Function at 0x416930
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1dc
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0x318839f8
mov eax, dword [ebp - 0x5c]
mov ecx, eax
sub ecx, 0x7f3f0ef3
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], ecx
jg 0x417217
jmp 0x4169ad
mov eax, dword [ebp - 0x60]
sub eax, 0x7c25ecd3
mov dword [ebp - 0x68], eax
jg 0x4171fe
jmp 0x4169c3
mov eax, dword [ebp - 0x60]
sub eax, 0x7bc28901
mov dword [ebp - 0x6c], eax
jg 0x4171e5
jmp 0x4169d9
mov eax, dword [ebp - 0x60]
sub eax, 0x7858a908
mov dword [ebp - 0x70], eax
jg 0x4171cc
jmp 0x4169ef
mov eax, dword [ebp - 0x60]
sub eax, 0x7653b00f
mov dword [ebp - 0x74], eax
jg 0x4171b3
jmp 0x416a05
mov eax, dword [ebp - 0x60]
sub eax, 0x75d23060
mov dword [ebp - 0x78], eax
jg 0x41719a
jmp 0x416a1b
mov eax, dword [ebp - 0x60]
sub eax, 0x68f0ccea
mov dword [ebp - 0x7c], eax
jg 0x417181
jmp 0x416a31
mov eax, dword [ebp - 0x60]
sub eax, 0x5ff197ee
mov dword [ebp - 0x80], eax
jg 0x417168
jmp 0x416a47
mov eax, dword [ebp - 0x60]
sub eax, 0x5f429e2a
mov dword [ebp - 0x84], eax
jg 0x41714f
jmp 0x416a60
mov eax, dword [ebp - 0x60]
sub eax, 0x53063a25
mov dword [ebp - 0x88], eax
jg 0x417136
jmp 0x416a79
mov eax, dword [ebp - 0x60]
sub eax, 0x52322578
mov dword [ebp - 0x8c], eax
jg 0x41711d
jmp 0x416a92
mov eax, dword [ebp - 0x60]
sub eax, 0x50508e8d
mov dword [ebp - 0x90], eax
jg 0x417104
jmp 0x416aab
mov eax, dword [ebp - 0x60]
sub eax, 0x4cf214a8
mov dword [ebp - 0x94], eax
jg 0x4170eb
jmp 0x416ac4
mov eax, dword [ebp - 0x60]
sub eax, 0x4a0161b0
mov dword [ebp - 0x98], eax
jg 0x4170d2
jmp 0x416add
mov eax, dword [ebp - 0x60]
sub eax, 0x3643d272
mov dword [ebp - 0x9c], eax
jg 0x4170b9
jmp 0x416af6
mov eax, dword [ebp - 0x60]
sub eax, 0x32b2e155
mov dword [ebp - 0xa0], eax
jg 0x4170a0
jmp 0x416b0f
mov eax, dword [ebp - 0x60]
sub eax, 0x318839f7
mov dword [ebp - 0xa4], eax
jg 0x417087
jmp 0x416b28
mov eax, dword [ebp - 0x60]
sub eax, 0x2ddab730
mov dword [ebp - 0xa8], eax
jg 0x41706e
jmp 0x416b41
mov eax, dword [ebp - 0x60]
sub eax, 0x2ca05ba2
mov dword [ebp - 0xac], eax
jg 0x417055
jmp 0x416b5a
mov eax, dword [ebp - 0x60]
sub eax, 0x256e9833
mov dword [ebp - 0xb0], eax
jg 0x41703c
jmp 0x416b73
mov eax, dword [ebp - 0x60]
sub eax, 0xeb80530
mov dword [ebp - 0xb4], eax
jg 0x417023
jmp 0x416b8c
mov eax, dword [ebp - 0x60]
sub eax, 0x9780eae
mov dword [ebp - 0xb8], eax
jg 0x41700a
jmp 0x416ba5
mov eax, dword [ebp - 0x60]
sub eax, 0xf85733ac
mov dword [ebp - 0xbc], eax
jg 0x416ff1
jmp 0x416bbe
mov eax, dword [ebp - 0x60]
sub eax, 0xf2a5ec13
mov dword [ebp - 0xc0], eax
jg 0x416fd8
jmp 0x416bd7
mov eax, dword [ebp - 0x60]
sub eax, 0xf19817a7
mov dword [ebp - 0xc4], eax
jg 0x416fbf
jmp 0x416bf0
mov eax, dword [ebp - 0x60]
sub eax, 0xea4dea05
mov dword [ebp - 0xc8], eax
jg 0x416fa6
jmp 0x416c09
mov eax, dword [ebp - 0x60]
sub eax, 0xe6bad59d
mov dword [ebp - 0xcc], eax
jg 0x416f8d
jmp 0x416c22
mov eax, dword [ebp - 0x60]
sub eax, 0xe0fceb68
mov dword [ebp - 0xd0], eax
jg 0x416f74
jmp 0x416c3b
mov eax, dword [ebp - 0x60]
sub eax, 0xdc317691
mov dword [ebp - 0xd4], eax
jg 0x416f5b
jmp 0x416c54
mov eax, dword [ebp - 0x60]
sub eax, 0xc3ca634f
mov dword [ebp - 0xd8], eax
jg 0x416f42
jmp 0x416c6d
mov eax, dword [ebp - 0x60]
sub eax, 0xbe818f0c
mov dword [ebp - 0xdc], eax
jg 0x416f29
jmp 0x416c86
mov eax, dword [ebp - 0x60]
sub eax, 0xbdcc37fd
mov dword [ebp - 0xe0], eax
jg 0x416f10
jmp 0x416c9f
mov eax, dword [ebp - 0x60]
sub eax, 0xb4ebf393
mov dword [ebp - 0xe4], eax
jg 0x416ef7
jmp 0x416cb8
mov eax, dword [ebp - 0x60]
sub eax, 0xb12246ec
mov dword [ebp - 0xe8], eax
jg 0x416ede
jmp 0x416cd1
mov eax, dword [ebp - 0x60]
sub eax, 0xae894cab
mov dword [ebp - 0xec], eax
jg 0x416ec5
jmp 0x416cea
mov eax, dword [ebp - 0x60]
sub eax, 0xac5a651e
mov dword [ebp - 0xf0], eax
jg 0x416eac
jmp 0x416d03
mov eax, dword [ebp - 0x60]
sub eax, 0xa8ab2456
mov dword [ebp - 0xf4], eax
jg 0x416e93
jmp 0x416d1c
mov eax, dword [ebp - 0x60]
sub eax, 0x985534e2
mov dword [ebp - 0xf8], eax
jg 0x416e7a
jmp 0x416d35
mov eax, dword [ebp - 0x60]
sub eax, 0x90abc992
mov dword [ebp - 0xfc], eax
jg 0x416e61
jmp 0x416d4e
mov eax, dword [ebp - 0x60]
sub eax, 0x8f43664c
mov dword [ebp - 0x100], eax
jg 0x416e48
jmp 0x416d67
mov eax, dword [ebp - 0x60]
sub eax, 0x88743bf7
mov dword [ebp - 0x104], eax
jg 0x416e2f
jmp 0x416d80
mov eax, dword [ebp - 0x60]
sub eax, 0x8422acd3
mov dword [ebp - 0x108], eax
jg 0x416e16
jmp 0x416d99
mov eax, dword [ebp - 0x60]
sub eax, 0x81a3adf8
mov dword [ebp - 0x10c], eax
jg 0x416dfd
jmp 0x416db2
mov eax, dword [ebp - 0x60]
sub eax, 0x809c3cd0
mov dword [ebp - 0x110], eax
je 0x417411
jmp 0x416dcb
mov eax, dword [ebp - 0x60]
sub eax, 0x80dd6e4a
mov dword [ebp - 0x114], eax
je 0x4174f8
jmp 0x416de4
mov eax, dword [ebp - 0x60]
sub eax, 0x8105efa2
mov dword [ebp - 0x118], eax
je 0x41727a
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x81a3adf9
mov dword [ebp - 0x11c], eax
je 0x4172e0
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x8422acd4
mov dword [ebp - 0x120], eax
je 0x417648
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x88743bf8
mov dword [ebp - 0x124], eax
je 0x41768e
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x8f43664d
mov dword [ebp - 0x128], eax
je 0x417563
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x90abc993
mov dword [ebp - 0x12c], eax
je 0x41770f
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x985534e3
mov dword [ebp - 0x130], eax
je 0x41757e
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xa8ab2457
mov dword [ebp - 0x134], eax
je 0x417668
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xac5a651f
mov dword [ebp - 0x138], eax
je 0x417614
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xae894cac
mov dword [ebp - 0x13c], eax
je 0x417635
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xb12246ed
mov dword [ebp - 0x140], eax
je 0x4176a1
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xb4ebf394
mov dword [ebp - 0x144], eax
je 0x41732f
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xbdcc37fe
mov dword [ebp - 0x148], eax
je 0x4175ca
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xbe818f0d
mov dword [ebp - 0x14c], eax
je 0x4174d8
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xc3ca6350
mov dword [ebp - 0x150], eax
je 0x4176ad
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xdc317692
mov dword [ebp - 0x154], eax
je 0x41735d
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xe0fceb69
mov dword [ebp - 0x158], eax
je 0x41736a
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xe6bad59e
mov dword [ebp - 0x15c], eax
je 0x417608
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xea4dea06
mov dword [ebp - 0x160], eax
je 0x417655
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xf19817a8
mov dword [ebp - 0x164], eax
je 0x417499
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xf2a5ec14
mov dword [ebp - 0x168], eax
je 0x4175fc
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xf85733ad
mov dword [ebp - 0x16c], eax
je 0x4175b1
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x9780eaf
mov dword [ebp - 0x170], eax
je 0x41730f
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0xeb80531
mov dword [ebp - 0x174], eax
je 0x41729a
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x256e9834
mov dword [ebp - 0x178], eax
je 0x4175a4
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x2ca05ba3
mov dword [ebp - 0x17c], eax
je 0x4173d4
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x2ddab731
mov dword [ebp - 0x180], eax
je 0x417302
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x318839f8
mov dword [ebp - 0x184], eax
je 0x417235
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x32b2e156
mov dword [ebp - 0x188], eax
je 0x4175d7
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x3643d273
mov dword [ebp - 0x18c], eax
je 0x41742f
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x4a0161b1
mov dword [ebp - 0x190], eax
je 0x417253
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x4cf214a9
mov dword [ebp - 0x194], eax
je 0x417460
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x50508e8e
mov dword [ebp - 0x198], eax
je 0x41728d
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x52322579
mov dword [ebp - 0x19c], eax
je 0x4172c5
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x53063a26
mov dword [ebp - 0x1a0], eax
je 0x4173a5
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x5f429e2b
mov dword [ebp - 0x1a4], eax
je 0x417676
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x5ff197ef
mov dword [ebp - 0x1a8], eax
je 0x4174eb
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x68f0cceb
mov dword [ebp - 0x1ac], eax
je 0x417323
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x75d23061
mov dword [ebp - 0x1b0], eax
je 0x41734a
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x7653b010
mov dword [ebp - 0x1b4], eax
je 0x41773d
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x7858a909
mov dword [ebp - 0x1b8], eax
je 0x41738a
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x7bc28902
mov dword [ebp - 0x1bc], eax
je 0x417591
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x7c25ecd4
mov dword [ebp - 0x1c0], eax
je 0x41771b
jmp 0x417230
mov eax, dword [ebp - 0x60]
sub eax, 0x7f3f0ef4
mov dword [ebp - 0x1c4], eax
je 0x4175be
jmp 0x417230
jmp 0x417744
mov eax, 0x75d23061
mov ecx, 0x4a0161b1
mov edx, dword [ebp - 0x18]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0x50508e8e
mov ecx, 0x8105efa2
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x34]
movzx edx, word [edx]
cmp edx, 0x5a4d
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0x8422acd4
jmp 0x417744
mov eax, 0xeb80531
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0x52322579
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
add ecx, dword [edx + 0x3c]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
cmp dword [ecx], 0x4550
setne bl
and bl, 1
mov byte [ebp - 0x13], bl
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0x81a3adf9
mov ecx, 0x2ddab731
mov dl, byte [ebp - 0x13]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0xb4ebf394
mov ecx, 0x2ddab731
mov edx, dword [ebp - 0x38]
movzx edx, word [edx + 0x18]
cmp edx, 0x10b
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0x9780eaf
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0x68f0cceb
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov dword [ebp - 0x5c], 0x8422acd4
jmp 0x417744
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x80]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x5c], 0x75d23061
jmp 0x417744
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x5c], 0xdc317692
jmp 0x417744
mov eax, 0xe0fceb69
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0x7858a909
mov ecx, dword [ebp - 0x2c]
cmp dword [ecx + 0xc], 0
setne dl
and dl, 1
mov byte [ebp - 0x12], dl
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0xae894cac
mov ecx, 0x53063a26
mov dl, byte [ebp - 0x12]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx + 0xc]
mov dword [esp], eax
call fcn.00406440
mov ecx, 0xac5a651f
mov edx, 0x2ca05ba3
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x24]
cmove ecx, edx
mov dword [ebp - 0x5c], ecx
jmp 0x417744
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx + 0xc]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
sub esp, 4
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x5c], 0x809c3cd0
jmp 0x417744
mov eax, 0xe6bad59e
mov ecx, 0x3643d273
mov edx, dword [ebp - 0x40]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0x4cf214a9
mov ecx, 0xbdcc37fe
mov edx, 0xffffffff
mov esi, dword [ebp - 0x40]
mov esi, dword [esi]
xor edx, 0x80000000
mov edi, esi
xor edi, edx
and edi, esi
cmp edi, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x40]
add eax, dword [ecx]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
add eax, 2
mov dword [esp], eax
call fcn.00406440
mov ecx, 0x256e9834
mov edx, 0xf19817a8
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x20]
cmove ecx, edx
mov dword [ebp - 0x5c], ecx
jmp 0x417744
mov eax, dword [ebp - 0x3c]
mov ecx, esp
lea edx, [ebp - 0x58]
mov dword [ecx + 0xc], edx
mov dword [ecx], eax
mov dword [ecx + 8], 4
mov dword [ecx + 4], 4
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
sub esp, 0x10
mov ecx, 0xbe818f0d
mov edx, 0x5ff197ef
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x5c], ecx
jmp 0x417744
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0x8422acd4
jmp 0x417744
mov eax, 0x80dd6e4a
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 4
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x3c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 4
mov dword [ebp - 0x1c8], eax
call fcn.004073d0
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x3c]
mov esi, esp
lea edi, [ebp - 0x58]
mov dword [esi + 0xc], edi
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 4], 4
mov ecx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x1cc], eax
call ecx
sub esp, 0x10
mov ecx, 0x8f43664d
cmp eax, 0
setne bl
and bl, 1
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x5c], ecx
jmp 0x417744
mov eax, 0x985534e3
mov ecx, 0x7bc28902
mov dl, byte [ebp - 0x11]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0x8422acd4
jmp 0x417744
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x5c], 0x8422acd4
jmp 0x417744
mov eax, 0xf85733ad
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0x7f3f0ef4
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov dword [ebp - 0x5c], 0xbdcc37fe
jmp 0x417744
mov eax, 0x32b2e156
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0xf2a5ec14
mov ecx, dword [ebp - 0x3c]
add ecx, 4
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x40]
add ecx, 4
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov dword [ebp - 0x5c], 0x809c3cd0
jmp 0x417744
mov dword [ebp - 0x5c], 0xac5a651f
jmp 0x417744
mov eax, dword [ebp - 0x2c]
add eax, 0x6b4600e
add eax, 0x14
sub eax, 0x6b4600e
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x5c], 0xdc317692
jmp 0x417744
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0x8422acd4
jmp 0x417744
mov eax, 0xea4dea06
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, 0xa8ab2457
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x5c], eax
jmp 0x417744
mov eax, dword [ebp - 0x10]
add esp, 0x1dc
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
add eax, dword [ecx + 0x3c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x5c], 0xeb80531
jmp 0x417744
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0x9780eaf
jmp 0x417744
mov dword [ebp - 0x5c], 0xe0fceb69
jmp 0x417744
mov eax, 4
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x3c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 4
mov dword [ebp - 0x1d0], eax
call fcn.004073d0
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x3c]
mov esi, esp
lea edi, [ebp - 0x58]
mov dword [esi + 0xc], edi
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 4], 4
mov ecx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x1d4], eax
call ecx
sub esp, 0x10
mov dword [ebp - 0x5c], 0x80dd6e4a
mov dword [ebp - 0x1d8], eax
jmp 0x417744
mov dword [ebp - 0x5c], 0xf85733ad
jmp 0x417744
mov eax, dword [ebp - 0x3c]
add eax, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x40]
add eax, 4
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x5c], 0x32b2e156
jmp 0x417744
mov dword [ebp - 0x5c], 0xea4dea06
jmp 0x416991