Function at 0x5008f0
Capabilities:
Connect pipe
Create pipe
Read file on windows
Read pipe
Write file on windows
Write pipe

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x70
mov dword [ebp - 0x4c], eax
test eax, eax
jne ContinueDebugEvent
mov eax, 0xb1
call fcn.004f6080
mov dword [esp], str.test_CreateNamedPipe_starting_in_byte_mode_n
call fcn.004f61b0
mov dword [esp + 4], 0x7d0
mov edi, dword [sym.imp.kernel32.dll_WaitNamedPipeA]
mov dword [esp], str..PiPe_tests_pipe.c
call edi
sub esp, 8
mov ebx, eax
mov eax, 0xb7
call fcn.004f6080
xor eax, eax
test ebx, ebx
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], str.WaitNamedPipe_returned__d_for_nonexistent_pipe_n
mov dword [esp], eax
mov esi, dword fs:[0x18]
call fcn.004f6800
mov eax, 0xb8
call fcn.004f6080
mov eax, dword [esi + 0x34]
mov dword [esp + 4], 0x5ec6d9
mov dword [esp + 8], eax
xor eax, eax
cmp dword [esi + 0x34], 2
sete al
mov dword [esp], eax
call fcn.004f6800
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x400
mov dword [esp + 0x10], 0x400
mov dword [esp + 0xc], 1
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], 3
mov dword [esp + 8], eax
mov eax, dword [sym.imp.kernel32.dll_CreateNamedPipeA]
mov dword [esp], str.not_a_named_pipe
mov dword [ebp - 0x54], eax
call eax
sub esp, 0x20
mov ebx, eax
mov eax, 0xc1
call fcn.004f6080
xor eax, eax
cmp ebx, 0xffffffff
je 0x502900
mov dword [esp + 4], str.CreateNamedPipe_should_fail_if_name_doesnt_start_with_.pipe_n
mov dword [esp], eax
call fcn.004f6800
mov edx, dword [ebp - 0x4c]
test edx, edx
je 0x502888
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x400
mov dword [esp + 0x10], 0x400
mov dword [esp + 0xc], 1
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], 3
mov dword [esp + 8], eax
mov dword [esp], 0
mov eax, dword [ebp - 0x54]
call eax
sub esp, 0x20
mov ebx, eax
mov eax, 0xd4
call fcn.004f6080
xor eax, eax
cmp ebx, 0xffffffff
je 0x502928
mov dword [esp], eax
mov dword [esp + 4], str.CreateNamedPipe_should_fail_if_name_is_NULL_n
call fcn.004f6800
mov eax, dword [sym.imp.kernel32.dll_CreateFileA]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
mov dword [esp], str..PiPe_tests_pipe.c
mov dword [ebp - 0x50], eax
call eax
sub esp, 0x1c
mov ebx, eax
mov eax, 0xd8
call fcn.004f6080
xor eax, eax
cmp ebx, 0xffffffff
je reloc.kernel32.dll_CreateDirectoryA
mov dword [esp], eax
mov dword [esp + 4], str.connecting_to_nonexistent_named_pipe_should_fail_with_ERROR_FILE_NOT_FOUND_n
call fcn.004f6800
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x400
mov dword [esp + 0x10], 0x400
mov dword [esp + 0xc], 1
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], 3
mov dword [esp + 8], eax
mov dword [esp], str..PiPe_tests_pipe.c
mov eax, dword [ebp - 0x54]
call eax
sub esp, 0x20
mov esi, eax
mov eax, 0xe4
call fcn.004f6080
xor eax, eax
cmp esi, 0xffffffff
mov dword [esp + 4], str.CreateNamedPipe_failed_n
setne al
mov dword [esp], eax
call fcn.004f6800
mov edx, esi
mov eax, 0xe5
call fcn.004f6a10
mov ecx, 0x12019f
mov edx, esi
mov eax, 0xe7
call fcn.004fa360
lea eax, [ebp - 0x3c]
mov dword [esp], esi
mov dword [esp + 0x10], eax
mov eax, dword [sym.imp.kernel32.dll_PeekNamedPipe]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [ebp - 0x58], eax
call eax
sub esp, 0x18
mov ebx, eax
mov eax, 0xec
call fcn.004f6080
xor eax, eax
mov edx, dword fs:[0x18]
mov ecx, dword [edx + 0x34]
test ebx, ebx
jne 0x500bc6
xor eax, eax
cmp ecx, 0xe6
sete al
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ebx
mov dword [esp + 4], str.PeekNamedPipe_returned__x___lu__n
mov dword [esp], eax
mov ebx, dword fs:[0x18]
call fcn.004f6800
mov dword [esp + 4], 0x7d0
mov dword [esp], str..PiPe_tests_pipe.c
call edi
sub esp, 8
mov dword [ebp - 0x44], eax
mov eax, 0xf0
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.WaitNamedPipe_failed___ld__n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x44]
mov dword [esp], edx
call fcn.004f6800
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
mov dword [esp], str..PiPe_tests_pipe.c
mov eax, dword [ebp - 0x50]
call eax
sub esp, 0x1c
mov dword [ebp - 0x44], eax
mov eax, 0xf3
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFile_failed___ld__n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebp - 0x44], 0xffffffff
setne al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0xf5
call fcn.004f6080
mov dword [esp + 4], 0x64
mov dword [esp], str..PiPe_tests_pipe.c
call edi
sub esp, 8
test eax, eax
sete al
mov dword [esp + 4], str.WaitNamedPipe_succeeded_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0xf7
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], 0x5ec6d9
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 0x79
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0xfa
call fcn.004f6080
mov edi, dword [sym.imp.kernel32.dll_ConnectNamedPipe]
mov dword [esp + 4], 0
mov dword [esp], esi
call edi
sub esp, 8
test eax, eax
sete al
mov dword [esp + 4], str.ConnectNamedPipe_server__succeeded_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0xfb
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.expected_ERROR_PIPE_CONNECTED__got__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 0x217
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0xfc
call fcn.004f6080
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 8
test eax, eax
sete al
mov dword [esp + 4], str.ConnectNamedPipe_client__succeeded_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0xfd
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.expected_ERROR_INVALID_FUNCTION__got__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 1
sete al
mov dword [esp], eax
call fcn.004f6800
mov ecx, dword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x48], ecx
je 0x5023fa
lea ebx, [ebp - 0x2c]
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x500dca
mov eax, 0x105
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov eax, dword [sym.imp.kernel32.dll_WriteFile]
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x5ee734
mov dword [ebp - 0x48], eax
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_n
call fcn.004f6800
mov eax, 0x106
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_n
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x107
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov edi, dword [sym.imp.kernel32.dll_ReadFile]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x108
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_n
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x109
call fcn.004f6080
mov eax, dword [ebp - 0x40]
mov dword [esp + 4], ebx
mov dword [esp], 0x5ee734
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 4], str.content_check_n
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x500eee
mov eax, 0x10c
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_n
call fcn.004f6800
mov eax, 0x10d
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_n
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x10e
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x10f
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_n
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x110
call fcn.004f6080
mov eax, dword [ebp - 0x40]
mov dword [esp + 4], ebx
mov dword [esp], str.More_bits
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 4], str.content_check_n
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x501007
mov eax, 0x114
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x5ee734
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_n
call fcn.004f6800
mov eax, 0x115
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_1_n
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x116
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp + 0xc], 0
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek_n
call fcn.004f6800
mov eax, 0x117
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek_1_got__ld_bytes_n
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword [ebp - 0x4c]
test eax, eax
jne DisconnectNamedPipe
mov eax, 0x119
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_1_got__ld_bytes_left_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x11c
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x11d
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_1_got__ld_bytes_n
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x11e
call fcn.004f6080
mov eax, dword [ebp - 0x40]
mov dword [esp + 4], ebx
mov dword [esp], 0x5ee734
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 4], str.content_1_check_n
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x5011cc
mov eax, 0x121
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_n
call fcn.004f6800
mov eax, 0x122
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_2_n
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x123
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp], esi
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek_n
call fcn.004f6800
mov eax, 0x124
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek_2_got__ld_bytes_n
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x502b60
mov eax, 0x126
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_2_got__ld_bytes_left_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x129
call fcn.004f6080
lea ecx, [ebp - 0x34]
mov dword [esp], esi
mov dword [esp + 0x14], ecx
lea ecx, [ebp - 0x38]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek_n
call fcn.004f6800
mov eax, 0x12a
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek_2_got__ld_bytes_n
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x12c
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_2_got__ld_bytes_left_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x12f
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x130
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_2_got__ld_bytes_n
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x131
call fcn.004f6080
mov eax, dword [ebp - 0x40]
mov dword [esp + 4], ebx
mov dword [esp], str.More_bits
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 4], str.content_2_check_n
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x50142c
mov eax, 0x135
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_n
call fcn.004f6800
mov eax, 0x136
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_n
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x137
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp + 4], ebx
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek_n
call fcn.004f6800
mov eax, 0x138
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.peek_got__ld_bytes_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x139
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek_got__ld_bytes_available_n
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword [ebp - 0x4c]
test eax, eax
jne DuplicateConsoleHandle
mov eax, 0x13b
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_got__ld_bytes_left_n
cmp eax, 0xfffffffc
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x13e
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x13f
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x140
call fcn.004f6080
lea ecx, [ebp - 0x3c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
lea ecx, [ebp - 0x28]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x141
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_n
cmp eax, 6
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x142
call fcn.004f6080
mov eax, dword [ebp - 0x40]
mov dword [esp + 4], ebx
mov dword [esp], str.More_bits
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 4], str.content_check_n
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x501684
mov eax, 0x145
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x5ee734
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_n
call fcn.004f6800
mov eax, 0x146
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_n
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x147
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp + 8], 4
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek_n
call fcn.004f6800
mov eax, 0x148
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.peek_got__ld_bytes_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x149
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek_got__ld_bytes_available_n
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x502ab0
mov eax, 0x14c
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_got__ld_bytes_left_n
cmp eax, 0xfffffffc
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x14d
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp + 4], str.ReadFile_n
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x156
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x157
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x28]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], eax
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x158
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_n
cmp eax, 7
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x159
call fcn.004f6080
mov eax, dword [ebp - 0x40]
mov dword [esp + 4], ebx
mov dword [esp], 0x5ee734
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 4], str.content_check_n
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x5018d6
mov eax, 0x15d
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_n
call fcn.004f6800
mov eax, 0x15e
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_n
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword [ebp - 0x4c]
test eax, eax
jne EndUpdateResourceA
mov eax, 0x161
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x162
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x163
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x28]
mov dword [esp + 8], 4
mov dword [esp + 4], eax
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp + 4], str.ReadFile_n
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x16f
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x170
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x24]
mov dword [esp + 8], 0x18
mov dword [esp + 4], eax
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x171
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_n
cmp eax, 2
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x172
call fcn.004f6080
mov eax, dword [ebp - 0x40]
mov dword [esp + 4], ebx
mov dword [esp], str.More_bits
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 4], str.content_check_n
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x501ace
mov eax, 0x176
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x5ee734
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile3a_n
call fcn.004f6800
mov eax, 0x177
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_3a_n
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x178
call fcn.004f6080
lea ecx, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str._WriteFile3b_n
call fcn.004f6800
mov eax, 0x179
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_3b_n
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x17a
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp + 4], ebx
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov ecx, dword [ebp - 0x58]
call ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek3_n
call fcn.004f6800
mov eax, 0x17b
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.peek3_got__ld_bytes_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
jne reloc.kernel32.dll_CreateFileA
mov eax, 0x17d
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek3_got__ld_bytes_left_n
cmp eax, 0xfffffffc
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x180
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek3_got__ld_bytes_available_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x181
call fcn.004f6080
lea edx, [ebp - 0x34]
mov dword [esp + 4], ebx
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x38]
mov dword [esp + 0x10], edx
lea edx, [ebp - 0x3c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x20
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov ecx, dword [ebp - 0x58]
call ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek3_n
call fcn.004f6800
mov eax, 0x183
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.peek3_got__ld_bytes_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x184
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek3_got__ld_bytes_left_n
cmp eax, 0xffffffeb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x18b
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek3_got__ld_bytes_available_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x18d
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je 0x504160
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.pipe_content_3a_check_n
mov dword [esp], eax
call fcn.004f6800
cmp dword [ebp - 0x3c], 0x14
ja reloc.kernel32.dll_ProcessIdToSessionId
mov eax, 0x192
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x193
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_3_got__ld_bytes_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x195
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je reloc.kernel32.dll_LockFileEx
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_3a_check_n
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x197
call fcn.004f6080
cmp dword [ebp - 0x21], 0x65726f4d
je reloc.kernel32.dll_LocaleNameToLCID
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_3b_check_n
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x501e45
mov eax, 0x19b
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x5ee734
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov ecx, dword [ebp - 0x48]
call ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile4a_n
call fcn.004f6800
mov eax, 0x19c
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_4a_n
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x19d
call fcn.004f6080
lea edx, [ebp - 0x40]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov ecx, dword [ebp - 0x48]
call ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str._WriteFile4b_n
call fcn.004f6800
mov eax, 0x19e
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_4b_n
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x19f
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp + 8], 4
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek3_n
call fcn.004f6800
mov eax, 0x1a0
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.peek3_got__ld_bytes_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov edx, dword [ebp - 0x4c]
test edx, edx
jne reloc.kernel32.dll_ExpandEnvironmentStringsA
mov eax, 0x1a2
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek3_got__ld_bytes_left_n
cmp eax, 0xfffffffc
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1a5
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek3_got__ld_bytes_available_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1a6
call fcn.004f6080
lea ecx, [ebp - 0x34]
mov dword [esp + 8], 0x20
mov dword [esp + 0x14], ecx
lea ecx, [ebp - 0x38]
mov dword [esp + 0x10], ecx
lea ecx, [ebp - 0x3c]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp], esi
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek4_n
call fcn.004f6800
mov eax, 0x1a8
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.peek4_got__ld_bytes_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1a9
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek4_got__ld_bytes_left_n
cmp eax, 0xffffffeb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1b0
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek4_got__ld_bytes_available_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1b2
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je reloc.kernel32.dll_OpenWaitableTimerA
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.pipe_content_4a_check_n
mov dword [esp], eax
call fcn.004f6800
cmp dword [ebp - 0x3c], 0x14
ja 0x504200
mov eax, 0x1b7
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x1b9
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_4_got__ld_bytes_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1bf
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je 0x5040e8
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_4a_check_n
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1c2
call fcn.004f6080
cmp dword [ebp - 0x21], 0x65726f4d
je 0x504138
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_4b_check_n
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1ca
mov dword [ebp - 0x30], 2
call fcn.004f6080
lea eax, [ebp - 0x30]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_SetNamedPipeHandleState]
sub esp, 0x10
test eax, eax
sete al
mov dword [esp + 4], str.Change_mode_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
mov dword [esp], str..PiPe_tests_pipe.c
mov eax, dword [ebp - 0x50]
call eax
sub esp, 0x1c
mov ebx, eax
mov eax, 0x26c
call fcn.004f6080
xor eax, eax
cmp ebx, 0xffffffff
mov dword [esp + 4], str.connecting_to_named_pipe_after_other_client_closes_but_before_DisconnectNamedPipe_should_fail_n
sete al
mov dword [esp], eax
mov edi, dword fs:[0x18]
call fcn.004f6800
mov eax, 0x26e
call fcn.004f6080
mov dword [esp + 4], str.connecting_to_named_pipe_before_other_client_closes_should_fail_with_ERROR_PIPE_BUSY_n
xor eax, eax
cmp dword [edi + 0x34], 0xe7
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x271
call fcn.004f6080
mov ecx, dword [ebp - 0x44]
mov dword [esp], ecx
mov ecx, dword [sym.imp.kernel32.dll_CloseHandle]
mov dword [ebp - 0x48], ecx
call ecx
sub esp, 4
mov dword [esp], eax
mov dword [esp + 4], str.CloseHandle_n
call fcn.004f6800
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
mov dword [esp], str..PiPe_tests_pipe.c
mov eax, dword [ebp - 0x50]
call eax
sub esp, 0x1c
mov ebx, eax
mov eax, 0x275
call fcn.004f6080
xor eax, eax
cmp ebx, 0xffffffff
mov dword [esp + 4], str.connecting_to_named_pipe_after_other_client_closes_but_before_DisconnectNamedPipe_should_fail_n
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x277
call fcn.004f6080
mov dword [esp + 4], str.connecting_to_named_pipe_after_other_client_closes_but_before_DisconnectNamedPipe_should_fail_with_ERROR_PIPE_BUSY_n
xor eax, eax
cmp dword [edi + 0x34], 0xe7
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x27a
call fcn.004f6080
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_DisconnectNamedPipe]
sub esp, 4
mov dword [esp], eax
mov dword [esp + 4], str.DisconnectNamedPipe_n
call fcn.004f6800
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
mov dword [esp], str..PiPe_tests_pipe.c
mov eax, dword [ebp - 0x50]
call eax
sub esp, 0x1c
mov ebx, eax
mov eax, 0x27e
call fcn.004f6080
xor eax, eax
cmp ebx, 0xffffffff
mov dword [esp + 4], str.connecting_to_named_pipe_after_other_client_closes_but_before_DisconnectNamedPipe_should_fail_n
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x280
call fcn.004f6080
xor eax, eax
mov dword [esp + 4], str.connecting_to_named_pipe_after_other_client_closes_but_before_ConnectNamedPipe_should_fail_with_ERROR_PIPE_BUSY_n
cmp dword [edi + 0x34], 0xe7
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x28a
call fcn.004f6080
mov dword [esp], esi
mov edi, dword [ebp - 0x48]
call edi
sub esp, 4
mov dword [esp], eax
mov dword [esp + 4], str.CloseHandle_n
call fcn.004f6800
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x400
mov dword [esp + 0x10], 0x400
mov dword [esp + 0xc], 1
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], 1
mov dword [esp + 8], eax
mov dword [esp], str..PiPe_tests_pipe.c
mov esi, dword [ebp - 0x54]
call esi
sub esp, 0x20
mov ebx, eax
mov eax, 0x28e
call fcn.004f6080
xor eax, eax
cmp ebx, 0xffffffff
mov dword [esp + 4], 0x5eaf42
setne al
mov dword [esp], eax
call fcn.004f6800
mov edx, ebx
mov eax, 0x28f
call fcn.004f6a10
mov ecx, 0x120089
mov edx, ebx
mov eax, 0x291
call fcn.004fa360
mov dword [esp], ebx
mov dword [ebp - 0x48], edi
call edi
sub esp, 4
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x400
mov dword [esp + 0x10], 0x400
mov dword [esp + 0xc], 1
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], 2
mov dword [esp + 8], eax
mov dword [esp], str..PiPe_tests_pipe.c
mov dword [ebp - 0x54], esi
call esi
sub esp, 0x20
mov esi, eax
mov eax, 0x298
call fcn.004f6080
xor eax, eax
cmp esi, 0xffffffff
mov dword [esp + 4], str.CreateNamedPipe_failed_n
setne al
mov dword [esp], eax
mov ebx, dword fs:[0x18]
call fcn.004f6800
mov edx, esi
mov eax, 0x299
call fcn.004f6a10
mov edx, esi
mov ecx, 0x120116
mov eax, 0x29b
call fcn.004fa360
mov dword [esp + LookupPrivilegeValueAx18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + OpenProcessTokenxc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], str..PiPe_tests_pipe.c
mov eax, dword [ebp - 0x50]
call eax
sub esp, 0x1c
mov edi, eax
mov eax, 0x29f
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], 0x5ed755
mov dword [esp + 8], eax
xor eax, eax
cmp edi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.004f6800
mov edx, edi
mov ecx, 0x100080
mov eax, 0x2a0
call fcn.004fa360
mov dword [esp], edi
mov edi, dword [ebp - 0x48]
call edi
sub esp, 4
mov dword [esp], esi
mov dword [ebp - 0x48], edi
call edi
sub esp, 4
mov dword [esp + 0x1c], 0
mov dword [esp + RegDeleteValueWx18], 0
mov dword [esp + 0x14], 0x400
mov dword [esp + 0x10], 0x400
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 3
mov dword [esp], str..pipe_a_____b
mov esi, dword [ebp - 0x54]
call esi
sub esp, 0x20
mov esi, eax
mov eax, 0x2a7
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.failed_to_create_pipe__error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp esi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.004f6800
mov dword [esp + 0x18], 0
mov dword [esp + RegSetValueExWx14], 0
mov dword [esp + 0x10], 3
mov dword [esp + RevertToSelfxc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], SetSecurityDescriptorDacl
mov dword [esp], str..pipe_a_____b
mov eax, dword [ebp - 0x50]
call eax
sub esp, 0x1c
mov edi, eax
mov eax, 0x2a9
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.failed_to_open_pipe__error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp edi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.004f6800
mov dword [esp], edi
mov edi, dword [ebp - 0x48]
call edi
sub esp, 4
mov dword [esp], esi
mov dword [ebp - 0x48], edi
call edi
sub esp, 4
mov dword [esp + 0x1c], 0
mov dword [esp + AddVectoredExceptionHandlerx18], 0
mov dword [esp + 0x14], 0x400
mov dword [esp + 0x10], 0x400
mov dword [esp + 0xc], 1
mov dword [esp + 8], AllocConsole
mov dword [esp + 4], 3
mov dword [esp], str..pipe_trailingslash_
mov esi, dword [ebp - 0x54]
call esi
sub esp, 0x20
mov esi, eax
mov eax, 0x2af
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.failed_to_create_pipe__error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp esi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.004f6800
mov dword [esp + BeginUpdateResourceWx18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + BuildCommDCBAxc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], BuildCommDCBAndTimeoutsA
mov dword [esp], str..pipe_trailingslash
mov eax, dword [ebp - 0x50]
call eax
sub esp, 0x1c
mov edi, eax
mov eax, 0x2b1
call fcn.004f6080
xor eax, eax
cmp edi, 0xffffffff
mov dword [esp + 4], str.expected_opening_pipe_to_fail_n
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x2b2
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], 0x5ed814
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 2
sete al
mov dword [esp], eax
call fcn.004f6800
mov dword [esp + 0x18], 0
mov dword [esp + ClearCommErrorx14], 0
mov dword [esp + 0x10], 3
mov dword [esp + CloseConsoleHandlexc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], str..pipe_trailingslash_
mov eax, dword [ebp - 0x50]
call eax
sub esp, 0x1c
mov edi, eax
mov eax, 0x2b4
call fcn.004f6080
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.failed_to_open_pipe__error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp edi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.004f6800
mov dword [esp], edi
mov edi, dword [ebp - 0x48]
call edi
sub esp, 4
mov dword [esp], esi
call edi
sub esp, 4
cmp dword [0x57fce8], 1
jle 0x50285d
mov eax, 0x2b8
call fcn.004f6080
mov dword [esp], str.test_CreateNamedPipe_returning_n
call fcn.004f61b0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0xb3
call fcn.004f6080
mov dword [esp], str.test_CreateNamedPipe_starting_in_message_mode_n
call fcn.004f61b0
jmp 0x50091a
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x400
mov dword [esp + 0x10], 0x400
mov dword [esp + 0xc], 1
mov dword [esp + 8], 2
mov dword [esp + 4], 3
mov dword [esp], str..PiPe_tests_pipe.c
mov eax, dword [ebp - 0x54]
call eax
sub esp, 0x20
mov ebx, eax
mov eax, 0xcd
call fcn.004f6080
xor eax, eax
cmp ebx, 0xffffffff
je 0x502940
mov dword [esp + 4], str.CreateNamedPipe_should_fail_with_PIPE_TYPE_BYTE__PIPE_READMODE_MESSAGE_n
mov dword [esp], eax
call fcn.004f6800
jmp CreateConsoleScreenBuffer
xor eax, eax
cmp dword [esi + 0x34], 0x7b
sete al
jmp 0x5009ee
mov eax, dword fs:[0x18]
cmp dword [eax + 0x34], 2
sete al
movzx eax, al
jmp CreateDirectoryW
mov eax, dword fs:[0x18]
cmp dword [eax + 0x34], 3
sete al
movzx eax, al
jmp CreateEventA
mov eax, dword fs:[0x18]
cmp dword [eax + 0x34], 0x57
sete al
movzx eax, al
jmp 0x5028e2
mov eax, 0x17f
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], 0x5ed0d9
cmp eax, 7
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x180
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek3_got__ld_bytes_available_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x181
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp + 4], ebx
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0x5ed0bd
call fcn.004f6800
mov eax, 0x188
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.peek3_got__ld_bytes_n
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x189
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek3_got__ld_bytes_left_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x18b
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], 0x5ed0f4
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x18d
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je CreateSemaphoreA
mov eax, 1
xor eax, 1
mov dword [esp + 4], 0x5ed113
mov dword [esp], eax
call fcn.004f6800
jmp 0x501d79
mov eax, 0x151
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_got__ld_bytes_left_n
cmp eax, 7
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x153
mov edx, dword fs:[0x18]
mov dword [edx + 0x34], 0xdeadbeef
mov dword [ebp - 0x5c], edx
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + DeactivateActCtxx10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
call edi
sub esp, 0x14
test eax, eax
sete al
mov dword [esp + 4], str.ReadFile_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x154
call fcn.004f6080
mov dword [esp + 4], str.wrong_error_n
mov edx, dword [ebp - 0x5c]
xor eax, eax
cmp dword [edx + 0x34], 0xea
sete al
mov dword [esp], eax
call fcn.004f6800
jmp DebugSetProcessKillOnExit
mov eax, 0x128
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_2_got__ld_bytes_left_n
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x129
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp], esi
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], DeleteFileA
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek_n
call fcn.004f6800
mov eax, 0x12a
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek_2_got__ld_bytes_n
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x12e
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_2_got__ld_bytes_left_n
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
jmp 0x501388
mov eax, 0x11b
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_1_got__ld_bytes_left_n
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
jmp 0x501125
mov eax, 0x13d
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek_got__ld_bytes_left_n
cmp eax, 6
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
jmp 0x501570
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 0xdeadbeef
mov dword [ebp - 0x5c], eax
mov eax, 0x168
call fcn.004f6080
lea ecx, [ebp - 0x3c]
mov dword [esp], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 8], 4
call edi
sub esp, 0x14
test eax, eax
sete al
mov dword [esp + 4], str.ReadFile_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x169
call fcn.004f6080
mov dword [esp + 4], 0x5ed06f
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x34], 0xea
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x16a
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0x5ecf36
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x34], 0xdeadbeef
mov eax, 0x16c
call fcn.004f6080
lea ecx, [ebp - 0x3c]
mov dword [esp], esi
mov dword [esp + 0xc], ecx
lea ecx, [ebp - 0x28]
mov dword [esp + 4], ecx
mov dword [esp + EnumTimeFormatsAx10], 0
mov dword [esp + 8], 4
call edi
sub esp, 0x14
test eax, eax
sete al
mov dword [esp + 4], str.ReadFile_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x16d
call fcn.004f6080
mov dword [esp + 4], str.wrong_error_n
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x34], 0xea
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
jmp 0x5019fd
mov eax, 0x1a4
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek3_got__ld_bytes_left_n
cmp eax, 7
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1a5
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek3_got__ld_bytes_available_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1a6
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp + 8], 0x20
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek4_n
call fcn.004f6800
mov eax, 0x1ad
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0x5ed1c3
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1ae
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], str.peek4_got__ld_bytes_left_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1b0
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], 0x5ed1f4
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1b2
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je OpenSemaphoreW
mov eax, 1
xor eax, 1
mov dword [esp + 4], 0x5ed213
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1b7
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + FindFirstChangeNotificationAx10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 0x5eb3d1
call fcn.004f6800
mov eax, 0x1bc
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_4_got__ld_bytes_n
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1bf
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je 0x504188
mov eax, 1
xor eax, 1
mov dword [esp + 4], 0x5ed240
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1cd
mov dword [ebp - 0x30], 2
call fcn.004f6080
lea eax, [ebp - 0x30]
mov dword [esp + FindResourceExWxc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_SetNamedPipeHandleState]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], str.Change_mode_n
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb FlushConsoleInputBuffer
mov eax, 0x1d0
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x5ee734
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 0x5ed25f
call fcn.004f6800
mov eax, 0x1d1
call fcn.004f6080
mov dword [esp + 4], 0x5ed089
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1d2
call fcn.004f6080
lea ecx, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 0x5ed26c
call fcn.004f6800
mov eax, 0x1d3
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_3b_n
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1d4
call fcn.004f6080
lea eax, [ebp - 0x34]
mov dword [esp + 4], ebx
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek5_n
call fcn.004f6800
mov eax, 0x1d5
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.peek5_got__ld_bytes_n
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1d6
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.peek5_got__ld_bytes_available_n
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1d7
call fcn.004f6080
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], 0x5ed2b7
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1d9
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je reloc.kernel32.dll_ResumeThread
mov eax, 1
xor eax, 1
mov dword [esp + 4], 0x5ed2d1
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1da
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 0x5eb3d1
call fcn.004f6800
mov eax, 0x1db
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0x5ed2e3
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1dd
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je 0x5045a0
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_5a_check_n
mov dword [esp], eax
call fcn.004f6800
cmp dword [ebp - 0x3c], 0xb
ja 0x503294
mov eax, 0x1df
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + GetConsoleProcessListx10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 0x14
mov dword [esp + 4], 0x5eb3d1
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1e3
call fcn.004f6080
lea eax, [ebp - 0x38]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp], esi
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek6a_n
call fcn.004f6800
mov eax, 0x1e4
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0x5ed318
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1e5
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], 0x5ed330
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword [ebp - 0x38]
test eax, eax
jne reloc.kernel32.dll_ReleaseActCtx
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x50333e
mov eax, 0x1ed
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x5ee734
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov ecx, dword [ebp - 0x48]
call ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile6a_n
call fcn.004f6800
mov eax, 0x1ee
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_6a_n
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1ef
call fcn.004f6080
lea edx, [ebp - 0x40]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov ecx, dword [ebp - 0x48]
call ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str._WriteFile6b_n
call fcn.004f6800
mov eax, 0x1f0
call fcn.004f6080
mov dword [esp + 4], 0x5ed3a7
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1f1
call fcn.004f6080
lea eax, [ebp - 0x38]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp], esi
mov eax, dword [ebp - 0x58]
call eax
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], str.Peek6_n
call fcn.004f6800
mov eax, 0x1f2
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.peek6_got__ld_bytes_n
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1f4
call fcn.004f6080
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], 0x5ed3d8
cmp eax, 0x15
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1f6
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je GetFileAttributesExW
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_6a_check_n
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1f7
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_n
call fcn.004f6800
mov eax, 0x1f8
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0x5ed3f8
cmp eax, 0xb
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1fa
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je reloc.kernel32.dll_SetCommBreak
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_6a_check_n
mov dword [esp], eax
call fcn.004f6800
cmp dword [ebp - 0x3c], 0xb
ja 0x5035c0
mov eax, 0x1fc
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp + 4], str.ReadFile_n
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x5035c4
mov eax, 0x200
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_7_n
call fcn.004f6800
mov eax, 0x201
call fcn.004f6080
mov dword [esp + 4], 0x5ed41c
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x203
mov edx, dword fs:[0x18]
mov dword [edx + 0x34], 0xdeadbeef
mov dword [ebp - 0x58], edx
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 0x14
test eax, eax
sete al
mov dword [esp + 4], str.ReadFile_7_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x204
call fcn.004f6080
mov dword [esp + 4], str.wrong_error_7_n
mov edx, dword [ebp - 0x58]
xor eax, eax
cmp dword [edx + 0x34], 0xea
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x205
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_7_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x206
call fcn.004f6080
lea ecx, [ebp - 0x3c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
lea ecx, [ebp - 0x28]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 0x5ed42e
call fcn.004f6800
mov eax, 0x207
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_7_n
cmp eax, 6
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x208
call fcn.004f6080
mov eax, dword [ebp - 0x40]
mov dword [esp + 4], ebx
mov dword [esp], str.More_bits
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 4], 0x5ed45f
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x50378c
mov eax, 0x20b
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp + GetPrivateProfileSectionNamesAx10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x5ee734
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_8_n
call fcn.004f6800
mov eax, 0x20c
call fcn.004f6080
mov dword [esp + 4], 0x5ed47d
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x20e
mov edx, dword fs:[0x18]
mov dword [edx + 0x34], 0xdeadbeef
mov dword [ebp - 0x58], edx
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + GetPrivateProfileStructAx10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp], esi
call edi
sub esp, 0x14
test eax, eax
sete al
mov dword [esp + 4], str.ReadFile_8_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x20f
call fcn.004f6080
mov dword [esp + 4], str.wrong_error_8_n
mov edx, dword [ebp - 0x58]
xor eax, eax
cmp dword [edx + 0x34], 0xea
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x210
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0x5ed4aa
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x211
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x28]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], eax
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.ReadFile_8_n
call fcn.004f6800
mov eax, 0x212
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_8_n
cmp eax, 7
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x213
call fcn.004f6080
mov eax, dword [ebp - 0x40]
mov dword [esp + 4], ebx
mov dword [esp], 0x5ee734
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 4], 0x5ed4c0
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x503951
mov eax, 0x21a
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + GetSystemDirectoryAx10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x5ee734
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_9_n
call fcn.004f6800
mov eax, 0x21b
call fcn.004f6080
mov dword [esp + 4], 0x5ed4de
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x21c
call fcn.004f6080
lea ecx, [ebp - 0x40]
mov dword [esp], esi
mov dword [esp + 0xc], ecx
mov dword [esp + GetSystemTimeAsFileTimex10], 0
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x48]
call eax
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_9_n
call fcn.004f6800
mov eax, 0x21d
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_9_n
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 0xdeadbeef
mov dword [ebp - 0x58], eax
mov eax, 0x21f
call fcn.004f6080
lea edx, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], 4
mov edx, dword [ebp - 0x44]
mov dword [esp], edx
call edi
sub esp, 0x14
test eax, eax
sete al
mov dword [esp + 4], 0x5ed4f0
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x220
call fcn.004f6080
mov dword [esp + 4], str.wrong_error_9_n
mov eax, dword [ebp - 0x58]
cmp dword [eax + 0x34], 0xea
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x221
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_9_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x28]
mov dword [eax + 0x34], 0xdeadbeef
mov dword [esp], ecx
mov eax, dword [ebp - 0x44]
mov ecx, 4
call fcn.005007e0
mov dword [ebp - 0x5c], eax
mov eax, 0x224
call fcn.004f6080
mov dword [esp + 4], 0x5ed521
mov edx, dword [ebp - 0x5c]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x225
call fcn.004f6080
mov dword [esp + 4], str.wrong_error_9_n
mov ecx, dword [ebp - 0x58]
xor eax, eax
cmp dword [ecx + 0x34], 0xea
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x226
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + GetUserGeoID], str.read_got__ld_bytes_9_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x24]
mov dword [esp], ecx
mov eax, dword [ebp - 0x44]
mov ecx, 0x20
call fcn.005007e0
mov dword [ebp - 0x58], eax
mov eax, 0x228
call fcn.004f6080
mov dword [esp + 4], str.RpcReadFile_9_n
mov edx, dword [ebp - 0x58]
mov dword [esp], edx
call fcn.004f6800
mov eax, 0x229
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_9_n
cmp eax, 3
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x22a
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je GetVolumePathNameA
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_check_9_n
mov dword [esp], eax
call fcn.004f6800
cmp dword [ebp - 0x3c], 3
jbe 0x50426c
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x503c0d
mov eax, 0x23f
call fcn.004f6080
lea eax, [ebp - 0x40]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xa
mov dword [esp + 4], str.More_bits
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov ecx, dword [ebp - 0x48]
call ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_10_n
call fcn.004f6800
mov eax, 0x240
call fcn.004f6080
mov dword [esp + 4], str.write_file_len_10_n
xor eax, eax
cmp dword [ebp - 0x40], 0xa
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x241
call fcn.004f6080
lea edx, [ebp - 0x40]
mov dword [esp + GlobalAllocx10], 0
mov dword [esp + 0xc], edx
mov dword [esp + GlobalFindAtomA], 0xb
mov dword [esp + 4], 0x5ee734
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
mov ecx, dword [ebp - 0x48]
call ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], str.WriteFile_10_n
call fcn.004f6800
mov eax, 0x242
call fcn.004f6080
mov dword [esp + 4], 0x5ed54f
xor eax, eax
cmp dword [ebp - 0x40], 0xb
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 0xdeadbeef
mov dword [ebp - 0x48], eax
mov eax, 0x244
call fcn.004f6080
lea ecx, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + GlobalHandlex10], 0
mov dword [esp + 8], 4
mov dword [esp], esi
call edi
sub esp, 0x14
test eax, eax
sete al
mov dword [esp + 4], str.ReadFile_10_n
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x245
call fcn.004f6080
mov dword [esp + 4], 0x5ed56f
mov eax, dword [ebp - 0x48]
cmp dword [eax + 0x34], 0xea
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x246
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0x5ed57f
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x28]
mov dword [eax + 0x34], 0xdeadbeef
mov eax, esi
mov dword [esp], ecx
mov ecx, 4
call fcn.005007e0
mov dword [ebp - 0x58], eax
mov eax, 0x249
call fcn.004f6080
mov dword [esp + 4], 0x5ed596
mov edx, dword [ebp - 0x58]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x24a
call fcn.004f6080
mov dword [esp + 4], 0x5ed56f
mov eax, dword [ebp - 0x48]
cmp dword [eax + 0x34], 0xea
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x24b
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0x5ed57f
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
lea eax, [ebp - 0x3c]
mov ecx, 0x20
lea edx, [ebp - 0x24]
mov dword [esp], eax
mov eax, esi
call fcn.005007e0
mov dword [ebp - 0x48], eax
mov eax, 0x24d
call fcn.004f6080
mov dword [esp + 4], str.RpcReadFile_10_n
mov edx, dword [ebp - 0x48]
mov dword [esp], edx
call fcn.004f6800
mov eax, 0x24e
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_10_n
cmp eax, 2
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x24f
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x65726f4d
je 0x504528
mov eax, 1
xor eax, 1
mov dword [esp + 4], 0x5ed5a6
mov dword [esp], eax
call fcn.004f6800
cmp dword [ebp - 0x3c], 2
ja 0x502204
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb IsBadCodePtr
lea ecx, [ebp - 0x3c]
mov edx, ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x48], eax
mov dword [eax + 0x34], 0xdeadbeef
mov eax, esi
mov dword [esp], ecx
mov ecx, 4
call fcn.005007e0
mov ebx, eax
mov eax, 0x255
call fcn.004f6080
xor eax, eax
test ebx, ebx
mov dword [esp + 4], str.RpcReadFile_10_n
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x256
call fcn.004f6080
mov dword [esp + 4], str.wrong_error_10_n
mov ebx, dword [ebp - 0x48]
xor eax, eax
cmp dword [ebx + 0x34], 0xea
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x257
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_10_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov dword [ebx + 0x34], 0xdeadbeef
mov eax, 0x259
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x28]
mov dword [esp + 8], 4
mov dword [esp + 4], eax
mov dword [esp], esi
call edi
sub esp, 0x14
test eax, eax
sete al
mov dword [esp + 4], 0x5ed562
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x25a
call fcn.004f6080
mov dword [esp + 4], 0x5ed56f
xor eax, eax
cmp dword [ebx + 0x34], 0xea
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x25b
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0x5ed57f
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
lea eax, [ebp - 0x3c]
mov ecx, 0x20
lea edx, [ebp - 0x24]
mov dword [esp], eax
mov eax, esi
call fcn.005007e0
mov ebx, eax
mov eax, 0x25d
call fcn.004f6080
mov dword [esp + 4], str.RpcReadFile_10_n
mov dword [esp], ebx
call fcn.004f6800
mov eax, 0x25e
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_10_n
cmp eax, 3
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x25f
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x20746942
je 0x504630
mov eax, 1
xor eax, 1
mov dword [esp + 4], 0x5ed5a6
mov dword [esp], eax
call fcn.004f6800
jmp 0x502204
cmp dword [ebp - 0x1d], 0x74696220
jne 0x501e29
xor eax, eax
cmp word [ebp - 0x19], 0x73
jne LockFile
jmp 0x501e2e
cmp dword [ebp - 0x28], 0x6b637542
jne 0x501dfa
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne 0x501dfa
jmp MapViewOfFile
cmp dword [ebp - 0x28], 0x6b637542
jne MoveFileA
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne 0x50216e
jmp 0x502173
cmp dword [ebp - 0x28], 0x6b637542
jne MultiByteToWideChar
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne 0x502a89
jmp OpenEventA
cmp dword [ebp - 0x1d], 0x74696220
jne OpenEventW
xor eax, eax
cmp word [ebp - 0x19], 0x73
jne OpenFile
jmp 0x5021a2
cmp dword [ebp - 0x28], 0x6b637542
jne 0x501d57
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne 0x501d57
jmp OpenMutexW
cmp dword [ebp - 0x28], 0x6b637542
jne OpenProcess
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne OpenSemaphoreA
jmp 0x502f89
cmp dword [ebp - 0x28], 0x6b637542
jne FindClose
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne OpenThread
jmp 0x502ef3
cmp dword [ebp - 0x28], 0x6b637542
jne 0x5020ce
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne OpenWaitableTimerW
jmp 0x5020d3
mov eax, 0x1b5
call fcn.004f6080
cmp dword [ebp - 0x21], 0x65726f4d
je 0x5045c8
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.pipe_content_4b_check_n
mov dword [esp], eax
call fcn.004f6800
jmp 0x5020f0
mov eax, 0x190
call fcn.004f6080
cmp dword [ebp - 0x21], 0x65726f4d
je 0x504610
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.pipe_content_3b_check_n
mov dword [esp], eax
call fcn.004f6800
jmp 0x501d79
xor edx, edx
xor eax, eax
mov dword [ebx + eax], edx
add eax, 4
cmp eax, 0x20
jb 0x504270
lea edx, [ebp - 0x3c]
mov ecx, 4
mov eax, dword fs:[0x18]
mov dword [ebp - 0x58], eax
mov dword [eax + 0x34], 0xdeadbeef
mov dword [esp], edx
mov eax, dword [ebp - 0x44]
mov edx, ebx
call fcn.005007e0
mov dword [ebp - 0x5c], eax
mov eax, 0x230
call fcn.004f6080
mov dword [esp + 4], str.RpcReadFile_9_n
mov edx, dword [ebp - 0x5c]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x231
call fcn.004f6080
mov dword [esp + 4], str.wrong_error_9_n
mov ecx, dword [ebp - 0x58]
xor eax, eax
cmp dword [ecx + 0x34], 0xea
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x232
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_9_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov ecx, dword [ebp - 0x58]
mov eax, 0x234
mov dword [ecx + 0x34], 0xdeadbeef
call fcn.004f6080
lea edx, [ebp - 0x3c]
mov dword [esp + ReadConsoleAx10], 0
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x28]
mov dword [esp + 8], 4
mov dword [esp + 4], edx
mov edx, dword [ebp - 0x44]
mov dword [esp], edx
call edi
sub esp, 0x14
test eax, eax
sete al
mov dword [esp + 4], 0x5ed4f0
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x235
call fcn.004f6080
mov dword [esp + 4], 0x5ed4fc
mov ecx, dword [ebp - 0x58]
xor eax, eax
cmp dword [ecx + 0x34], 0xea
sete al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x236
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_got__ld_bytes_9_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x24]
mov dword [esp], ecx
mov eax, dword [ebp - 0x44]
mov ecx, 0x20
call fcn.005007e0
mov dword [ebp - 0x58], eax
mov eax, 0x238
call fcn.004f6080
mov dword [esp + 4], str.RpcReadFile_9_n
mov edx, dword [ebp - 0x58]
mov dword [esp], edx
call fcn.004f6800
mov eax, 0x239
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + ReadFileEx], str.read_got__ld_bytes_9_n
cmp eax, 2
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x23a
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x65726f4d
je 0x504658
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_check_9_n
mov dword [esp], eax
call fcn.004f6800
jmp 0x503c09
mov eax, 0x1e7
call fcn.004f6080
lea eax, [ebp - 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp], esi
call edi
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 0x5eb3d1
call fcn.004f6800
mov eax, 0x1e8
call fcn.004f6080
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], str.read_6a_got__ld_bytes_n
cmp eax, 0xa
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004f6800
mov eax, 0x1ea
call fcn.004f6080
cmp dword [ebp - 0x2c], 0x65726f4d
je 0x5045f0
mov eax, 1
xor eax, 1
mov dword [esp + 4], str.content_6a_check_n
mov dword [esp], eax
call fcn.004f6800
jmp 0x50333a
cmp dword [ebp - 0x28], 0x6b637542
jne 0x50319d
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne 0x50319d
jmp 0x5031a2
cmp dword [ebp - 0x28], 0x74696220
jne SearchPathA
xor eax, eax
cmp word [ebp - 0x24], 0x73
jne SearchPathW
jmp 0x503eaa
cmp dword [ebp - 0x28], 0x6b637542
jne GetFileType
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne GetFileType
jmp SetCommState
cmp dword [ebp - 0x28], 0x6b637542
jne SetCommTimeouts
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne 0x5034cf
jmp SetConsoleActiveScreenBuffer
cmp dword [ebp - 0x28], 0x6b637542
jne GetConsoleOriginalTitleW
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne GetConsoleOriginalTitleW
jmp 0x50323b
cmp dword [ebp - 0x1d], 0x74696220
jne PostQueuedCompletionStatus
xor eax, eax
cmp word [ebp - 0x19], 0x73
jne SetConsoleCursorPosition
jmp 0x50421c
cmp dword [ebp - 0x28], 0x74696220
jne SetConsoleMode
xor eax, eax
cmp word [ebp - 0x24], 0x73
jne ReplaceFileA
jmp SetConsoleOutputCP
cmp dword [ebp - 0x1d], 0x74696220
jne QueryActCtxW
xor eax, eax
cmp word [ebp - 0x19], 0x73
jne SetConsoleScreenBufferInfoEx
jmp 0x504254
cmp dword [ebp - 0x28], 0x6b637542
jne LocalSize
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne LocalSize
jmp 0x504086
cmp dword [ebp - 0x28], 0x74696220
jne SetConsoleTextAttribute
xor eax, eax
cmp word [ebp - 0x24], 0x73
jne 0x504439
jmp RegisterWaitForSingleObject
cmp dword [ebp - 0x28], 0x6b637542
jne SetConsoleTitleA
xor eax, eax
cmp dword [ebp - 0x25], 0x74656b
jne 0x503be7
jmp SetConsoleTitleW