Function at 0x474e45
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x270
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov esi, dword [ebp + 8]
mov dword [esp + 0x260], eax
mov dword [esp + 0x264], ecx
mov dword [esp + 0x23c], 0
mov dword [esp + 0x238], 0
mov dword [esp + 0x234], 0
mov dword [esp + 0x230], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
mov ecx, esp
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], str.is_pe
mov dword [ecx + 4], 0
mov dword [ecx], 1
mov dword [esp + 0x21c], esi
mov dword [esp + 0x218], edx
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0x10]
movzx edx, word [edx + 4]
mov esi, esp
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 0xc], str.machine
mov dword [esi + 4], 0
mov dword [esp + 0x214], eax
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0x10]
movzx edx, word [edx + 6]
mov esi, esp
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 0xc], str.number_of_sections
mov dword [esi + 4], 0
mov dword [esp + 0x210], eax
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0x10]
mov edx, dword [edx + 8]
mov esi, esp
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 0xc], str.timestamp
mov dword [esi + 4], 0
mov dword [esp + 0x20c], eax
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0x10]
mov edx, dword [edx + 0xc]
mov esi, esp
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 0xc], str.pointer_to_symbol_table
mov dword [esi + 4], 0
mov dword [esp + 0x208], eax
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0x10]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 0xc], str.number_of_symbols
mov dword [esi + 4], 0
mov dword [esp + 0x204], eax
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0x10]
movzx edx, word [edx + 0x14]
mov esi, esp
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 0xc], str.size_of_optional_header
mov dword [esi + 4], 0
mov dword [esp + 0x200], eax
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x16]
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.characteristics
mov dword [esp + 0x1fc], eax
call fcn.0048a14c
mov ecx, dword [ebp + 0x14]
and ecx, 2
cmp ecx, 0
mov dword [esp + 0x1f8], eax
je 0x473f63
mov eax, dword [esp + 0x260]
mov ecx, dword [esp + 0x264]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
movzx edx, word [edx + 0x18]
cmp edx, 0x20b
mov dword [esp + 0x1f4], eax
mov dword [esp + 0x1f0], ecx
jne 0x473f29
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x28]
mov dword [esp + 0x1ec], eax
jmp 0x473f39
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x28]
mov dword [esp + 0x1ec], eax
mov eax, dword [esp + 0x1ec]
mov ecx, dword [esp + 0x1f4]
add ecx, eax
mov eax, dword [esp + 0x1f0]
adc eax, 0
mov dword [esp + 0x1e8], ecx
mov dword [esp + 0x1e4], eax
jmp 0x473fd2
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x1e0], eax
jne 0x473f91
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x28]
mov dword [esp + 0x1dc], eax
jmp 0x473fa1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x28]
mov dword [esp + 0x1dc], eax
mov eax, dword [esp + 0x1dc]
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x1e0]
mov dword [ecx], eax
mov dword [ecx + 8], 0
call fcn.00482900
mov dword [esp + 0x1e8], eax
mov dword [esp + 0x1e4], edx
jmp 0x473fd2
mov eax, dword [esp + 0x1e4]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], eax
mov dword [esi], ecx
mov dword [esi + 0xc], str.entry_point
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x1d8], eax
jne 0x47407b
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474042
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d0], eax
jmp 0x47405d
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x34]
xor ecx, ecx
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x1d0], ecx
jmp 0x47405d
mov eax, dword [esp + 0x1d0]
mov ecx, dword [esp + 0x1d4]
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1c8], eax
jmp 0x4740e1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x4740a8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x1c4], ecx
mov dword [esp + 0x1c0], eax
jmp 0x4740c3
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x34]
xor ecx, ecx
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c0], ecx
jmp 0x4740c3
mov eax, dword [esp + 0x1c0]
mov ecx, dword [esp + 0x1c4]
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1c8], eax
jmp 0x4740e1
mov eax, dword [esp + 0x1c8]
mov ecx, dword [esp + 0x1cc]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], eax
mov dword [esi], ecx
mov dword [esi + 0xc], str.image_base
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x1bc], eax
jne 0x474139
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x1b8], eax
jmp 0x474149
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x74]
mov dword [esp + 0x1b8], eax
mov eax, dword [esp + 0x1b8]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.number_of_rva_and_sizes
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x1b4], eax
jne 0x47419b
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x18]
mov word [esp + 0x1b2], cx
jmp 0x4741ad
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x18]
mov word [esp + 0x1b2], cx
mov ax, word [esp + 0x1b2]
movzx ecx, ax
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.opthdr_magic
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x1ac], eax
jne 0x474201
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cl, byte [eax + 0x1a]
mov byte [esp + 0x1ab], cl
jmp 0x474211
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cl, byte [eax + 0x1a]
mov byte [esp + 0x1ab], cl
mov al, byte [esp + 0x1ab]
movzx ecx, al
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.linker_version.major
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x1a4], eax
jne 0x474264
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cl, byte [eax + 0x1b]
mov byte [esp + 0x1a3], cl
jmp 0x474274
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cl, byte [eax + 0x1b]
mov byte [esp + 0x1a3], cl
mov al, byte [esp + 0x1a3]
movzx ecx, al
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.linker_version.minor
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x19c], eax
jne 0x4742c7
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x198], eax
jmp 0x4742d7
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x198]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.size_of_code
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x194], eax
jne 0x474327
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x190], eax
jmp 0x474337
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x190]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.size_of_initialized_data
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x18c], eax
jne 0x474387
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x188], eax
jmp 0x474397
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x188]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.size_of_uninitialized_data
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x184], eax
jne 0x4743e7
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x180], eax
jmp 0x4743f7
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x180]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.base_of_code
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x17c], eax
je 0x474463
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x30]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.base_of_data
call fcn.0048a14c
mov dword [esp + 0x178], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474486
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x38]
mov dword [esp + 0x174], eax
jmp 0x474496
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x38]
mov dword [esp + 0x174], eax
mov eax, dword [esp + 0x174]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.section_alignment
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x170], eax
jne 0x4744e6
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x3c]
mov dword [esp + 0x16c], eax
jmp 0x4744f6
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x3c]
mov dword [esp + 0x16c], eax
mov eax, dword [esp + 0x16c]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.file_alignment
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x168], eax
jne 0x474548
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x40]
mov word [esp + 0x166], cx
jmp 0x47455a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x40]
mov word [esp + 0x166], cx
mov ax, word [esp + 0x166]
movzx ecx, ax
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.os_version.major
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x160], eax
jne 0x4745b0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x42]
mov word [esp + 0x15e], cx
jmp 0x4745c2
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x42]
mov word [esp + 0x15e], cx
mov ax, word [esp + 0x15e]
movzx ecx, ax
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.os_version.minor
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x158], eax
jne 0x474618
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x44]
mov word [esp + 0x156], cx
jmp 0x47462a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x44]
mov word [esp + 0x156], cx
mov ax, word [esp + 0x156]
movzx ecx, ax
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.image_version.major
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x150], eax
jne 0x474680
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x46]
mov word [esp + 0x14e], cx
jmp 0x474692
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x46]
mov word [esp + 0x14e], cx
mov ax, word [esp + 0x14e]
movzx ecx, ax
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.image_version.minor
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x148], eax
jne 0x4746e8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x48]
mov word [esp + 0x146], cx
jmp 0x4746fa
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x48]
mov word [esp + 0x146], cx
mov ax, word [esp + 0x146]
movzx ecx, ax
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.subsystem_version.major
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x140], eax
jne 0x474750
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x4a]
mov word [esp + 0x13e], cx
jmp 0x474762
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x4a]
mov word [esp + 0x13e], cx
mov ax, word [esp + 0x13e]
movzx ecx, ax
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.subsystem_version.minor
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x138], eax
jne 0x4747b6
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x4c]
mov dword [esp + 0x134], eax
jmp 0x4747c6
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x4c]
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x134]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.win32_version_value
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x130], eax
jne 0x474816
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x50]
mov dword [esp + 0x12c], eax
jmp 0x474826
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x50]
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0x12c]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.size_of_image
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x128], eax
jne 0x474876
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x54]
mov dword [esp + 0x124], eax
jmp 0x474886
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x54]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x124]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.size_of_headers
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x120], eax
jne 0x4748d6
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x58]
mov dword [esp + 0x11c], eax
jmp 0x4748e6
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x58]
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x11c]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.checksum
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x118], eax
jne 0x474938
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x5c]
mov word [esp + 0x116], cx
jmp 0x47494a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x5c]
mov word [esp + 0x116], cx
mov ax, word [esp + 0x116]
movzx ecx, ax
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.subsystem
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x110], eax
jne 0x4749a0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x5e]
mov word [esp + 0x10e], cx
jmp 0x4749b2
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov cx, word [eax + 0x5e]
mov word [esp + 0x10e], cx
mov ax, word [esp + 0x10e]
movzx ecx, ax
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.dll_characteristics
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x108], eax
jne 0x474a5a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474a21
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x60]
mov eax, dword [eax + 0x64]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x100], eax
jmp 0x474a3c
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x60]
xor ecx, ecx
mov dword [esp + 0x104], eax
mov dword [esp + 0x100], ecx
jmp 0x474a3c
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xf8], eax
jmp 0x474ac0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474a87
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x60]
mov eax, dword [eax + 0x64]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf0], eax
jmp 0x474aa2
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x60]
xor ecx, ecx
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf0], ecx
jmp 0x474aa2
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xf8], eax
jmp 0x474ac0
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], eax
mov dword [esi], ecx
mov dword [esi + 0xc], str.size_of_stack_reserve
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0xec], eax
jne 0x474b69
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474b30
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x68]
mov eax, dword [eax + 0x6c]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xe4], eax
jmp 0x474b4b
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x64]
xor ecx, ecx
mov dword [esp + 0xe8], eax
mov dword [esp + 0xe4], ecx
jmp 0x474b4b
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xdc], eax
jmp 0x474bcf
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474b96
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x68]
mov eax, dword [eax + 0x6c]
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xd4], eax
jmp 0x474bb1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x64]
xor ecx, ecx
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], ecx
jmp 0x474bb1
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xdc], eax
jmp 0x474bcf
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0xe0]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], eax
mov dword [esi], ecx
mov dword [esi + 0xc], str.size_of_stack_commit
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0xd0], eax
jne 0x474c78
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474c3f
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x70]
mov eax, dword [eax + 0x74]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xc8], eax
jmp 0x474c5a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x68]
xor ecx, ecx
mov dword [esp + 0xcc], eax
mov dword [esp + 0xc8], ecx
jmp 0x474c5a
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc0], eax
jmp 0x474cde
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474ca5
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x70]
mov eax, dword [eax + 0x74]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xb8], eax
jmp 0x474cc0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x68]
xor ecx, ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xb8], ecx
jmp 0x474cc0
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc0], eax
jmp 0x474cde
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], eax
mov dword [esi], ecx
mov dword [esi + 0xc], str.size_of_heap_reserve
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0xb4], eax
jne 0x474d87
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474d4e
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x78]
mov eax, dword [eax + 0x7c]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xac], eax
jmp 0x474d69
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x6c]
xor ecx, ecx
mov dword [esp + 0xb0], eax
mov dword [esp + 0xac], ecx
jmp 0x474d69
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xa4], eax
jmp 0x474ded
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474db4
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x78]
mov eax, dword [eax + 0x7c]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x9c], eax
jmp 0x474dcf
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x6c]
xor ecx, ecx
mov dword [esp + 0xa0], eax
mov dword [esp + 0x9c], ecx
jmp 0x474dcf
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xa4], eax
jmp 0x474ded
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], eax
mov dword [esi], ecx
mov dword [esi + 0xc], str.size_of_heap_commit
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x98], eax
jne 0x474e45
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x80]
mov dword [esp + 0x94], eax
jmp 0x474e55
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x70]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x94]
xor ecx, ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.loader_flags
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x20b
mov dword [esp + 0x90], eax
jne 0x474ea8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
add eax, 0x18
add eax, 0x70
mov dword [esp + 0x8c], eax
jmp 0x474ebb
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
add eax, 0x18
add eax, 0x60
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x258], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x18]
cmp eax, 0x20b
jne 0x474eef
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x88], eax
jmp 0x474eff
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x74]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x240], eax
cmp dword [esp + 0x240], 0x10
jge 0x474f27
mov eax, dword [esp + 0x240]
mov dword [esp + 0x84], eax
jmp 0x474f35
mov eax, 0x10
mov dword [esp + 0x84], eax
jmp 0x474f35
mov eax, dword [esp + 0x84]
mov dword [esp + 0x240], eax
mov dword [esp + 0x248], 0
mov eax, dword [esp + 0x248]
cmp eax, dword [esp + 0x240]
jge 0x475032
mov eax, 8
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 4]
ja 0x474f96
mov eax, dword [esp + 0x258]
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx]
jb 0x474f96
mov eax, dword [esp + 0x258]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov edx, dword [ebp + 8]
add ecx, dword [edx + 4]
add ecx, 0xfffffff8
cmp eax, ecx
jbe 0x474f9b
jmp 0x475032
mov eax, dword [esp + 0x258]
mov eax, dword [eax]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
mov edx, dword [esp + 0x248]
mov esi, esp
mov dword [esi + 0x10], edx
mov dword [esi + 8], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.data_directories__i_.virtual_address
mov dword [esi + 4], 0
call fcn.0048a14c
mov ecx, dword [esp + 0x258]
mov ecx, dword [ecx + 4]
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, dword [esp + 0x248]
mov ebx, esp
mov dword [ebx + 0x10], edi
mov dword [ebx + 8], esi
mov dword [ebx + 4], edx
mov dword [ebx], ecx
mov dword [ebx + 0xc], str.data_directories__i_.size
mov dword [esp + 0x80], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x258]
add ecx, 8
mov dword [esp + 0x258], ecx
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x248]
add eax, 1
mov dword [esp + 0x248], eax
jmp 0x474f4e
mov eax, dword [ebp + 8]
mov ecx, esp
mov dword [ecx + 8], eax
mov dword [ecx], eax
mov dword [ecx + 4], 0x4769b0
call fcn.00476730
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x18]
xor edx, edx
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x10]
mov edi, esp
mov dword [edi + 8], esi
mov dword [edi + 4], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.number_of_resources
mov dword [esp + 0x78], eax
call fcn.0048a14c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
add ecx, 0x18
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
movzx edx, word [edx + 0x14]
add ecx, edx
mov dword [esp + 0x25c], ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
movzx ecx, word [ecx + 6]
cmp ecx, 0x60
mov dword [esp + 0x74], eax
jge 0x4750af
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
movzx eax, word [eax + 6]
mov dword [esp + 0x70], eax
jmp 0x4750ba
mov eax, 0x60
mov dword [esp + 0x70], eax
jmp 0x4750ba
mov eax, dword [esp + 0x70]
mov dword [esp + 0x244], eax
mov dword [esp + 0x248], 0
mov eax, dword [esp + 0x248]
cmp eax, dword [esp + 0x244]
jge 0x47543a
mov eax, 0x28
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 4]
ja 0x475118
mov eax, dword [esp + 0x25c]
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx]
jb 0x475118
mov eax, dword [esp + 0x25c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov edx, dword [ebp + 8]
add ecx, dword [edx + 4]
add ecx, 0xffffffd8
cmp eax, ecx
jbe 0x47511d
jmp 0x47543a
mov eax, dword [esp + 0x25c]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x24f]
mov dword [ecx], eax
mov dword [ecx + 8], 8
mov dword [esp + 0x6c], eax
call fcn.0076cf90
mov byte [esp + 0x257], 0
mov ecx, esp
mov edx, dword [esp + 0x6c]
mov dword [ecx], edx
mov dword [esp + 0x68], eax
call fcn.0076d774
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
mov edx, dword [esp + 0x248]
mov esi, esp
mov dword [esi + 0x10], edx
mov dword [esi + 8], ecx
mov dword [esi + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esi], eax
mov dword [esi + 0xc], str.sections__i_.name
call fcn.0048a324
mov ecx, dword [esp + 0x25c]
mov ecx, dword [ecx + 0x24]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, dword [esp + 0x248]
mov edi, esp
mov dword [edi + 0x10], esi
mov dword [edi + 8], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.sections__i_.characteristics
mov dword [edi + 4], 0
mov dword [esp + 0x64], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x25c]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, dword [esp + 0x248]
mov edi, esp
mov dword [edi + 0x10], esi
mov dword [edi + 8], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.sections__i_.raw_data_size
mov dword [edi + 4], 0
mov dword [esp + 0x60], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x25c]
mov ecx, dword [ecx + 0x14]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, dword [esp + 0x248]
mov edi, esp
mov dword [edi + 0x10], esi
mov dword [edi + 8], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.sections__i_.raw_data_offset
mov dword [edi + 4], 0
mov dword [esp + 0x5c], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x25c]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, dword [esp + 0x248]
mov edi, esp
mov dword [edi + 0x10], esi
mov dword [edi + 8], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.sections__i_.virtual_address
mov dword [edi + 4], 0
mov dword [esp + 0x58], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x25c]
mov ecx, dword [ecx + 8]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, dword [esp + 0x248]
mov edi, esp
mov dword [edi + 0x10], esi
mov dword [edi + 8], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.sections__i_.virtual_size
mov dword [edi + 4], 0
mov dword [esp + 0x54], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x25c]
mov ecx, dword [ecx + 0x18]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, dword [esp + 0x248]
mov edi, esp
mov dword [edi + 0x10], esi
mov dword [edi + 8], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.sections__i_.pointer_to_relocations
mov dword [edi + 4], 0
mov dword [esp + 0x50], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x25c]
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, dword [esp + 0x248]
mov edi, esp
mov dword [edi + 0x10], esi
mov dword [edi + 8], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.sections__i_.pointer_to_line_numbers
mov dword [edi + 4], 0
mov dword [esp + 0x4c], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x25c]
movzx ecx, word [ecx + 0x20]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, dword [esp + 0x248]
mov edi, esp
mov dword [edi + 0x10], esi
mov dword [edi + 8], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.sections__i_.number_of_relocations
mov dword [edi + 4], 0
mov dword [esp + 0x48], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x25c]
movzx ecx, word [ecx + 0x22]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, dword [esp + 0x248]
mov edi, esp
mov dword [edi + 0x10], esi
mov dword [edi + 8], edx
mov dword [edi], ecx
mov dword [edi + 0xc], str.sections__i_.number_of_line_numbers
mov dword [edi + 4], 0
mov dword [esp + 0x44], eax
call fcn.0048a14c
mov ecx, dword [esp + 0x25c]
mov edx, dword [ecx + 0x10]
mov ecx, dword [ecx + 0x14]
add ecx, edx
mov dword [esp + 0x228], ecx
mov dword [esp + 0x22c], 0
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x228]
mov esi, dword [esp + 0x230]
mov edi, dword [esp + 0x234]
mov ebx, dword [esp + 0x238]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x23c]
add esi, ebx
adc edi, eax
sub esi, edx
sbb edi, ecx
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], edi
jae 0x475413
jmp 0x4753e2
mov eax, dword [esp + 0x25c]
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x230], ecx
mov dword [esp + 0x234], 0
mov eax, dword [eax + 0x10]
mov dword [esp + 0x238], eax
mov dword [esp + 0x23c], 0
mov eax, dword [esp + 0x25c]
add eax, 0x28
mov dword [esp + 0x25c], eax
mov eax, dword [esp + 0x248]
add eax, 1
mov dword [esp + 0x248], eax
jmp 0x4750d0
mov eax, dword [esp + 0x238]
mov ecx, dword [esp + 0x23c]
mov edx, dword [esp + 0x230]
mov esi, dword [esp + 0x234]
add eax, edx
adc ecx, esi
mov dword [esp + 0x220], eax
mov dword [esp + 0x224], ecx
mov eax, dword [esp + 0x220]
mov ecx, dword [esp + 0x224]
or eax, ecx
mov dword [esp + 0x34], eax
je 0x4754d3
jmp 0x475480
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x220]
mov edx, dword [esp + 0x224]
sub ecx, eax
sbb edx, 0
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], edx
jae 0x4754d3
jmp 0x4754a5
mov eax, dword [esp + 0x220]
mov ecx, dword [esp + 0x224]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], ecx
mov dword [esi], eax
mov dword [esi + 0xc], str.overlay.offset
call fcn.0048a14c
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x220]
mov ecx, dword [esp + 0x224]
or eax, ecx
mov dword [esp + 0x24], eax
je 0x47554b
jmp 0x4754eb
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x220]
mov edx, dword [esp + 0x224]
xor esi, esi
sub eax, ecx
sbb esi, edx
mov dword [esp + 0x20], esi
mov dword [esp + 0x1c], eax
jb 0x47554b
jmp 0x475511
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x220]
mov edx, dword [esp + 0x224]
xor esi, esi
sub eax, ecx
sbb esi, edx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx + 4], esi
mov dword [edx], eax
mov dword [edx + 0xc], str.overlay.size
call fcn.0048a14c
mov dword [esp + 0x18], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret