Function at 0x410c20
Capabilities:
Access peb ldr_data
Enumerate pe sections
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4194a8
push 0x4181f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd8
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov ecx, 8
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
mov ecx, 0xa
lea edi, [ebp - 0x68]
rep stosd dword es:[edi], eax
push 0x465
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, eax
push 4
push 2
push 0x10
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov edi, eax
push 0
push 0x82
mov ecx, dword [0x41e75c]
push ecx
mov ebx, dword [sym.imp.USER32.dll_LoadBitmapA]
call ebx
push eax
push edi
call dword [sym.imp.COMCTL32.dll_ImageList_Add]
push 0
push 0x7f
mov edx, dword [0x41e75c]
push edx
call ebx
push eax
push edi
call dword [sym.imp.COMCTL32.dll_ImageList_Add]
push 0
push 0x84
mov eax, dword [0x41e75c]
push eax
call ebx
push eax
push edi
call dword [sym.imp.COMCTL32.dll_ImageList_Add]
push edi
push 1
push 0x1003
push esi
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
call ebx
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x2c], str.Item_To_Compare
mov dword [ebp - 0x30], 0xbe
lea ecx, [ebp - 0x38]
push ecx
push 0
push 0x101b
push esi
call ebx
mov dword [ebp - 0x30], 0x64
push 0x41dec0
call fcn.00401aa0
add esp, 4
mov dword [ebp - 0x2c], eax
lea edx, [ebp - 0x38]
push edx
push 1
push 0x101b
push esi
call ebx
push 0x41e000
call fcn.00401aa0
add esp, 4
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x38]
push eax
push 2
push 0x101b
push esi
call ebx
push esi
call fcn.00401b60
add esp, 4
mov dword [ebp - 0x68], 3
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 4], 0
push str.filesize
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
xor eax, eax
mov ecx, dword [0x41dfc8]
cmp ecx, dword [0x41e108]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfc8]
push eax
push 0x41d49c
lea ecx, [ebp - 0xdc]
push ecx
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e108]
push eax
push 0x41d49c
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
mov eax, dword [0x41dfd4]
mov ecx, dword [eax + 0x3c]
xor edx, edx
mov eax, dword [0x41e114]
cmp ecx, dword [eax + 0x3c]
setne dl
mov dword [ebp - 0x4c], edx
push str.e_lfanew
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
mov eax, dword [0x41dfd4]
mov ecx, dword [eax + 0x3c]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov edx, dword [0x41e114]
mov eax, dword [edx + 0x3c]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
mov dword [ebp - 0x4c], 2
push str.FileHeader:
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x64]
push str.Machine
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov dx, word [ecx + 4]
xor eax, eax
mov ecx, dword [0x41e118]
cmp dx, word [ecx + 4]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
xor eax, eax
mov ecx, dword [0x41dfd8]
mov ax, word [ecx + 4]
push eax
mov edx, dword [str._04lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
xor edx, edx
mov eax, dword [0x41e118]
mov dx, word [eax + 4]
push edx
mov ecx, dword [str._04lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.NumberOfSections
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov ax, word [edx + 6]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp ax, word [edx + 6]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
xor ecx, ecx
mov edx, dword [0x41dfd8]
mov cx, word [edx + 6]
push ecx
mov eax, dword [str._04lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
xor eax, eax
mov ecx, dword [0x41e118]
mov ax, word [ecx + 6]
push eax
mov edx, dword [str._04lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.TimeDateStamp
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 8]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 8]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.PointerToSymbolTable
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xc]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0xc]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov edx, dword [0x41e118]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.NumberOfSymbols
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x10]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x10]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfOptionalHeader
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov cx, word [eax + 0x14]
xor edx, edx
mov eax, dword [0x41e118]
cmp cx, word [eax + 0x14]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
xor edx, edx
mov eax, dword [0x41dfd8]
mov dx, word [eax + 0x14]
push edx
mov ecx, dword [str._04lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
xor ecx, ecx
mov edx, dword [0x41e118]
mov cx, word [edx + 0x14]
push ecx
mov eax, dword [str._04lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
inc dword [ebp - 0x60]
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Characteristics
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov dx, word [ecx + 0x16]
xor eax, eax
mov ecx, dword [0x41e118]
cmp dx, word [ecx + 0x16]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor eax, eax
mov ecx, dword [0x41dfd8]
mov ax, word [ecx + 0x16]
push eax
mov edx, dword [str._04lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor edx, edx
mov eax, dword [0x41e118]
mov dx, word [eax + 0x16]
push edx
mov ecx, dword [str._04lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
mov dword [ebp - 0x4c], 2
push str.OptionalHeader:
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x64]
push str.Magic
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov dx, word [ecx + 0x18]
xor eax, eax
mov ecx, dword [0x41e118]
cmp dx, word [ecx + 0x18]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor eax, eax
mov ecx, dword [0x41dfd8]
mov ax, word [ecx + 0x18]
push eax
mov edx, dword [str._04lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor edx, edx
mov eax, dword [0x41e118]
mov dx, word [eax + 0x18]
push edx
mov ecx, dword [str._04lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.MajorLinkerVersion
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov al, byte [edx + 0x1a]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp al, byte [edx + 0x1a]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor ecx, ecx
mov edx, dword [0x41dfd8]
mov cl, byte [edx + 0x1a]
push ecx
mov eax, dword [0x41bc6c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor eax, eax
mov ecx, dword [0x41e118]
mov al, byte [ecx + 0x1a]
push eax
mov edx, dword [0x41bc6c]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.MinorLinkerVersion
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov cl, byte [eax + 0x1b]
xor edx, edx
mov eax, dword [0x41e118]
cmp cl, byte [eax + 0x1b]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor edx, edx
mov eax, dword [0x41dfd8]
mov dl, byte [eax + 0x1b]
push edx
mov ecx, dword [0x41bc6c]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor ecx, ecx
mov edx, dword [0x41e118]
mov cl, byte [edx + 0x1b]
push ecx
mov eax, dword [0x41bc6c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfCode
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x1c]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x1c]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x1c]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x1c]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfInitializedData
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x20]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x20]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x20]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x20]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfUninitializedData
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x24]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x24]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x24]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x24]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.AddressOfEntryPoint
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x28]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x28]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x28]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.BaseOfCode
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x2c]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x2c]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x2c]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x2c]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.BaseOfData
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x30]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x30]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x30]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x30]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.ImageBase
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x34]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x34]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x34]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SectionAlignment
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x38]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x38]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x38]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x38]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.FileAlignment
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x3c]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x3c]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x3c]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x3c]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.MajorOperatingSystemVersion
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov dx, word [ecx + 0x40]
xor eax, eax
mov ecx, dword [0x41e118]
cmp dx, word [ecx + 0x40]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor eax, eax
mov ecx, dword [0x41dfd8]
mov ax, word [ecx + 0x40]
push eax
mov edx, dword [str._04lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor edx, edx
mov eax, dword [0x41e118]
mov dx, word [eax + 0x40]
push edx
mov ecx, dword [str._04lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.MinorOperatingSystemVersion
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov ax, word [edx + 0x42]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp ax, word [edx + 0x42]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor ecx, ecx
mov edx, dword [0x41dfd8]
mov cx, word [edx + 0x42]
push ecx
mov eax, dword [str._04lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor eax, eax
mov ecx, dword [0x41e118]
mov ax, word [ecx + 0x42]
push eax
mov edx, dword [str._04lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.MajorImageVersion
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov cx, word [eax + 0x44]
xor edx, edx
mov eax, dword [0x41e118]
cmp cx, word [eax + 0x44]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor edx, edx
mov eax, dword [0x41dfd8]
mov dx, word [eax + 0x44]
push edx
mov ecx, dword [str._04lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor ecx, ecx
mov edx, dword [0x41e118]
mov cx, word [edx + 0x44]
push ecx
mov eax, dword [str._04lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.MinorImageVersion
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov dx, word [ecx + 0x46]
xor eax, eax
mov ecx, dword [0x41e118]
cmp dx, word [ecx + 0x46]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor eax, eax
mov ecx, dword [0x41dfd8]
mov ax, word [ecx + 0x46]
push eax
mov edx, dword [str._04lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor edx, edx
mov eax, dword [0x41e118]
mov dx, word [eax + 0x46]
push edx
mov ecx, dword [str._04lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.MajorSubsystemVersion
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov ax, word [edx + 0x48]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp ax, word [edx + 0x48]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor ecx, ecx
mov edx, dword [0x41dfd8]
mov cx, word [edx + 0x48]
push ecx
mov eax, dword [str._04lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor eax, eax
mov ecx, dword [0x41e118]
mov ax, word [ecx + 0x48]
push eax
mov edx, dword [str._04lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.MinorSubsystemVersion
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov cx, word [eax + 0x4a]
xor edx, edx
mov eax, dword [0x41e118]
cmp cx, word [eax + 0x4a]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor edx, edx
mov eax, dword [0x41dfd8]
mov dx, word [eax + 0x4a]
push edx
mov ecx, dword [str._04lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor ecx, ecx
mov edx, dword [0x41e118]
mov cx, word [edx + 0x4a]
push ecx
mov eax, dword [str._04lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Win32VersionValue
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x4c]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x4c]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x4c]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x4c]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfImage
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x50]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x50]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x50]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfHeaders
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x54]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x54]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x54]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x54]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.CheckSum
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x58]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x58]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x58]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x58]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Subsystem
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov ax, word [edx + 0x5c]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp ax, word [edx + 0x5c]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor ecx, ecx
mov edx, dword [0x41dfd8]
mov cx, word [edx + 0x5c]
push ecx
mov eax, dword [str._04lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor eax, eax
mov ecx, dword [0x41e118]
mov ax, word [ecx + 0x5c]
push eax
mov edx, dword [str._04lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.DllCharacteristics
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov cx, word [eax + 0x5e]
xor edx, edx
mov eax, dword [0x41e118]
cmp cx, word [eax + 0x5e]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
xor edx, edx
mov eax, dword [0x41dfd8]
mov dx, word [eax + 0x5e]
push edx
mov ecx, dword [str._04lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
xor ecx, ecx
mov edx, dword [0x41e118]
mov cx, word [edx + 0x5e]
push ecx
mov eax, dword [str._04lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfStackReserve
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x60]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x60]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x60]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x60]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfStackCommit
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x64]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x64]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x64]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x64]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfHeapReserve
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x68]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x68]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x68]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x68]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.SizeOfHeapCommit
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x6c]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x6c]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x6c]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x6c]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.LoaderFlags
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x70]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x70]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x70]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x70]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.NumberOfRvaAndSizes
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x74]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x74]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x74]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x74]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.DataDirectories:
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x4c], 2
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x64]
push str.ExportTable_RVA
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x78]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x78]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x78]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x78]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.ExportTable_Size
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x7c]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x7c]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x7c]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x7c]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.ImportTable_RVA
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x80]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x80]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x80]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x80]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.ImportTable_Size
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x84]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x84]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x84]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x84]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Resource_RVA
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x88]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x88]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x88]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x88]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Resource_Size
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x8c]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x8c]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x8c]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x8c]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Exception_RVA
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x90]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x90]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x90]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x90]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Exception_Size
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x94]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0x94]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x94]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0x94]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Security_RVA
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x98]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0x98]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0x98]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0x98]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Security_Size
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0x9c]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0x9c]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0x9c]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0x9c]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Relocation_RVA
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xa0]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0xa0]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xa0]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0xa0]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Relocation_Size
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xa4]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0xa4]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xa4]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0xa4]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Debug_RVA
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xa8]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0xa8]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xa8]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0xa8]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Debug_Size
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xac]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0xac]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xac]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0xac]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Copyright_RVA
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xb0]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0xb0]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xb0]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0xb0]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Copyright_Size
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xb4]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0xb4]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xb4]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0xb4]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Globalptr_RVA
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xb8]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0xb8]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xb8]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0xb8]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.Globalptr_Size
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xbc]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0xbc]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xbc]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0xbc]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.TlsTable_RVA
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xc0]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0xc0]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xc0]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0xc0]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.TlsTable_Size
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xc4]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0xc4]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xc4]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0xc4]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.LoadConfig_RVA
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xc8]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0xc8]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xc8]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0xc8]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.LoadConfig_Size
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xcc]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0xcc]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xcc]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0xcc]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.BoundImport_RVA
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xd0]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0xd0]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xd0]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0xd0]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.BoundImport_Size
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xd4]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0xd4]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xd4]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0xd4]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.IAT_RVA
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xd8]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0xd8]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xd8]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0xd8]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.IAT_Size
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xdc]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0xdc]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xdc]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0xdc]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.DelayImport_RVA
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xe0]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0xe0]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xe0]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0xe0]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.DelayImport_Size
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xe4]
xor edx, edx
mov eax, dword [0x41e118]
cmp ecx, dword [eax + 0xe4]
setne dl
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xe4]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41e118]
mov edx, dword [ecx + 0xe4]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.COM_RVA
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xe8]
xor eax, eax
mov ecx, dword [0x41e118]
cmp edx, dword [ecx + 0xe8]
setne al
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41dfd8]
mov ecx, dword [eax + 0xe8]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov edx, dword [0x41e118]
mov eax, dword [edx + 0xe8]
push eax
mov ecx, dword [str._08lX]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
push str.COM_Size
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [0x41dfd8]
mov eax, dword [edx + 0xec]
xor ecx, ecx
mov edx, dword [0x41e118]
cmp eax, dword [edx + 0xec]
setne cl
mov dword [ebp - 0x4c], ecx
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1007
push esi
call ebx
inc dword [ebp - 0x60]
mov ecx, dword [0x41dfd8]
mov edx, dword [ecx + 0xec]
push edx
mov eax, dword [str._08lX]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
add esp, 0xc
lea edx, [ebp - 0x68]
push edx
push 0
push 0x1006
push esi
call ebx
inc dword [ebp - 0x60]
mov eax, dword [0x41e118]
mov ecx, dword [eax + 0xec]
push ecx
mov edx, dword [str._08lX]
push edx
lea eax, [ebp - 0xdc]
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x68]
push ecx
push 0
push 0x1006
push esi
call ebx
mov dword [ebp - 0x60], 0
inc dword [ebp - 0x64]
mov edx, dword [0x41dfd8]
mov ax, word [edx + 6]
mov ecx, dword [0x41e118]
mov cx, word [ecx + 6]
cmp ax, cx
jbe 0x413a4d
and eax, 0xffff
jmp 0x413a55
and ecx, 0xffff
mov eax, ecx
mov dword [ebp - 0xe4], eax
mov edx, dword [0x41dfe4]
mov dword [ebp - 0x74], edx
mov eax, dword [0x41e124]
mov dword [ebp - 0x78], eax
xor eax, eax
mov dword [ebp - 0x70], eax