Function at 0x448220
Capabilities:
Hash data using fnv
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51e1d7
mov eax, dword fs:[0]
push eax
sub esp, 0x21c
mov eax, dword [0x5588a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x214], ebx
mov dword [ebp - 0x1f0], 0
mov eax, dword fs:[0x2c]
mov ecx, dword [0x55d980]
mov dword [ebp - 4], 0
mov esi, dword [eax + ecx*4]
mov eax, dword [0x55cc58]
cmp eax, dword [esi + 0x104]
jg 0x448840
mov eax, dword [0x55cc84]
cmp eax, dword [esi + 0x104]
jg 0x448aa3
push 0
mov dword [ebx + 0x10], 0
mov ecx, ebx
mov dword [ebx + 0x14], 0xf
push 0x5299ab
mov byte [ebx], 0
call fcn.004188f0
push 0x104
lea eax, [ebp - 0x114]
mov dword [ebp - 4], 0
push 0
push eax
mov dword [ebp - 0x1f0], 1
call fcn.00408650
mov edx, dword [ebp + 0xc]
add esp, 0xc
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [ebp + 0xe]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [ebp + 0xf]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp + 0xc]
imul esi, ecx, 0x1000193
mov ecx, 0x55cc30
push esi
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.00402f20
mov eax, dword [ebp - 0x1e0]
test eax, eax
jne 0x448422
cmp dword [0x55cc38], 0x71c71c7
je 0x448836
mov dword [ebp - 0x1ec], 0x55cc34
push 0x24
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x1e8], eax
call fcn.004173d0
mov dword [ebp - 0x1e8], eax
add esp, 4
lea edi, [eax + 8]
mov eax, dword [ebp + 0xc]
mov dword [edi], eax
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0xf
mov byte [edi + 4], 0
mov eax, dword [0x55cc38]
inc eax
mov dword [ebp - 4], 0x11
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52d020]
mov eax, dword [0x55cc4c]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52d020]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [0x55cc30]
seta al
test al, al
je 0x448406
mov ecx, 0x55cc30
call fcn.004049f0
push esi
push edi
lea eax, [ebp - 0x228]
mov ecx, 0x55cc30
push eax
call fcn.00402f20
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1e0], eax
jmp 0x44840c
mov ecx, dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
mov byte [ebp - 4], 0
push ecx
push esi
mov ecx, 0x55cc30
call fcn.00413090
cmp dword [eax + 0x20], 0x10
lea esi, [eax + 0xc]
jb 0x44842d
mov esi, dword [esi]
mov edx, dword [ebp + 0x10]
movzx eax, dl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dh
xor ecx, eax
movzx eax, byte [ebp + 0x12]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [ebp + 0x13]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp + 0x10]
imul edi, ecx, 0x1000193
mov ecx, 0x55cc5c
push edi
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.00419db0
mov eax, dword [ebp - 0x1e8]
test eax, eax
jne 0x448579
cmp dword [0x55cc64], 0x71c71c7
je 0x448836
mov dword [ebp - 0x1e4], 0x55cc60
push 0x24
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x1e0], eax
call fcn.004173d0
mov dword [ebp - 0x1e0], eax
add esp, 4
lea ecx, [eax + 8]
mov eax, dword [ebp + 0x10]
mov dword [ecx], eax
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x18], 0xf
mov byte [ecx + 4], 0
mov eax, dword [0x55cc64]
inc eax
mov dword [ebp - 4], 0x13
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52d020]
mov eax, dword [0x55cc78]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x52d020]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
comiss xmm1, dword [0x55cc5c]
seta al
test al, al
je 0x44855d
mov ecx, 0x55cc5c
call fcn.00406950
mov eax, dword [ebp - 0x1e0]
mov ecx, 0x55cc5c
push edi
add eax, 8
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00419db0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1e8], eax
jmp 0x448563
mov ecx, dword [ebp - 0x1ec]
push dword [ebp - 0x1e0]
mov byte [ebp - 4], 0
push ecx
push edi
mov ecx, 0x55cc5c
call fcn.004095d0
cmp dword [eax + 0x20], 0x10
lea edi, [eax + 0xc]
jb 0x448584
mov edi, dword [edi]
push 0x104
lea eax, [ebp - 0x114]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x448c06
lea esi, [ebp - 0x114]
mov byte [ebp - 0x1e8], 0
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4485b1
push dword [ebp - 0x1e8]
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push esi
push eax
call fcn.00407570
add esp, 0x10
mov dword [ebp - 0x1f0], 3
mov ecx, str.Pulse_SecureLogging
mov dword [ebp - 4], 0x14
mov byte [ebp - 0x1e8], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4485f1
push dword [ebp - 0x1e8]
sub ecx, edx
lea eax, [ebp - 0x20c]
push ecx
push str.Pulse_SecureLogging
push eax
call fcn.00407570
add esp, 0x10
mov dword [ebp - 0x1f0], 7
lea eax, [ebp - 0x20c]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x12c]
call fcn.00412da0
mov edx, dword [ebp - 0x1f8]
mov byte [ebp - 4], 0x14
cmp edx, 8
jb 0x448679
mov ecx, dword [ebp - 0x20c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44866f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448bdf
push edx
push ecx
call fcn.004124e0
add esp, 8
lea eax, [ebp - 0x12c]
push eax
call fcn.0040d430
add esp, 4
test al, al
je 0x44869f
lea eax, [ebp - 0x12c]
push eax
call fcn.00402dd0
add esp, 4
test al, al
jne 0x4486fd
push 0x55ccd4
push 0x401990
push 0x55ccd0
mov dword [ebp - 0x1e4], 0
call fcn.00419f80
add esp, 0xc
test eax, eax
je 0x448be4
lea eax, [ebp - 0x1e4]
mov dword [ebp - 0x1e0], 0x55ccd4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.0041c230
add esp, 8
cmp dword [ebp - 0x1e4], 0
jne 0x448be9
test al, al
je 0x44880d
mov ecx, edi
mov byte [ebp - 0x1e8], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448710
push dword [ebp - 0x1e8]
sub ecx, edx
lea eax, [ebp - 0x20c]
push ecx
push edi
push eax
call fcn.00407570
add esp, 0x10
mov dword [ebp - 0x1f0], 0xf
lea eax, [ebp - 0x20c]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x12c]
call fcn.00412da0
mov edx, dword [ebp - 0x1f8]
mov byte [ebp - 4], 0x14
cmp edx, 8
jb 0x448794
mov ecx, dword [ebp - 0x20c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44878a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448c01
push edx
push ecx
call fcn.004124e0
add esp, 8
cmp dword [ebp - 0x118], 8
lea ecx, [ebp - 0x1f1]
push ecx
push dword [ebp - 0x11c]
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.00416440
add esp, 0x10
mov dword [ebp - 0x1f0], 0x3f
cmp dword [ebp - 0x1f8], 0x10
lea edx, [ebp - 0x20c]
mov byte [ebp - 4], 0x17
cmovae edx, dword [ebp - 0x20c]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4487f0
sub ecx, esi
push ecx
push edx
mov ecx, ebx
call fcn.004188f0
lea ecx, [ebp - 0x20c]
call fcn.00411320
lea ecx, [ebp - 0x12c]
call fcn.00403390
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00410cd0
mov esp, ebp
pop ebp
ret
push str.unordered_map_set_too_long
call fcn.00416710
push 0x55cc58
call fcn.00406cf0
add esp, 4
cmp dword [0x55cc58], 0xffffffff
jne 0x448288
push 0x11
push str.PROGRAMFILES_X86_
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 4], 1
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0xf
mov byte [ebp - 0x1d0], 0
call fcn.004188f0
push 0xc
push str.PROGRAMW6432
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 2
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
call fcn.004188f0
push 0xc
push str.PROGRAMFILES
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 3
mov dword [ebp - 0x19c], 3
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0xf
mov byte [ebp - 0x198], 0
call fcn.004188f0
push 0xb
push str.ProgramData
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 4
mov dword [ebp - 0x180], 4
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
call fcn.004188f0
push 0xb
push str.PROGRAMDATA
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 5
mov dword [ebp - 0x164], 4
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0xf
mov byte [ebp - 0x160], 0
call fcn.004188f0
push 6
push str.PUBLIC
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 6
mov dword [ebp - 0x148], 5
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
call fcn.004188f0
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 7
push 0x24
mov dword [ebp - 0x1e4], eax
lea edi, [ebp - 0x12c]
mov dword [0x55cc30], 0
mov dword [0x55cc34], 0
mov dword [0x55cc38], 0
call fcn.004173d0
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [0x55cc34], eax
mov dword [0x55cc3c], 0
mov dword [0x55cc40], 0
mov dword [0x55cc44], 0
mov byte [ebp - 4], 9
mov dword [0x55cc48], 7
push eax
push 0x10
mov ecx, 0x55cc3c
mov dword [0x55cc4c], 8
mov dword [0x55cc30], 0x3f800000
call fcn.00403e30
push edi
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 0xa
push eax
mov ecx, 0x55cc30
call fcn.0040c630
push 0x40bab0
push 6
push 0x1c
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 1
push eax
call fcn.00411ed0
push 0x5264c0
call fcn.00412b90
push 0x55cc58
mov byte [ebp - 4], 0
call fcn.0040c180
add esp, 8
jmp 0x448288
push 0x55cc84
call fcn.00406cf0
add esp, 4
cmp dword [0x55cc84], 0xffffffff
jne 0x448299
push 0x18
push str.PulseExeCustomAction.log
lea ecx, [ebp - 0x20c]
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 0xf
mov byte [ebp - 0x20c], 0
call fcn.004188f0
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 0xc
push 0x24
mov dword [ebp - 0x1e4], eax
lea esi, [ebp - 0x1f4]
mov dword [0x55cc5c], 0
mov dword [0x55cc60], 0
mov dword [0x55cc64], 0
call fcn.004173d0
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [0x55cc60], eax
mov dword [0x55cc68], 0
mov dword [0x55cc6c], 0
mov dword [0x55cc70], 0
push eax
push 0x10
mov ecx, 0x55cc68
mov byte [ebp - 4], 0xe
mov dword [0x55cc74], 7
mov dword [0x55cc78], 8
mov dword [0x55cc5c], 0x3f800000
call fcn.00405f60
push esi
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 0xf
push eax
mov ecx, 0x55cc5c
call fcn.004092a0
push 0x412360
push 1
push 0x1c
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 0xb
push eax
call fcn.00411ed0
push 0x5264d0
call fcn.00412b90
push 0x55cc84
mov byte [ebp - 4], 0
call fcn.0040c180
add esp, 8
jmp 0x448299
call fcn.004198a0
call fcn.00403810
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x1e4]
push eax
push str.create_directories
call fcn.004167b0
call fcn.004198a0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xb0
lea ecx, [ebp - 0x1dc]
mov edi, eax
call fcn.00405eb0
push 1
push 3
lea ecx, [ebp - 0x1dc]
call fcn.0040e710
push esi
lea eax, [ebp - 0x1cc]
mov dword [ebp - 4], 0x18
push str.The_env_var:
push eax
call fcn.0040f440
add esp, 8
push eax
call fcn.0040f440
add esp, 8
lea eax, [ebp - 0x1cc]
cmp edi, 0xcb
jne 0x448c70
push str._was_not_found__ERROR_ENVVAR_NOT_FOUND_
push eax
call fcn.0040f440
add esp, 8
jmp 0x448c86
push str._returned:
push eax
call fcn.0040f440
add esp, 8
mov ecx, eax
push edi
call fcn.00406b30
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.0040efe0
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x19
call fcn.004194f0
push 0x54df30
lea eax, [ebp - 0x220]
push eax
call fcn.0041dce0
int3