je 0x4698df
movzx eax, word [edx + 0x1e8]
inc esi
mov edx, ecx
cmp ax, word [ecx + 0x1ea]
jae 0x4698c0
jmp 0x4698e3
xor ecx, ecx
mov eax, esi
lea edx, [eax + eax*8]
lea edx, [edx + edx*2]
add edx, eax
shl eax, 4
mov esi, dword [ecx + edx + 0xcc]
mov dword [ebp - 0xcc], esi
mov esi, dword [ebp - 0x78]
movsd xmm0, qword [ecx + edx + 0xc4]
movsd qword [ebp - 0xd4], xmm0
movsd xmm0, qword [ecx + edx + 0xb4]
movsd xmm1, qword [ecx + edx + 0xbc]
movsd qword [ebp - 0xdc], xmm1
movsd qword [ebp - 0xe4], xmm0
mov dword [ecx + edx + 0xcc], esi
lea esi, [ebp - 0x74]
movsd xmm0, qword [ebp - 0x80]
movsd qword [ecx + edx + 0xc4], xmm0
movsd xmm0, qword [ebp - 0x90]
movsd xmm1, qword [ebp - 0x88]
movsd qword [ecx + edx + 0xbc], xmm1
movsd qword [ecx + edx + 0xb4], xmm0
lea edx, [ebp - 0xc8]
movsd xmm0, qword [ecx + eax]
movsd xmm1, qword [ecx + eax + 8]
movsd qword [edx + 8], xmm1
movsd qword [edx], xmm0
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
movsd qword [ecx + eax], xmm0
movsd qword [ecx + eax + 8], xmm1
movsd xmm2, qword [ebp - 0xcc]
movsd xmm1, qword [ebp - 0xd4]
mov eax, dword [ebp - 0xbc]
movsd xmm0, qword [ebp - 0xc4]
movsd qword [ebp - 0x544], xmm2
movsd qword [ebp - 0x54c], xmm1
movsd xmm2, qword [ebp - 0xe4]
movsd xmm1, qword [ebp - 0xdc]
mov dword [ebp - 0x534], eax
movsd qword [ebp - 0x53c], xmm0
movsd qword [ebp - 0x554], xmm1
movsd qword [ebp - 0x55c], xmm2
movsd xmm2, qword [ebp - 0x544]
movsd xmm1, qword [ebp - 0x54c]
mov eax, dword [ebp - 0x534]
movsd xmm0, qword [ebp - 0x53c]
dec dword [ebp - 0x104]
cmp byte [ebp - 0x140], 0
movsd qword [ebp - 0xcc], xmm2
movsd qword [ebp - 0xd4], xmm1
movsd xmm2, qword [ebp - 0x55c]
movsd xmm1, qword [ebp - 0x554]
mov dword [ebp - 0xbc], eax
movsd qword [ebp - 0xc4], xmm0
movsd qword [ebp - 0xdc], xmm1
movsd qword [ebp - 0xe4], xmm2
je 0x469a9b
mov edx, dword [ebp - 0x24]
test edx, edx
je 0x46c912
mov ecx, dword [ebp - 0x28]
dec edx
mov eax, dword [ecx + 0x1ec]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], edx
mov dword [eax + 0xb0], 0
push 4
push 0x21c
push ecx
call fcn.00421c20
add esp, 0xc
cmp byte [ebp - 0xcc], 2
je 0x469590
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xe4]
mov esi, dword [ebp - 0xe0]
mov edi, dword [ebp - 0xc4]
movzx ebx, byte [ebp - 0xbc]
test eax, eax
mov dword [ebp - 0x24], ecx
je 0x469af4
push 1
push eax
push dword [ebp - 0xd8]
mov byte [ebp - 0x28], bl
mov ebx, edi
mov edi, edx
call fcn.00421c20
mov edx, edi
mov edi, ebx
movzx ebx, byte [ebp - 0x28]
add esp, 0xc
test esi, esi
je 0x469b06
add esi, esi
push 2
push esi
push edx
call fcn.00421c20
add esp, 0xc
cmp bl, 2
je 0x469590
test edi, edi
je 0x469590
push 1
push edi
push dword [ebp - 0x24]
call fcn.00421c20
add esp, 0xc
jmp 0x469581
movsd xmm0, qword [ebp - 0x10c]
mov eax, dword [ebp - 0x104]
movsd qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x154], 1
movzx eax, byte [0x599449]
push 1
push 4
call fcn.00421c10
add esp, 8
test eax, eax
je 0x46c932
mov ecx, eax
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x90]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], 4
mov dword [ebp - 0xdc], 4
mov dword [eax], 0x48544150
mov byte [ebp - 0xd8], 0
mov dword [ebp - 0x10], 0x16
add ecx, 4
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x134]
mov word [ebp - 0x88], 0
call fcn.00459f00
movsd xmm1, qword [ebp - 0xdc]
movsd xmm0, qword [ebp - 0xe4]
mov eax, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x150]
movsd qword [ebp - 0x548], xmm1
movsd xmm1, qword [ebp - 0x134]
movsd qword [ebp - 0x550], xmm0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x554], eax
test edx, edx
movsd qword [ebp - 0x55c], xmm1
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x28], eax
je 0x469cd7
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], eax
movzx esi, word [edx + 0x1ea]
lea ecx, [edx + 0xb4]
lea edi, [edx - 8]
mov dword [ebp - 0x2c], edx
lea eax, [esi + esi*8]
mov dword [ebp - 0x3c], esi
lea ebx, [eax + eax*2]
add ebx, esi
mov esi, 0xffffffff
nop dword [eax]
test ebx, ebx
je 0x469c90
lea eax, [ecx + 0x1c]
mov dword [ebp - 0x24], eax
push 1
push dword [ecx + 8]
push dword [ecx]
push dword [ebp - 0x30]
push dword [ebp - 0x28]
call dword [sym.imp.kernel32.dll_CompareStringOrdinal]
mov ecx, dword [ebp - 0x24]
add ebx, 0xffffffe4
add edi, 0x10
inc esi
cmp eax, 3
je 0x469c50
cmp eax, 1
jne 0x469cb1
jmp 0x469c93
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
sub eax, 1
jb 0x46a1ab
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov edx, dword [edx + esi*4 + 0x1ec]
jmp 0x469c2a
cmp eax, 2
jne 0x46c812
cmp dword [ebp - 0x2c], 0
mov esi, dword [ebp - 0x44]
je 0x469ce1
mov eax, dword [edi - 8]
mov edi, dword [edi]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x54c]
test eax, eax
jne 0x469ceb
jmp 0x469cfc
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x54c]
test eax, eax
je 0x469cfc
push 1
push eax
push dword [ebp - 0x550]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x2c], edi
test eax, eax
je 0x469d19
add eax, eax
push 2
push eax
push dword [ebp - 0x28]
call fcn.00421c20
add esp, 0xc
mov edi, dword [esi + 0x20]
test edi, edi
je 0x469d81
mov edx, dword [esi + 0x18]
mov eax, 0x467a20
cmp edi, 4
jb 0x469d57
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x10], 9
bswap eax
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
mov eax, 0x467a20
adc ecx, 0xffffffff
mov ecx, 0x467a40
cmove eax, ecx
movzx ecx, byte [edi + edx - 1]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], edi
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
mov dword [ebp - 0x30], ecx
push ecx
call eax
add esp, 4
mov ebx, dword [ebp - 0x24]
test al, al
je 0x469e0b
mov byte [ebp - 0x50], 2
mov dword [ebp - 0x4c], 0x57d9f8
mov edx, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x98]
mov dword [ecx], edx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], 2
cmp dword [ebp - 0x154], 0
je 0x469eba
mov ecx, dword [ebp - 0x150]
test ecx, ecx
je 0x469e8f
mov edx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x554], ecx
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x550], edx
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], ecx
mov ecx, 1
mov dword [ebp - 0x540], edx
jmp 0x469e93
mov edi, dword [ebp - 0x28]
xor eax, eax
cmp ebx, 3
mov ecx, 0
jbe 0x469ede
movzx ecx, byte [ebx + edi - 4]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x2e
jne 0x469edc
movzx ecx, byte [edi + ebx - 3]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
jne 0x469edc
movzx ecx, byte [edi + ebx - 2]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x78
jne 0x469edc
mov edx, dword [ebp - 0x30]
mov ecx, edx
add cl, 0xbf
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, dl
cmp cl, 0x65
sete cl
jmp 0x469ede
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x54c], ecx
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x53c], eax
mov dword [ebp - 0x10], 0
call fcn.004558a0
mov eax, dword [ebp + 8]
cmp dword [eax], 4
jb 0x469ec8
push dword [eax + 4]
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
add esp, 0x550
pop esi
pop edi
pop ebx
pop ebp
ret
xor ecx, ecx
lea edx, [edi + ebx]
mov dword [ebp - 0x30], edx
nop word cs:[eax + eax]
nop
cmp ebx, eax
je 0x469f6a
movzx edx, byte [edi + eax]
cmp edx, 0x2f
je 0x469f03
inc eax
cmp edx, 0x5c
jne 0x469ef0
test cl, cl
je 0x46a024
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
lea ecx, [ebp - 0x55c]
mov edx, edi
push ebx
call fcn.0046f7f0
add esp, 4
mov edx, dword [ebp - 0x55c]
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x554]
test edx, edx
je 0x46a132
mov dword [ebp - 0x55c], edx
mov dword [ebp - 0x554], ecx
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x55c]
mov dword [ebp - 0x558], eax
mov byte [ebp - 0x1d], 1
call fcn.00465540
jmp 0x46a13f
xor esi, esi
mov eax, edi
jmp 0x469f7b
xor esi, esi
test dx, dx
je 0x46a11f
mov dx, 1
test si, si
jne 0x469f70
cmp eax, dword [ebp - 0x30]
je 0x46a182
movzx ebx, byte [eax]
movzx ecx, bl
test bl, bl
js 0x469f9d
mov ebx, dword [ebp - 0x24]
inc eax
jmp 0x469ff2
movzx edi, byte [eax + 1]
and ecx, 0x1f
and edi, 0x3f
cmp bl, 0xdf
jbe 0x469fe4
movzx esi, byte [eax + 2]
shl edi, 6
and esi, 0x3f
or esi, edi
cmp bl, 0xf0
jb 0x469ffb
movzx edi, byte [eax + 3]
and ecx, 7
shl esi, 6
add eax, 4
shl ecx, 0x12
and edi, 0x3f
or edi, esi
or ecx, edi
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
cmp ecx, 0xffff
jbe 0x469ff2
jmp 0x46a011
shl ecx, 6
mov ebx, dword [ebp - 0x24]
add eax, 2
or ecx, edi
mov edi, dword [ebp - 0x28]
xor esi, esi
mov edx, ecx
jmp 0x469f72
shl ecx, 0xc
add eax, 3
or ecx, esi
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
cmp ecx, 0xffff
jbe 0x469ff2
and ecx, 0x3ff
or ecx, 0xdc00
mov esi, ecx
jmp 0x469f72
test ebx, ebx
js 0x46ca0b
movzx eax, byte [0x599449]
push 1
push ebx
call fcn.00421c10
add esp, 8
test eax, eax
je 0x46ca20
mov esi, eax
push ebx
push edi
push eax
call fcn.00517140
add esp, 0xc
mov dword [ebp - 0xe4], esi
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov byte [ebp - 0xd8], 0
mov dword [ebp - 0x10], 0x14
lea eax, [ebp - 0x55c]
movsd xmm0, qword [ebp - 0xdc]
movsd xmm1, qword [ebp - 0xe4]
movsd qword [ebp - 0x554], xmm0
movsd qword [ebp - 0x55c], xmm1
push 4
push 0x57d9b5
push eax
call fcn.004673e0
add esp, 0xc
movsd xmm0, qword [ebp - 0x55c]
movsd xmm1, qword [ebp - 0x554]
mov byte [ebp - 0x9e], 1
mov dword [ebp - 0x10], 0x13
lea ecx, [ebp - 0x90]
movsd qword [ebp - 0xe4], xmm0
movsd qword [ebp - 0xdc], xmm1
mov eax, dword [ebp - 0xdc]
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x2c], eax
push eax
call fcn.0046d3f0
add esp, 4
cmp dword [ebp - 0x90], 0
mov esi, dword [ebp - 0x44]
je 0x46a147
mov eax, dword [ebp - 0x88]
movsd xmm0, qword [ebp - 0x90]
mov dword [ebp - 0x4c], eax
movsd qword [ebp - 0x54], xmm0
jmp 0x46ab77
mov dword [ebp - 0x50], 2
mov dword [ebp - 0x4c], 0x57d9a8
jmp 0x469d8c
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x54], 0
mov esi, dword [ebp - 0x44]
jmp 0x46ab8f
mov dword [ebp - 0x10], 0x15
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
call fcn.0045f9a0
add esp, 8
test eax, eax
je 0x46a227
mov edi, edx
cmp edx, 2
jne 0x46a1c1
movzx ecx, word [eax]
cmp ecx, 0x2e2e
jne 0x46a1c1
mov ecx, 2
mov ebx, eax
jmp 0x46a201
cmp ebx, 7
ja 0x46a20b
xor eax, eax
nop dword [eax]
cmp byte [edi + eax], 0x2e
je 0x46a23b
inc eax
cmp ebx, eax
jne 0x46a190
mov dword [ebp - 0x40], 0
jmp 0x46a242
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x54c]
test eax, eax
jne 0x469ceb
jmp 0x469cfc
xor esi, esi
mov ebx, eax
nop word cs:[eax + eax]
nop
cmp edi, esi
je 0x46a22f
cmp byte [ebx + edi - 1], 0x2e
lea ecx, [ebx - 1]
mov edx, esi
lea esi, [esi + 1]
mov ebx, ecx
jne 0x46a1d0
mov ebx, edi
sub ebx, esi
mov dword [ebp - 0x34], ebx
inc ebx
cmp ebx, edi
ja 0x46ca6f
mov ebx, eax
cmp edi, esi
jne 0x46aae3
mov ecx, edi
mov esi, dword [ebp - 0x2c]
xor eax, eax
jmp 0x46aaed
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
push ebx
push edi
push 0x2e
call fcn.0047ff90
add esp, 0xc
mov dword [ebp - 0x40], eax
jmp 0x46a242
mov esi, dword [ebp - 0x2c]
jmp 0x46ab13
mov esi, dword [ebp - 0x2c]
mov edx, edi
xor ebx, ebx
jmp 0x46aaed
mov dword [ebp - 0x40], 1
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 9
test eax, eax
je 0x46a3cf
add ecx, eax
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x8c], ecx
mov word [ebp - 0x88], 0
mov byte [ebp - 0x84], 1
lea ecx, [ebp - 0x55c]
push eax
push ecx
call fcn.00466f60
add esp, 8
jmp 0x46a2ba
lea eax, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00466f60
add esp, 8
movzx eax, byte [ebp - 0x550]
cmp al, 2
je 0x46a3cf
mov esi, dword [ebp - 0x554]
mov ecx, dword [ebp - 0x55c]
mov edx, dword [ebp - 0x558]
mov ebx, dword [ebp - 0x24]
test esi, esi
jne 0x46a2f4
test edx, edx
je 0x46a2a0
push 1
push edx
push ecx
call fcn.00421c20
add esp, 0xc
jmp 0x46a2a0
lea edi, [ebp - 0x54f]
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xd7]
mov dword [ebp - 0x10], 0x12
movzx edi, word [edi]
mov word [ecx], di
lea edi, [ebp - 0x54f]
mov ah, byte [edi + 2]
mov edi, dword [ebp - 0x2c]
mov byte [ecx + 2], ah
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], esi
mov byte [ebp - 0xd8], al
push ebx
push dword [ebp - 0x28]
lea eax, [ebp - 0xe4]
push eax
call fcn.0045e930
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x46a366
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0xe4]
push eax
call fcn.0045f4e0
add esp, 0xc
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x2c], edx
push dword [ebp - 0xdc]
call fcn.0046d3f0
add esp, 4
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x46a39b
push 1
push eax
push dword [ebp - 0x2c]
call fcn.00421c20
add esp, 0xc
mov edi, dword [ebp - 0x55c]
test edi, edi
jne 0x46bb4e
lea eax, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00466f60
add esp, 8
jmp 0x46a2ba
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
call fcn.004671c0
cmp byte [ebp - 0x84], 2
jne 0x46a3fb
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
call fcn.00456460
jmp 0x46a501
movsd xmm0, qword [ebp - 0x90]
movsd xmm1, qword [ebp - 0x88]
mov byte [ebp - 0x9f], 1
mov dword [ebp - 0x10], 0x10
movsd qword [ebp - 0xe4], xmm0
movsd qword [ebp - 0xdc], xmm1
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x2c], ecx
push ecx
push eax
call fcn.0045f860
add esp, 8
test eax, eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
je 0x46a457
cmp dword [ebp - 0x2c], edx
jb 0x46a457
mov dword [ebp - 0xdc], edx
movsd xmm0, qword [ebp - 0xe4]
movsd xmm1, qword [ebp - 0xdc]
mov dword [ebp - 0x10], 0x11
lea edx, [ebp - 0x55c]
movsd qword [ebp - 0x554], xmm1
movsd qword [ebp - 0x55c], xmm0
push ecx
push eax
push edx
call fcn.0045e930
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x46a4ab
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0x55c]
push eax
call fcn.0045f4e0
add esp, 0xc
mov edx, dword [ebp - 0x55c]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x2c], edx
push dword [ebp - 0x554]
call fcn.0046d3f0
add esp, 4
mov eax, dword [ebp - 0x558]
test eax, eax
je 0x46a4e0
push 1
push eax
push dword [ebp - 0x2c]
call fcn.00421c20
add esp, 0xc
mov edi, dword [ebp - 0x134]
mov esi, dword [ebp - 0x44]
test edi, edi
je 0x46a501
mov eax, dword [ebp - 0x130]
mov ebx, dword [ebp - 0x12c]
mov dword [ebp - 0x2c], eax
jmp 0x46aba6
mov esi, 0x200
mov dword [ebp - 0xfc], 2
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x34], 0
cmp esi, 0x201
jb 0x46a55e
jmp 0x46a570
jbe 0x46a610
cmp esi, 0x201
jae 0x46a570
mov dword [ebp - 0x38], 0x200
lea ebx, [ebp - 0x55c]
mov edi, esi
jmp 0x46a5b7
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
sub esi, edi
sub eax, edi
cmp eax, esi
jae 0x46a5a5
mov dword [ebp - 0x10], 0xe
lea ecx, [ebp - 0xfc]
mov edx, edi
push esi
call fcn.0051e200
add esp, 4
mov eax, dword [ebp - 0xfc]
mov edi, dword [ebp - 0xf8]
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x2c], edi
push 0
call dword [sym.imp.kernel32.dll_SetLastError]
push edi
push ebx
call dword [sym.imp.kernel32.dll_GetSystemDirectoryW]
mov esi, eax
test eax, eax
jne 0x46a5db
call dword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x46a6ca
cmp esi, edi
jne 0x46a550
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x46c94e
lea esi, [edi + edi]
test edi, edi
mov eax, 0xffffffff
cmovs esi, eax
cmp esi, 0x201
jae 0x46a570
jmp 0x46a55e
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xe
cmp esi, eax
ja 0x46ca5b
lea eax, [ebp - 0xe4]
push esi
push ebx
push eax
call fcn.0045d780
add esp, 0xc
mov dword [ebp - 0x10], 0xf
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0xe4]
push eax
call fcn.0045e930
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x46a66b
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0xe4]
push eax
call fcn.0045f4e0
add esp, 0xc
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x34], edx
push dword [ebp - 0xdc]
call fcn.0046d3f0
add esp, 4
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x46a6a0
push 1
push eax
push dword [ebp - 0x34]
call fcn.00421c20
add esp, 0xc
movsd xmm0, qword [ebp - 0x134]
mov eax, dword [ebp - 0x12c]
mov bl, 1
movsd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x90], 0
jmp 0x46a6e9
call dword [sym.imp.kernel32.dll_GetLastError]
xor ebx, ebx
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], 1
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x46a700
add eax, eax
push 2
push eax
push dword [ebp - 0x3c]
call fcn.00421c20
add esp, 0xc
test bl, bl
je 0x46a712
mov edi, dword [ebp - 0x8c]
test edi, edi
jne 0x46a92e
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
call fcn.00455630
mov esi, 0x200
mov dword [ebp - 0xfc], 2
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x34], 0
cmp esi, 0x201
jb 0x46a77e
jmp 0x46a790
jbe 0x46a830
cmp esi, 0x201
jae 0x46a790
mov dword [ebp - 0x38], 0x200
lea ebx, [ebp - 0x55c]
mov edi, esi
jmp 0x46a7d7
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
sub esi, edi
sub eax, edi
cmp eax, esi
jae 0x46a7c5
mov dword [ebp - 0x10], 0xc
lea ecx, [ebp - 0xfc]
mov edx, edi
push esi
call fcn.0051e200
add esp, 4
mov eax, dword [ebp - 0xfc]
mov edi, dword [ebp - 0xf8]
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x2c], edi
push 0
call dword [sym.imp.kernel32.dll_SetLastError]
push edi
push ebx
call dword [sym.imp.kernel32.dll_GetWindowsDirectoryW]
mov esi, eax
test eax, eax
jne 0x46a7fb
call dword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x46a8ea
cmp esi, edi
jne 0x46a770
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x46c96e
lea esi, [edi + edi]
test edi, edi
mov eax, 0xffffffff
cmovs esi, eax
cmp esi, 0x201
jae 0x46a790
jmp 0x46a77e
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xc
cmp esi, eax
ja 0x46ca87
lea eax, [ebp - 0xe4]
push esi
push ebx
push eax
call fcn.0045d780
add esp, 0xc
mov dword [ebp - 0x10], 0xd
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0xe4]
push eax
call fcn.0045e930
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x46a88b
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0xe4]
push eax
call fcn.0045f4e0
add esp, 0xc
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x34], edx
push dword [ebp - 0xdc]
call fcn.0046d3f0
add esp, 4
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x46a8c0
push 1
push eax
push dword [ebp - 0x34]
call fcn.00421c20
add esp, 0xc
movsd xmm0, qword [ebp - 0x134]
mov eax, dword [ebp - 0x12c]
mov bl, 1
movsd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x90], 0
jmp 0x46a909
call dword [sym.imp.kernel32.dll_GetLastError]
xor ebx, ebx
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], 1
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x46a920
add eax, eax
push 2
push eax
push dword [ebp - 0x3c]
call fcn.00421c20
add esp, 0xc
test bl, bl
je 0x46a945
mov edi, dword [ebp - 0x8c]
test edi, edi
je 0x46a945
mov eax, dword [ebp - 0x88]
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x44]
jmp 0x46aba6
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
call fcn.00455630
mov byte [ebp - 0x1d], 1
lea eax, [ebp - 0x134]
push 4
push str.PATHRUST_MIN_STACKfatal_runtime_error:_assertion_failed:_thread_info.stack_guard.get__.is_none____thread_info.thread.get__.is_none___n
push eax
call fcn.0045b190
add esp, 0xc
cmp byte [ebp - 0x128], 2
je 0x46b686
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x130]
add edx, ecx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x8c], edx
mov word [ebp - 0x88], 0
mov byte [ebp - 0x84], 1
jmp 0x46a9cb
mov edi, dword [ebp - 0x55c]
mov esi, dword [ebp - 0x44]
test edi, edi
jne 0x46c141
lea eax, [ebp - 0x90]
mov dword [ebp - 0x10], 0xa
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00466f60
add esp, 8
jmp 0x46aa00
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00466f60
add esp, 8
movzx eax, byte [ebp - 0x550]
cmp al, 2
je 0x46b671
mov esi, dword [ebp - 0x554]
mov ecx, dword [ebp - 0x55c]
mov edx, dword [ebp - 0x558]
test esi, esi
jne 0x46aa37
test edx, edx
je 0x46a9ea
push 1
push edx
push ecx
call fcn.00421c20
add esp, 0xc
jmp 0x46a9ea
lea edi, [ebp - 0x54f]
lea ebx, [ebp - 0xd7]
mov dword [ebp - 0x10], 0xb
movzx edi, word [edi]
mov word [ebx], di
lea edi, [ebp - 0x54f]
mov ah, byte [edi + 2]
mov byte [ebx + 2], ah
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], esi
mov byte [ebp - 0xd8], al
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0xe4]
push eax
call fcn.0045e930
add esp, 0xc
cmp dword [ebp - 0x40], 1
je 0x46aaa5
push 3
push str.exeNULcmd.exefallback_RNG_broken:
lea eax, [ebp - 0xe4]
push eax
call fcn.0045f4e0
add esp, 0xc
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x2c], edx
push dword [ebp - 0xdc]
call fcn.0046d3f0
add esp, 4
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x46a9ba
push 1
push eax
push dword [ebp - 0x2c]
call fcn.00421c20
add esp, 0xc
jmp 0x46a9ba
lea eax, [ecx + edi + 1]
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
test ebx, ebx
cmovne eax, ebx
test eax, eax
je 0x46ab13
test ebx, ebx
cmove ecx, edx
add eax, ecx
sub eax, dword [ebp - 0x24]
cmp esi, eax
jb 0x46ab13
mov esi, eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x10], 0x15
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x15
lea ecx, [ebp - 0x55c]
push esi
call fcn.0046f7f0
add esp, 4
mov esi, dword [ebp - 0x44]
mov edx, dword [ebp - 0x55c]
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x554]
test edx, edx
je 0x46ab6a
mov dword [ebp - 0x55c], edx
mov dword [ebp - 0x554], ecx
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x55c]
mov dword [ebp - 0x558], eax
call fcn.00465540
mov esi, dword [ebp - 0x44]
jmp 0x46ab77
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x54], 0
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x46ab8f
push 1
push eax
push dword [ebp - 0x24]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x50]
mov edi, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 8]
test edi, edi
je 0x46b2c7
cmp ebx, 5
mov dword [ebp - 0x34], edi
jb 0x46abc2
cmp word [edi + ebx*2 - 0xa], 0x2e
jne 0x46abc2
cmp word [edi + ebx*2 - 2], 0
je 0x46b3ff
movzx ecx, byte [esi + 0x65]
mov eax, dword [esi + 0x48]
mov edi, dword [esi + 0x50]
xor edx, edx
mov dword [ebp - 0xe4], 2
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x10], 0x18
mov byte [ebp - 0x38], cl
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x3c], edi
call fcn.00459c70
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x28]
mov word [eax + ecx*2], 0x22
inc ecx
mov dword [ebp - 0x55c], edx
lea edx, [ebp - 0x55c]
mov dword [ebp - 0xdc], ecx
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x558], ecx
lea ecx, [ebp - 0xe4]
mov word [ebp - 0x554], 0
call fcn.00459db0
mov edx, dword [ebp - 0xdc]
cmp edx, dword [ebp - 0xe0]
jne 0x46ac6b
lea ecx, [ebp - 0xe4]
call fcn.00459c70
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe4]
mov esi, dword [ebp - 0x24]
movzx ecx, byte [ebp - 0x38]
mov word [eax + edx*2], 0x22
mov eax, dword [ebp - 0x3c]
inc edx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0xdc], edx
lea eax, [eax + eax*4]
lea eax, [esi + eax*4]
mov dword [ebp - 0x28], eax
cmp esi, dword [ebp - 0x28]
je 0x46ad0a
nop dword [eax]
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0x24], esi
cmp edx, dword [ebp - 0xe0]
jne 0x46acc5
lea ecx, [ebp - 0xe4]
call fcn.00459c70
mov edx, dword [ebp - 0xdc]
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe4]
lea ecx, [ebp - 0x90]
mov word [eax + edx*2], 0x20
inc edx
mov dword [ebp - 0xdc], edx
lea edx, [ebp - 0xe4]
push dword [ebp - 0x30]
push esi
call fcn.004650c0
add esp, 8
movzx eax, byte [ebp - 0x90]
cmp al, 4
jne 0x46b2cf
mov esi, dword [ebp - 0x24]
add esi, 0x14
cmp esi, dword [ebp - 0x28]
jne 0x46aca0
mov eax, dword [ebp - 0xe4]
mov edi, dword [ebp - 0xe0]
mov esi, dword [ebp - 0xdc]
test eax, eax
je 0x46b319
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
mov cl, 1
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x5c], edx
cmp esi, edi
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], edi
mov dword [ebp - 0x138], esi
jne 0x46ad79
lea ecx, [ebp - 0x140]
mov edx, esi
mov byte [ebp - 0x55], 1
mov dword [ebp - 0x10], 0x1e
call fcn.00459c70
mov eax, dword [ebp - 0x140]
mov esi, dword [ebp - 0x138]
mov word [eax + esi*2], 0
inc esi
mov eax, 0x400
mov ebx, 0x608
mov dword [ebp - 0x138], esi
mov esi, dword [ebp - 0x44]
cmp byte [esi + 0x64], 0
cmove ebx, eax
or ebx, dword [esi + 0x54]
cmp dword [ebp - 0x154], 0
mov dword [ebp - 0x110], ebx
je 0x46b3c4
mov edi, dword [ebp - 0x148]
mov edx, dword [ebp - 0x150]
mov esi, dword [ebp - 0x14c]
mov eax, 2
mov ecx, 0
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
test edi, edi
mov dword [ebp - 0x10c], edx
mov dword [ebp - 0x108], esi
mov dword [ebp - 0x104], edi
jne 0x46ae2e
mov dword [ebp - 0x24], edx
lea ecx, [ebp - 0x54]
xor edx, edx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x28], esi
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x10], 0x1f
call fcn.00459c70
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x30]
mov word [eax + ecx*2], 0
inc ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x40], eax
xor eax, eax
test edx, edx
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x10], 0x20
mov dword [ebp - 0xec], 0
setne al
cmove edi, edx
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x554], edx
mov dword [ebp - 0x550], esi
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], edx
lea edx, [ebp - 0x55c]
mov dword [ebp - 0x540], esi
mov dword [ebp - 0x53c], edi
call fcn.00458240
mov edx, dword [ebp - 0x134]
test edx, edx
je 0x46bab4
mov eax, dword [ebp - 0x12c]
lea ecx, [eax + eax*8]
lea esi, [ecx + ecx*2]
add esi, eax
shl eax, 4
mov ecx, dword [edx + esi + 0xb4]
mov edi, dword [edx + esi + 0xb8]
mov dword [ebp - 0xe8], ecx
movzx ecx, byte [edx + esi + 0xcc]
mov dword [ebp - 0x9c], edi
mov edi, dword [edx + esi + 0xbc]
mov byte [ebp - 0x24], cl
movzx ecx, byte [edx + esi + 0xcf]
mov dword [ebp - 0x100], edi
mov edi, dword [edx + esi + 0xc0]
cmp byte [ebp - 0x24], 2
mov byte [ebp - 0x64], cl
mov ecx, dword [edx + esi + 0xc4]
movzx ebx, byte [ebp - 0x64]
mov dword [ebp - 0x94], ecx
mov ecx, dword [edx + esi + 0xc8]
mov byte [ebp - 0xe2], bl
movzx esi, word [edx + esi + 0xcd]
mov word [ebp - 0xe4], si
movsd xmm0, qword [edx + eax]
movsd xmm1, qword [edx + eax + 8]
lea eax, [ebp - 0xe1]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [ebp - 0xd5]
movsd xmm0, qword [ebp - 0xe4]
movsd xmm1, qword [ebp - 0xdc]
mov dword [ebp - 0x81], eax
movsd qword [ebp - 0x88], xmm1
movsd qword [ebp - 0x90], xmm0
je 0x46bab4
lea eax, [ebp - 0x8d]
add ecx, edi
xor ebx, ebx
mov edx, edi
mov dword [ebp - 0x64], edi
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
mov dword [ebp - 0x24], ecx
movsd qword [ebp - 0x12c], xmm1
movsd qword [ebp - 0x134], xmm0
jmp 0x46afcb
xor ebx, ebx
test di, di
je 0x46b358
mov di, 1
test bx, bx
jne 0x46afc0
cmp edx, ecx
je 0x46b062
movzx eax, byte [edx]
movzx esi, al
test al, al
js 0x46afe9
inc edx
jmp 0x46b036
movzx ecx, byte [edx + 1]
and esi, 0x1f
and ecx, 0x3f
cmp al, 0xdf
jbe 0x46b02b
movzx ebx, byte [edx + 2]
shl ecx, 6
and ebx, 0x3f
or ebx, ecx
cmp al, 0xf0
jb 0x46b03c
movzx eax, byte [edx + 3]
and esi, 7
shl ebx, 6
add edx, 4
shl esi, 0x12
and eax, 0x3f
or eax, ebx
or esi, eax
mov ecx, dword [ebp - 0x24]
cmp esi, 0xffff
jbe 0x46b036
jmp 0x46b04f
shl esi, 6
add edx, 2
or esi, ecx
mov ecx, dword [ebp - 0x24]
xor ebx, ebx
mov edi, esi
jmp 0x46afc2
shl esi, 0xc
add edx, 3
or esi, ebx
mov ecx, dword [ebp - 0x24]
cmp esi, 0xffff
jbe 0x46b036
and esi, 0x3ff
or esi, 0xdc00
mov ebx, esi
jmp 0x46afc2
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x46b07a
push 1
push eax
push dword [ebp - 0x64]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x50]
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x40]
sub eax, edi
cmp eax, esi
jae 0x46b0b0
mov dword [ebp - 0x10], 0x23
lea ecx, [ebp - 0x54]
mov edx, edi
push esi
call fcn.0051e200
add esp, 4
mov ecx, dword [ebp - 0x54]
mov edi, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x100]
lea eax, [esi + esi]
mov dword [ebp - 0x40], ecx
lea ecx, [ecx + edi*2]
push eax
mov ebx, dword [ebp - 0xe8]
push ebx
push ecx
call fcn.00517140
add esp, 0xc
mov eax, dword [ebp - 0x9c]
add edi, esi
mov dword [ebp - 0x4c], edi
test eax, eax
je 0x46b0e7
add eax, eax
push 2
push eax
push ebx
call fcn.00421c20
add esp, 0xc
cmp edi, dword [ebp - 0x50]
jne 0x46b109
lea ecx, [ebp - 0x54]
mov edx, edi
mov byte [ebp - 0x56], 1
mov dword [ebp - 0x10], 0x21
call fcn.00459c70
mov eax, dword [ebp - 0x54]
mov edi, dword [ebp - 0x4c]
jmp 0x46b10c
mov eax, dword [ebp - 0x40]
mov word [eax + edi*2], 0x3d
and dword [ebp - 0x64], 0xffffff00
inc edi
mov eax, dword [ebp - 0x130]
mov esi, dword [ebp - 0x134]
mov dh, byte [ebp - 0x128]
mov dword [ebp - 0x4c], edi
xor edi, edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x40], esi
lea ecx, [esi + eax]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], ecx
jmp 0x46b153
xor edi, edi
test bx, bx
je 0x46b641
mov bx, 1
test di, di
jne 0x46b148
cmp esi, ecx
je 0x46b1de
mov dl, byte [esi]
movzx eax, dl
test dl, dl
js 0x46b16c
inc esi
jmp 0x46b1d5
movzx ecx, byte [esi + 1]
and eax, 0x1f
and ecx, 0x3f
cmp dl, 0xdf
jbe 0x46b1a5
movzx edi, byte [esi + 2]
shl ecx, 6
and edi, 0x3f
or edi, ecx
cmp dl, 0xf0
jb 0x46b1b2
movzx ecx, byte [esi + 3]
and eax, 7
shl edi, 6
add esi, 4
shl eax, 0x12
and ecx, 0x3f
or ecx, edi
or eax, ecx
jmp 0x46b1ba
shl eax, 6
add esi, 2
or eax, ecx
mov ecx, dword [ebp - 0x24]
jmp 0x46b1d5
shl eax, 0xc
add esi, 3
or eax, edi
mov ecx, dword [ebp - 0x24]
cmp eax, 0xffff
jbe 0x46b1d5
and eax, 0x3ff
or eax, 0xdc00
mov edi, eax
jmp 0x46b14a
xor edi, edi
mov ebx, eax
jmp 0x46b14a
mov ebx, dword [ebp - 0x40]
mov eax, ebx
shr eax, 8
cmp dh, 2
je 0x46c7c2
lea esi, [ebp - 0x127]
mov dword [ebp - 0xec], eax
lea ecx, [ebp - 0xe1]
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x10], 0x22
movzx eax, word [esi]
mov dl, byte [esi + 2]
mov esi, dword [ebp - 0x30]
mov word [ecx + 0xa], ax
mov byte [ecx + 0xc], dl
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xdc], esi
mov byte [ebp - 0xd8], dh
lea edx, [ebp - 0xfc]
mov dword [ebp - 0xf8], ecx
lea ecx, [ebp - 0x54]
mov word [ebp - 0xf4], 0
call fcn.00459db0
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x64]
test eax, eax
je 0x46b271
push 1
push eax
push dword [ebp - 0x40]
call fcn.00421c20
add esp, 0xc
mov esi, dword [ebp - 0x4c]
cmp esi, dword [ebp - 0x50]
jne 0x46b294
lea ecx, [ebp - 0x54]
mov edx, esi
mov byte [ebp - 0x56], 0
mov dword [ebp - 0x10], 0x21
call fcn.00459c70
mov esi, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x64]
lea edx, [ebp - 0x55c]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x28], edi
lea ecx, [ebp - 0x134]
mov word [eax + esi*2], 0
inc esi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x20
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x4c], esi
call fcn.00458240
jmp 0x46aea5
mov edx, dword [ebp - 0x2c]
jmp 0x469d95
movzx ecx, byte [ebp - 0x89]
movzx esi, word [ebp - 0x8b]
mov ebx, dword [ebp - 0x8f]
shl ecx, 0x10
mov edi, ebx
or esi, ecx
movzx ecx, al
mov eax, dword [ebp - 0xe0]
shl edi, 8
test eax, eax
je 0x46b313
add eax, eax
push 2
push eax
push dword [ebp - 0xe4]
mov dword [ebp - 0x24], ecx
call fcn.00421c20
mov ecx, dword [ebp - 0x24]
add esp, 0xc
shld esi, ebx, 8
or edi, ecx
mov eax, dword [ebp - 0x98]
mov dword [eax], edi
mov dword [eax + 4], esi
mov dword [eax + 8], 2
mov eax, dword [ebp + 8]
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
xor ebx, ebx
test esi, esi
je 0x46b34b
add esi, esi
push 2
push esi
push edi
call fcn.00421c20
mov eax, dword [ebp + 8]
add esp, 0xc
test bl, bl
je 0x469da7
jmp 0x469eba
mov eax, dword [ebp - 0x94]
test eax, eax
je 0x46b370
push 1
push eax
push dword [ebp - 0x64]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x130]
mov esi, dword [ebp - 0xe8]
test eax, eax
je 0x46b391
push 1
push eax
push dword [ebp - 0x134]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x9c]
or dword [ebp - 0x28], 2
mov dword [ebp - 0x30], 0x57d9a8
test eax, eax
je 0x46ba64
add eax, eax
push 2
push eax
push esi
call fcn.00421c20
add esp, 0xc
mov dword [ebp - 0x10], 0x1f
jmp 0x46ba64
xor ecx, ecx
mov eax, 2
mov dword [ebp - 0x40], 0
cmp byte [esi + 0x44], 2
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], ecx
jne 0x46b56a
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x9c], 2
xor eax, eax
xor ecx, ecx
jmp 0x46b717
movzx eax, word [edi + ebx*2 - 8]
lea ecx, [eax - 0x42]
cmp ecx, 0x21
ja 0x46abc2
mov edx, dword [ebp - 0x5c]
add edx, dword [ecx*4 + 0x46d1fc]
jmp edx
mov edx, dword [esi + 0x38]
mov ecx, dword [esi + 0x40]
mov esi, dword [ebp - 0x2c]
xor ebx, ebx
add ecx, edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x24], ecx
jmp 0x46b58a
xor ebx, ebx
test di, di
je 0x46b61f
mov di, 1
test bx, bx
jne 0x46b57f
cmp edx, ecx
je 0x46b696
movzx eax, byte [edx]
movzx esi, al
test al, al
js 0x46b5a8
inc edx
jmp 0x46b60f
movzx ecx, byte [edx + 1]
and esi, 0x1f
and ecx, 0x3f
cmp al, 0xdf
jbe 0x46b5df
movzx ebx, byte [edx + 2]
shl ecx, 6
and ebx, 0x3f
or ebx, ecx
cmp al, 0xf0
jb 0x46b5ec
movzx eax, byte [edx + 3]
and esi, 7
shl ebx, 6
add edx, 4
shl esi, 0x12
and eax, 0x3f
or eax, ebx
or esi, eax
jmp 0x46b5f4
shl esi, 6
add edx, 2
or esi, ecx
mov ecx, dword [ebp - 0x24]
jmp 0x46b60f
shl esi, 0xc
add edx, 3
or esi, ebx
mov ecx, dword [ebp - 0x24]
cmp esi, 0xffff
jbe 0x46b60f
and esi, 0x3ff
or esi, 0xdc00
mov ebx, esi
jmp 0x46b613
xor ebx, ebx
mov edi, esi
mov esi, dword [ebp - 0x2c]
test di, di
jne 0x46b58a
mov eax, dword [ebp - 0x98]
mov edi, dword [ebp - 0x34]
mov dword [eax + 4], 0x57d9a8
mov dword [eax], 2
mov dword [eax + 8], 2
jmp 0x46c3f0
mov eax, dword [ebp - 0x28]
mov esi, 2
test eax, eax
je 0x46ba48
mov dword [ebp - 0x30], str.nul_byte_found_in_provided_data
push 1
push eax
push dword [ebp - 0x40]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0xec]
jmp 0x46ba55
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x46b686
push 1
push eax
push dword [ebp - 0x38]
call fcn.00421c20
add esp, 0xc
mov byte [ebp - 0x50], 2
mov dword [ebp - 0x4c], 0x57d9cc
jmp 0x469d8c
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x55c]
mov dword [ebp - 0x10], 0x24
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x558], ecx
lea ecx, [ebp - 0xe4]
mov word [ebp - 0x554], 0
call fcn.00459f00
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
cmp edx, eax
jne 0x46b6f4
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x10], 0x25
call fcn.00459c70
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
mov edi, dword [ebp - 0xe4]
mov esi, dword [ebp - 0x44]
mov ecx, eax
and ecx, 0xffffff00
mov word [edi + edx*2], 0
mov dword [ebp - 0x15c], edi
mov dword [ebp - 0x9c], edi
movzx eax, al
xorps xmm0, xmm0
or eax, ecx
movups xmmword [ebp - 0x134], xmm0
mov dword [ebp - 0x24], eax
push 0x59d048
call dword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov eax, dword [0x59d020]
test eax, 0x7fffffff
je 0x46b753
mov dword [ebp - 0x10], 0x26
call fcn.0051e4f0
mov esi, dword [ebp - 0x44]
xor al, 1
jmp 0x46b755
xor eax, eax
mov ch, byte [0x59d04c]
mov cl, byte [ebp + 0xc]
mov dword [ebp - 0x50], 0x59d048
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x4c], al
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x10c], 2
mov dword [ebp - 0x10], 0x27
test ch, ch
mov byte [ebp - 0xe8], ch
setne dl
test cl, cl
lea ecx, [esi + 8]
mov dword [ebp - 0x54], edx
lea edx, [ebp - 0x10c]
cmovne edx, eax
cmp dword [esi], 6
cmovne edx, esi
cmp dword [esi + 8], 6
cmove ecx, eax
cmp dword [esi + 0x10], 6
mov dword [ebp - 0x94], ecx
lea ecx, [esi + 0x10]
cmove ecx, eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x100], ecx
lea ecx, [ebp - 0x55c]
push eax
push 0xfffffffffffffff6
call fcn.0046d4a0
add esp, 8
movzx eax, byte [ebp - 0x55c]
cmp al, 4
jne 0x46b964
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x94]
lea eax, [ebp - 0x88]
mov dword [ebp - 0x10], 0x28
mov dword [ebp - 0xec], ecx
lea ecx, [ebp - 0x55c]
push eax
push 0xfffffffffffffff5
call fcn.0046d4a0
add esp, 8
movzx eax, byte [ebp - 0x55c]
cmp al, 4
jne 0x46b9a3
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x100]
lea eax, [ebp - 0x80]
mov dword [ebp - 0x10], 0x29
mov dword [ebp - 0x94], ecx
lea ecx, [ebp - 0x55c]
push eax
push 0xfffffffffffffff4
call fcn.0046d4a0
add esp, 8
movzx eax, byte [ebp - 0x55c]
mov edx, dword [ebp - 0x44]
mov ebx, dword [ebp - 0x110]
cmp al, 4
jne 0x46bb1c
mov ecx, dword [ebp - 0x558]
cmp dword [ebp - 0xec], 0
xorps xmm0, xmm0
mov dword [ebp - 0xa4], 0
movups xmmword [ebp - 0xb4], xmm0
movups xmmword [ebp - 0xc4], xmm0
movups xmmword [ebp - 0xd4], xmm0
movups xmmword [ebp - 0xe4], xmm0
jne 0x46b8ca
cmp dword [ebp - 0x94], 0
jne 0x46b8ca
test ecx, ecx
je 0x46b8f2
mov eax, dword [ebp - 0xec]
mov esi, dword [ebp - 0x94]
mov dword [ebp - 0xb8], 0x100
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xa4], ecx
mov eax, dword [edx + 0x60]
mov dword [ebp - 0x100], ecx
test eax, eax
mov dword [ebp - 0x158], eax
je 0x46c12f
add edx, 0x58
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0xe4], 0x48
mov dword [ebp - 0x10], 0x2a
call fcn.0046de30
cmp dword [ebp - 0xfc], 0
mov edi, dword [ebp - 0xf8]
mov esi, dword [ebp - 0xf4]
mov ebx, dword [ebp - 0x110]
lea ecx, [ebp - 0x55c]
je 0x46c16e
mov eax, dword [ebp - 0x98]
mov dword [eax], edi
mov dword [eax + 4], esi
mov dword [eax + 8], 2
jmp 0x46c30e
movzx ecx, byte [ebp - 0x559]
mov edx, dword [ebp - 0x98]
movzx edi, word [ebp - 0x55b]
mov esi, dword [ebp - 0x558]
movzx ebx, byte [ebp - 0xe8]
mov word [edx + 1], di
mov byte [edx + 3], cl
mov byte [edx], al
mov dword [edx + 4], esi
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
mov dword [edx + 8], 2
jmp 0x46c33f
movzx ecx, byte [ebp - 0x559]
mov edx, dword [ebp - 0x98]
movzx edi, word [ebp - 0x55b]
mov esi, dword [ebp - 0x558]
movzx ebx, byte [ebp - 0xe8]
mov word [edx + 1], di
mov byte [edx + 3], cl
mov byte [edx], al
mov dword [edx + 4], esi
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
mov dword [edx + 8], 2
jmp 0x46c333
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x30], 0x57d9a8
shl eax, 8
mov dword [ebp - 0x10], 0x1f
or eax, esi
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x10], 0x1f
call fcn.004558a0
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x46ba91
add eax, eax
push 2
push eax
push dword [ebp - 0x54]
call fcn.00421c20
add esp, 0xc
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x98]
mov edx, dword [ebp - 0x30]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], 2
jmp 0x46c407
lea ecx, [ebp - 0x55c]
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x10], 0x1f
call fcn.004558a0
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
cmp edx, dword [ebp - 0x50]
jne 0x46bae7
lea ecx, [ebp - 0x54]
mov byte [ebp - 0x47], 0
call fcn.00459c70
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x4c]
mov word [eax + edx*2], 0
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
test eax, eax
jne 0x46b3d2
mov esi, dword [ebp - 0x2c]
inc edx
mov dword [ebp - 0x30], edx
jmp 0x46ba9a
movzx ecx, byte [ebp - 0x559]
mov edx, dword [ebp - 0x98]
movzx edi, word [ebp - 0x55b]
mov esi, dword [ebp - 0x558]
mov byte [edx + 3], cl
mov word [edx + 1], di
mov byte [edx], al
mov dword [edx + 4], esi
mov dword [edx + 8], 2
jmp 0x46c31a
mov eax, dword [ebp - 0x558]
mov ebx, dword [ebp - 0x554]
jmp 0x46a93a
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x44
jmp 0x46c192
mov eax, dword [ebp - 0x558]
mov ebx, dword [ebp - 0x554]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x46aba6
push 1
push eax
push dword [ebp - 0x38]
call fcn.00421c20
add esp, 0xc
jmp 0x46aba6
or ebx, 0x80000
lea eax, [ebp - 0xe4]
push 0x44
push eax
push ecx
call fcn.00517140
lea edx, [ebp - 0x55c]
add esp, 0xc
mov dword [ebp - 0x518], edi
mov ecx, dword [ebp - 0x140]
lea eax, [ebp - 0x134]
push eax
push edx
push dword [ebp - 0x15c]
push dword [ebp - 0x40]
push ebx
push 1
push 0
push 0
mov dword [ebp - 0x44], ecx
push ecx
push dword [ebp - 0x3c]
call dword [sym.imp.kernel32.dll_CreateProcessW]
test eax, eax
je 0x46c2cf
mov eax, dword [ebp - 0x98]
movsd xmm1, qword [ebp - 0x88]
cmp dword [ebp - 0x158], 0
movsd xmm0, qword [ebp - 0x80]
movsd xmm2, qword [ebp - 0x90]
movsd qword [eax + 0x10], xmm1
movsd xmm1, qword [ebp - 0x134]
movsd qword [eax + 0x18], xmm0
movsd qword [eax + 8], xmm2
movsd qword [eax], xmm1
je 0x46c214
mov ecx, edi
mov edx, esi
call fcn.00456360
mov dword [ebp - 0x10], 0x26
mov esi, dword [sym.imp.kernel32.dll_CloseHandle]
push dword [ebp - 0x100]
call esi
push dword [ebp - 0x94]
call esi
push dword [ebp - 0xec]
call esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x10], 0x26
call fcn.00455ac0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x46c25b
add eax, eax
push 2
push eax
push dword [ebp - 0x9c]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x34]
test eax, eax
je 0x46c275
add eax, eax
push 2
push eax
push dword [ebp - 0x30]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x46c28f
add eax, eax
push 2
push eax
push dword [ebp - 0x44]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x46c2a6
add eax, eax
push 2
push eax
push dword [ebp - 0x3c]
call fcn.00421c20
add esp, 0xc
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x38]
test ecx, ecx
sete al
or dl, al
cmp dl, 1
je 0x469eb7
add ecx, ecx
push 2
push ecx
push esi
call fcn.00421c20
add esp, 0xc
jmp 0x469eb7
call dword [sym.imp.kernel32.dll_GetLastError]
movzx ecx, word [ebp - 0xfc]
mov edx, dword [ebp - 0x98]
cmp dword [ebp - 0x158], 0
mov word [edx + 1], cx
mov ch, byte [ebp - 0xfa]
mov byte [edx + 3], ch
mov byte [edx], 0
mov dword [edx + 4], eax
mov dword [edx + 8], 2
je 0x46c30e
mov ecx, edi
mov edx, esi
call fcn.00456360
push dword [ebp - 0x100]
call dword [sym.imp.kernel32.dll_CloseHandle]
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
movzx ebx, byte [ebp - 0xe8]
push dword [ebp - 0x94]
call dword [sym.imp.kernel32.dll_CloseHandle]
push dword [ebp - 0xec]
call dword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [ebp - 0x90], 0
je 0x46c354
push dword [ebp - 0x8c]
call dword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [ebp - 0x88], 0
je 0x46c369
push dword [ebp - 0x84]
call dword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [ebp - 0x80], 0
je 0x46c378
push dword [ebp - 0x7c]
call dword [sym.imp.kernel32.dll_CloseHandle]
test bl, bl
je 0x46c39c
cmp byte [ebp - 0x64], 0
jne 0x46c3cb
mov eax, dword [0x59d020]
test eax, 0x7fffffff
je 0x46c3cb
mov dword [ebp - 0x10], 0x26
call fcn.0051e4f0
jmp 0x46c3ba
cmp byte [ebp - 0x64], 0
jne 0x46c3cb
mov eax, dword [0x59d020]
test eax, 0x7fffffff
je 0x46c3cb
mov dword [ebp - 0x10], 0x26
call fcn.0051e4f0
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
test al, al
jne 0x46c3cb
mov byte [0x59d04c], 1
push 0x59d048
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x46c3f0
add eax, eax
push 2
push eax
push dword [ebp - 0x9c]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x46c407
add eax, eax
push 2
push eax
push dword [ebp - 0x30]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x46c424
add eax, eax
push 2
push eax
push dword [ebp - 0x140]
call fcn.00421c20
add esp, 0xc
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x46c43b
add eax, eax
push 2
push eax
push dword [ebp - 0x3c]
call fcn.00421c20
add esp, 0xc
cmp byte [ebp - 0x38], 0
mov eax, dword [ebp + 8]
mov bl, 1
jne 0x469eba
jmp 0x46b336
mov ecx, dword [ebp - 0x28]
movzx esi, bl
mov dword [ebp - 0x30], ecx
jmp 0x46ba55
call dword [sym.imp.kernel32.dll_GetLastError]
mov byte [ebp - 0x90], 0
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0xe4], 0x57d948
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0x10], 0x2c
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x134]
mov dword [ebp - 0x130], fcn.0045bbb0
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], 1
push 0x57d978
lea eax, [ebp - 0xe4]
push eax
call fcn.0051ed60
add esp, 8
jmp 0x46caf9
call fcn.00478e70
jmp 0x46caf9
mov dword [ebp - 0x10], 4
call fcn.00478e70
jmp 0x46caf9
mov dword [ebp - 0x10], 4
call fcn.00478e70
jmp 0x46caf9
mov byte [ebp - 0x5d], 1
mov dword [ebp - 0x10], 2
push ebx
push 1
call fcn.0051ec40
add esp, 8
jmp 0x46caf9
push esi
push 1
call fcn.0051ec40
add esp, 8
jmp 0x46caf9
mov byte [ebp - 0x5d], 1
mov dword [ebp - 0x10], 2
call fcn.00478e70
jmp 0x46caf9
mov dword [ebp - 0x10], 4
push esi
push 2
call fcn.0051ec40
add esp, 8
jmp 0x46caf9
mov dword [ebp - 0x10], 3
push 0x57baf0
push 0x21
push str.assertion_failed:_self.height___0
call fcn.0051ee20
add esp, 0xc
jmp 0x46caf9
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
push 4
push 1
call fcn.0051ec40
add esp, 8
jmp 0x46caf9
mov dword [ebp - 0x10], 0xe
push 0x57dee8
push 0x28
push str.internal_error:_entered_unreachable_codeW
call fcn.0051ee20
add esp, 0xc
jmp 0x46caf9
mov dword [ebp - 0x10], 0xc
push 0x57dee8
push 0x28
push str.internal_error:_entered_unreachable_codeW
call fcn.0051ee20
add esp, 0xc
jmp 0x46caf9
call dword [sym.imp.kernel32.dll_GetLastError]
mov byte [ebp - 0xe4], 0
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0xe4]
mov dword [ebp - str.failure_getting_env_string_from_OS:], 0x57d800
mov dword [ebp - 0x558], 1
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x8c], fcn.0045bbb0
mov dword [ebp - 0x554], eax
mov dword [ebp - 0x550], 1
lea eax, [ebp - 0x55c]
push 0x57d808
push eax
call fcn.0051ed60
add esp, 8
jmp 0x46caf9
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
call fcn.00478e70
jmp 0x46caf9
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x10], 9
push ebx
push 1
call fcn.0051ec40
add esp, 8
jmp 0x46caf9
push 0x57ded8
push eax
push esi
call fcn.0051f230
add esp, 0xc
jmp 0x46caf9
mov dword [ebp - 0x10], 0x15
push 0x57b5b8
push edi
push ebx
call fcn.0051f1c0
add esp, 0xc
jmp 0x46caf9
push 0x57ded8
push eax
push esi
call fcn.0051f230
add esp, 0xc
jmp 0x46caf9
ud2