Function at 0x7137c0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 0xe
add esp, 0xfffff004
push eax
dec eax
jne 0x7137c9
add esp, 0xfffff34c
mov eax, dword [ebp - 4]
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
mov ebx, edx
mov dword [ebp - 8], eax
xor edx, edx
mov dword [ebp - 0xc], edx
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov byte [ebp - 0xd], 0
mov edx, dword [ebp - 4]
lea edi, reloc.PSAPI.DLL_GetMappedFileNameW
mov esi, ecx
call fcn.006f3cb1
mov eax, edi
mov edx, dword [ebp - 4]
call fcn.006f3cb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov ecx, esi
mov edx, ebx
call fcn.006ed869
mov byte [ebp - 0x7253], 1
push 0x444099
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
push eax
call fcn.007252a9
add esp, 8
mov eax, ebx
call fcn.006ebff9
push eax
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
push edx
call fcn.007251cd
add esp, 8
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ec995
push 0x4440a0
lea ecx, reloc.PSAPI.DLL_GetMappedFileNameW
push ecx
call fcn.007252a9
add esp, 8
mov eax, ebx
call fcn.006ebff9
push eax
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
push edx
call fcn.007251cd
add esp, 8
mov edx, 0x4440a9
mov eax, ebx
call fcn.006ec455
test al, al
jne 0x7138ab
mov edx, 0x4440ad
mov eax, ebx
call fcn.006ec455
test al, al
je 0x7138bb
mov edx, 0x4440b1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006ec33d
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ec995
push 0
lea eax, [ebp - 0xe]
mov ecx, dword [ebp - 4]
mov edx, edi
push dword [ecx + 0x20a4]
push eax
push closesocket
push 0
push 0
mov eax, dword [ebp - 4]
lea ecx, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006eef6d
test al, al
jne 0x7139bd
cmp byte [ebp - 0xe], 0
jne 0x71391d
mov eax, 0x4479e4
mov edx, 9
call fcn.0071d31d
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
mov eax, 0x4479e4
call fcn.0071d17d
mov al, byte [ebp - 0xe]
push eax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
mov eax, edi
xor edx, edx
call fcn.006ed6fd
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ed6fd
pop eax
jmp 0x7144be
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
mov eax, 0xdd4
push edx
call fcn.006f8fad
push eax
call fcn.007153cd
add esp, 8
mov edx, edi
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.007127c9
mov esi, eax
cmp esi, 2
jne 0x713a95
mov eax, edi
call fcn.006ed9f1
mov al, 1
push eax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
mov eax, edi
xor edx, edx
call fcn.006ed6fd
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ed6fd
pop eax
jmp 0x7144be
cmp esi, 1
jne 0x713b7b
mov eax, edi
call fcn.006ed9f1
mov edx, dword [ebp - 4]
cmp byte [edx + 0x20e8], 0
jne 0x713b7b
mov eax, 0xde8
call fcn.006f8fad
push eax
call fcn.00715409
pop ecx
mov eax, 0xbba
call fcn.006f8fad
call fcn.007156bd
dec eax
je 0x713b7b
mov al, 1
push eax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
mov eax, edi
xor edx, edx
call fcn.006ed6fd
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ed6fd
pop eax
jmp 0x7144be
test esi, esi
jne 0x713b86
mov eax, edi
call fcn.006eda81
push 0
push 0
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ede35
push 0
push 0
lea ecx, [ebp - 0xe]
push ecx
push closesocket
push 0
push 0
lea ecx, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, edi
mov eax, dword [ebp - 4]
call fcn.006eef6d
test al, al
jne 0x713c8e
cmp byte [ebp - 0xe], 0
jne 0x713be5
mov eax, 0x4479e4
mov edx, 9
call fcn.0071d31d
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
mov eax, 0x4479e4
call fcn.0071d17d
xor eax, eax
mov al, byte [ebp - 0xe]
cmp eax, 1
sbb eax, eax
neg eax
push eax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
mov eax, edi
xor edx, edx
call fcn.006ed6fd
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ed6fd
pop eax
jmp 0x7144be
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006ee0fd
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
push ebx
mov eax, 0xdd2
call fcn.006f8fad
push eax
call fcn.007153cd
add esp, 8
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
push edx
mov eax, 0xdd4
call fcn.006f8fad
push eax
call fcn.007153cd
add esp, 8
xor edx, edx
mov byte [ebp - 0x19], 0
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006f3ff5
test al, al
je 0x713dcc
mov byte [ebp - 0x19], 1
mov cx, word [ebp - 0x3380]
mov word [edi + 0x3ee4], cx
mov ax, word [ebp - 0x337e]
mov word [edi + 0x3ee6], ax
cmp byte [ebp - 0xc5c], 0
je 0x713dcc
mov eax, 0xdd6
call fcn.006f8fad
push eax
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
push edx
call fcn.0071534d
add esp, 8
mov al, 1
push eax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
mov eax, edi
xor edx, edx
call fcn.006ed6fd
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ed6fd
pop eax
jmp 0x7144be
xor edx, edx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], edx
mov word [edi + 0x3ee8], dx
and word [edi + 0x3ee4], 0xff9f
mov eax, edi
xor ecx, ecx
mov edx, 0x72
call fcn.006f1ae9
mov eax, edi
xor ecx, ecx
mov edx, 0x73
call fcn.006f1ae9
mov eax, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
mov edx, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
add eax, 0xd
adc edx, 0
push edx
push eax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ede35
movzx eax, word [edi + 0x3ee6]
add eax, 0xfffffff3
cdq
push edx
push eax
mov edx, edi
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006ee229
push 0
push 0
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ede35
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 0x10000
call fcn.006ee2dd
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov ecx, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
mov edx, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
call fcn.006edcc9
mov eax, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
add eax, 0xfffff000
cdq
add dword [ebp - 0x2c], eax
adc dword [ebp - 0x28], edx
mov eax, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
add eax, 0xfffff000
cdq
push edx
push eax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
call fcn.00727ead
mov ebx, eax
xor eax, eax
add ebx, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
xor ecx, ecx
xor edx, edx
mov al, byte [ebx + 2]
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], eax
xor eax, eax
mov cl, byte [ebx + 6]
mov dl, byte [ebx + 5]
shl ecx, 8
add dx, cx
mov word [edi + 0x3efe], dx
xor edx, edx
mov dl, byte [ebx + 0x1b]
mov al, byte [ebx + 0x1a]
shl edx, 8
add ax, dx
mov word [edi + 0x3f16], ax
cmp dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], 0x74
jne 0x7142ec
cmp word [edi + 0x3efe], 0x1000
jae 0x7142ec
cmp word [edi + 0x3f16], 0
jbe 0x7142ec
cmp word [edi + 0x3f16], 0x400
jae 0x7142ec
xor eax, eax
xor ecx, ecx
mov al, byte [ebx + 1]
mov cl, byte [ebx]
shl eax, 8
xor edx, edx
add cx, ax
xor eax, eax
mov word [edi + 0x3ef4], cx
xor ecx, ecx
mov cl, byte [ebx + 4]
mov dl, byte [ebx + 3]
shl ecx, 8
add dx, cx
xor ecx, ecx
mov word [edi + 0x3efc], dx
xor edx, edx
mov dl, byte [ebx + 8]
mov al, byte [ebx + 7]
shl edx, 8
mov cl, byte [ebx + 9]
add eax, edx
xor edx, edx
mov dl, byte [ebx + 0xa]
shl ecx, 0x10
shl edx, 0x18
add eax, ecx
add eax, edx
xor ecx, ecx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], eax
xor eax, eax
mov cl, byte [ebx + 0xc]
mov al, byte [ebx + 0xb]
shl ecx, 8
xor edx, edx
add eax, ecx
mov dl, byte [ebx + 0xd]
xor ecx, ecx
mov cl, byte [ebx + 0xe]
shl edx, 0x10
shl ecx, 0x18
add eax, edx
add eax, ecx
xor edx, edx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], eax
xor ecx, ecx
mov al, byte [ebx + 0xf]
mov byte [edi + 0x3f08], al
xor eax, eax
mov dl, byte [ebx + 0x11]
mov al, byte [ebx + 0x10]
shl edx, 8
mov cl, byte [ebx + 0x12]
add eax, edx
xor edx, edx
mov dl, byte [ebx + 0x13]
shl ecx, 0x10
shl edx, 0x18
add eax, ecx
add eax, edx
xor ecx, ecx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], eax
xor eax, eax
mov cl, byte [ebx + 0x15]
mov al, byte [ebx + 0x14]
shl ecx, 8
xor edx, edx
add eax, ecx
mov dl, byte [ebx + 0x16]
xor ecx, ecx
mov cl, byte [ebx + 0x17]
shl edx, 0x10
shl ecx, 0x18
add eax, edx
add eax, ecx
xor ecx, ecx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], eax
xor edx, edx
mov al, byte [ebx + 0x18]
mov byte [edi + 0x3f14], al
mov al, byte [ebx + 0x19]
mov byte [edi + 0x3f15], al
xor eax, eax
mov cl, byte [ebx + 0x1d]
mov dl, byte [ebx + 0x1c]
shl ecx, 8
mov al, byte [ebx + 0x1e]
add edx, ecx
xor ecx, ecx
mov cl, byte [ebx + 0x1f]
shl eax, 0x10
shl ecx, 0x18
add edx, eax
add edx, ecx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], edx
test byte [edi + 0x3efd], 1
je 0x7140a6
xor eax, eax
xor edx, edx
mov al, byte [ebx + 0x21]
mov dl, byte [ebx + 0x20]
shl eax, 8
xor ecx, ecx
add edx, eax
mov cl, byte [ebx + 0x22]
xor eax, eax
mov al, byte [ebx + 0x23]
shl ecx, 0x10
shl eax, 0x18
add edx, ecx
add edx, eax
xor ecx, ecx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], edx
xor edx, edx
mov cl, byte [ebx + 0x25]
mov dl, byte [ebx + 0x24]
shl ecx, 8
xor eax, eax
add edx, ecx
mov al, byte [ebx + 0x26]
xor ecx, ecx
mov cl, byte [ebx + 0x27]
shl eax, 0x10
shl ecx, 0x18
add edx, eax
add edx, ecx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], edx
jmp 0x7140b4
xor edx, edx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], edx
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], edx
mov eax, dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW]
xor edx, edx
mov edx, eax
xor eax, eax
push edx
push eax
mov eax, dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], eax
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], edx
mov eax, dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW]
xor edx, edx
mov edx, eax
xor eax, eax
push edx
push eax
mov eax, dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], eax
mov dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW], edx
movzx ecx, word [edi + 0x3f16]
push ecx
mov eax, edi
xor edx, edx
call fcn.00714533
add eax, ebx
push eax
lea ecx, reloc.PSAPI.DLL_GetMappedFileNameW
push ecx
call fcn.007250b9
add esp, 0xc
test byte [edi + 0x3efd], 2
je 0x714182
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006f8b09
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
push edx
call fcn.007252d9
pop ecx
inc eax
movzx ecx, word [edi + 0x3f16]
sub ecx, eax
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
push ecx
lea ecx, reloc.PSAPI.DLL_GetMappedFileNameW
add ecx, eax
push edx
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
push 0x400
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006f8d7d
jmp 0x71418b
mov word [edi + 0x4324], 0
test byte [edi + 0x3efd], 4
je 0x7141ba
push 8
mov eax, edi
xor edx, edx
call fcn.00714533
add eax, ebx
movzx ecx, word [edi + 0x3f16]
add eax, ecx
push eax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
push eax
call fcn.007250b9
add esp, 0xc
movzx esi, word [edi + 0x3efe]
add esi, 0xfffffffe
mov byte [ebp - 0x2d], 0
test esi, esi
jg 0x7141d2
mov byte [ebp - 0x2d], 1
jmp 0x71420d
test byte [edi + 0x3efc], 8
je 0x7141f2
mov eax, edi
mov dl, 1
call fcn.00714533
mov esi, eax
movzx eax, word [edi + 0x3f16]
add esi, eax
add esi, 0xfffffffe
lea edx, [ebx + 2]
mov ecx, esi
or eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006f6801
not ax
and ax, 0xffff
mov word [edi + 0x661a], ax
cmp byte [ebp - 0x2d], 0
jne 0x7142ec
lea ecx, [ebp - 0xd]
mov edx, edi
mov eax, dword [ebp - 4]
call fcn.007144c5
test al, al
je 0x7142ec
movzx eax, word [edi + 0x3efe]
cdq
add eax, dword [ebp - 0x24]
mov bl, 1
adc edx, dword [ebp - 0x20]
push edx
push eax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ede35
movzx ecx, word [edi + 0x3f16]
mov byte [edi + ecx + 0x3f24], 0
call fcn.006f63d5
test bl, bl
je 0x7142ec
cmp word [edi + 0x4324], 0
jne 0x71427e
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov dl, 1
call fcn.006ec995
movzx ecx, word [edi + 0x3efc]
and ecx, 0xffffefff
or dword [ebp - 0xc], ecx
mov eax, edi
mov dl, 1
call fcn.00714533
add ax, word [edi + 0x3f16]
mov word [edi + 0x3efe], ax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006ebd29
push eax
mov eax, 0xdd8
call fcn.006f8fad
push eax
call fcn.007153cd
add esp, 8
inc dword [ebp - 8]
mov eax, edi
xor ecx, ecx
mov edx, 0x74
call fcn.006f1ae9
mov eax, dword [edi + reloc.PSAPI.DLL_GetMappedFileNameW]
xor edx, edx
push edx
push eax
mov edx, edi
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
call fcn.006ee229
add dword [ebp - 0x24], 1
adc dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
sub eax, 0x20
sbb edx, 0
cmp edx, dword [ebp - 0x20]
jne 0x71430c
cmp eax, dword [ebp - 0x24]
ja 0x71430e
jmp 0x71437a
jle 0x71437a
mov eax, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
add eax, 0xfffff000
cdq
push edx
push eax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
call fcn.00727ead
cmp edx, 0
jne 0x713ea1
cmp eax, 0
jne 0x713ea1
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ede35
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov ecx, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
mov edx, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
call fcn.006edcc9
mov eax, dword [ebp - reloc.PSAPI.DLL_GetMappedFileNameW]
add eax, 0xfffff000
cdq
add dword [ebp - 0x2c], eax
adc dword [ebp - 0x28], edx
jmp 0x713ea1
test byte [ebp - 0xc], 3
je 0x714388
or word [edi + 0x3ee4], 1
cmp dword [ebp - 8], 0
jle 0x7143cb
cmp byte [ebp - 0x19], 0
jne 0x7143cb
mov ecx, dword [ebp - 4]
cmp byte [ecx + 0x20e8], 0
jne 0x7143cb
mov eax, 0xdda
call fcn.006f8fad
push eax
call fcn.00715409
pop ecx
mov eax, 0xbba
call fcn.006f8fad
call fcn.007156bd
dec eax
jne 0x7143cb
or word [edi + 0x3ee4], 8
cmp dword [ebp - 8], 0
jne 0x7143e4
mov eax, 0xddc
call fcn.006f8fad
push eax
call fcn.007153cd
pop ecx
jmp 0x714414
push 0
push 0
mov eax, edi
xor edx, edx
call fcn.006ede35
mov eax, edi
xor ecx, ecx
mov edx, 0x72
call fcn.006f1ae9
mov eax, edi
xor ecx, ecx
mov edx, 0x73
call fcn.006f1ae9
mov eax, edi
call fcn.006ed9f1
mov al, 1
push eax
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eb849
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
mov eax, edi
xor edx, edx
call fcn.006ed6fd
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.00717e45
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov edx, 2
call fcn.006eceb1
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
xor edx, edx
call fcn.006ed6fd
pop eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret