Function at 0x4051a0
Capabilities:
Map section object

Disassembly:
push ebp
push ebx
mov edx, 0x14
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4051a7
call fcn.0045e790
push dword [esp + 0x5c]
call fcn.0044e2f0
mov ebp, dword [0x47356c]
cmp dword [ebp + 0x34], 0
je 0x4051f0
mov edx, 0x46105e
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
pop eax
push eax
call fcn.0044e2c0
pop edx
add eax, edx
jmp 0x40595c
mov ebp, dword [0x47356c]
mov ebx, dword [ebp + 0x20]
cmp ebx, 0xbb8
jle 0x40524c
mov eax, 0x469122
push eax
call sub.kernel32.dll_GetModuleHandleW
mov dword [esp], eax
push 0x20000
call fcn.0045ac20
mov dword [esp + 8], eax
mov ebp, str.GetSystemFirmwareTable
push ebp
push dword [esp + 4]
call sub.kernel32.dll_GetProcAddress
mov dword [esp + 4], eax
push 0x20000
push dword [esp + 0xc]
push 0xe0000
push 0x4649524d
call dword [esp + 0x14]
jmp 0x405327
push 0x20000
call fcn.0045ac20
mov dword [esp + 8], eax
mov eax, str.devicephysicalmemory
push eax
lea ebp, [esp + 0x30]
pop eax
mov dword [ebp + 4], eax
mov word [ebp + 2], 0x2e
mov word [ebp], 0x2c
lea ebp, [esp + 0x14]
mov dword [ebp], 0x18
lea eax, [esp + 0x2c]
push eax
pop eax
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], 0x40
lea eax, [esp + 0x14]
push eax
push 4
lea eax, [esp + 0x18]
push eax
call sub.ntdll.dll_NtOpenSection
mov ebx, eax
and ebx, ebx
jne 0x405327
lea ebp, [esp + 0x44]
mov dword [ebp + 4], 0
mov dword [ebp], 0xf0000
mov dword [esp + 0x40], 0xffff
push 2
push 0
push 1
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0x54]
push eax
push dword [esp + 0x54]
push 0
lea eax, [esp + 0x58]
push eax
push 0xffffffff
push dword [esp + 0x34]
call sub.ntdll.dll_NtMapViewOfSection
mov ebx, eax
and ebx, ebx
jne 0x405327
push 0xffff
push dword [esp + 0xc]
push dword [esp + 0x44]
call fcn.0045ada0
push dword [esp + 0x3c]
push 0xffffffff
call sub.ntdll.dll_NtUnmapViewOfSection
push dword [esp + 0x10]
call sub.kernel32.dll_CloseHandle
mov ebp, str.GIGABYTE
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x405357
mov edx, str.GIGABYTE___6C0C2E95
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.MEDIONPC
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x405393
mov ebp, str.MEDIONNB
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x405393
jmp 0x40539a
mov eax, 1
jmp 0x40539c
xor eax, eax
and eax, eax
je 0x4053b3
mov edx, str.MEDION___06485F9D
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.alienware
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x4053e3
mov edx, str.Alienware___CE524ABD
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.EPSON
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x405413
mov edx, str.EPSON___74163373
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.FUJITSU
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x40546c
mov ebp, str.SIEMENS
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x40546c
mov ebp, str.PRIMERGY
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x40546c
jmp 0x405473
mov eax, 1
jmp 0x405475
xor eax, eax
and eax, eax
je 0x40548c
mov edx, str.FUJITSU___D2D64C41
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.FUJITSU_PC
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x4054bc
mov edx, str.FUJITSU___9CF90CA8
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.HP_PAVILION
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x4054ec
mov edx, str.HP___3BA155E1
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.Hewlett_Packard
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40551c
mov edx, str.HP___CD4E1902
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.LENOVO
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40554c
mov edx, str.LENOVO___5237B729
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.TARGASYS
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40557c
mov edx, str.TARGASYS___D0F94E0D
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.ELONEX
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x4055ac
mov edx, str.ELONEX___81DEFFBE
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.EMAXS
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x4055dc
mov edx, str.EMAXS___4E00A936
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.Equus
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40560c
mov edx, str.Equus___0D59FC53
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.eveshamvale
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40563c
mov edx, str.Eveshamvale___A093BD92
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.Founder_PC
push ebp
push 0x1ffff
push 0
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40566c
mov edx, str.Founder___3A0C0121
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.AcerSystem
push ebp
push 0x1ffff
push 0x10000
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40569c
mov edx, str.Acer___717B6EF3
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.TravelMate
push ebp
push 0x1ffff
push 0x10000
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x4056cc
mov edx, str.Acer___700A8481
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.ASUS_FLASH
push ebp
push 0x1ffff
push 0x10000
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x4056fc
mov edx, str.ASUS___2411858C
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.Compaq
push ebp
push 0x1ffff
push 0x10000
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40572c
mov edx, str.Compaq___A5E32571
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.TOSHIBA
push ebp
push 0x1ffff
push 0x10000
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40575c
mov edx, str.TOSHIBA___A16F9D62
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.BIOSLOCKFUNCTION_ELITEGROUP
push ebp
push 0x1ffff
push 0x10000
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40578c
mov edx, str.ELITEGROUP___8EE1223C
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.BenQHub
push ebp
push 0x1ffff
push 0x1fe00
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x4057bc
mov edx, str.BenQ___B55014F0
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.Dell_System
push ebp
push 0x1e086
push 0x1e076
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x40584f
mov ebp, str.Dell_System
push ebp
push 0x149b9
push 0x149a9
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x40584f
mov ebp, str.Dell_System
push ebp
push 0x1e06e
push 0x1e05e
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x40584f
mov ebp, str.Dell_Computer
push ebp
push 0x1e850
push 0x1e840
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x40584f
mov ebp, str.Dell_Inc
push ebp
push 0x1e850
push 0x1e838
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
jne 0x40584f
jmp 0x405856
mov eax, 1
jmp 0x405858
xor eax, eax
and eax, eax
je 0x40586f
mov edx, str.Dell___B6F0EEFD
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.Dell_Quanta
push ebp
push 0xe848
push 0x1e827
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40589f
mov edx, str.Dell___87870F5A
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.Sony_Corporation
push ebp
push 0x1fff0
push 0x1ff80
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x4058fe
mov ebp, str.Sony_Corporation
push ebp
push 0x1e000
push 0x1dfc0
push dword [esp + 0x14]
call fcn.004340d7
mov ebp, str.Sony_Corporation
push ebp
push 0x1e880
push 0x1e800
push dword [esp + 0x14]
call fcn.004340d7
mov edx, str.SONY___376E13C7
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
mov ebp, str.Windows_Virtual_XP_F9161D8E7FCC11DDBFAA369856D89593
push ebp
push 0x90bd
push 0x908a
push dword [esp + 0x14]
call fcn.004340d7
and eax, eax
je 0x40592b
mov edx, str.Windows_Virtual_XP
lea ecx, [esp + 0x4c]
call fcn.0044e008
jmp 0x40592b
push dword [esp + 8]
call fcn.0045ac40
mov edx, dword [esp + 0x4c]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
pop eax
push eax
call fcn.0044e2c0
pop edx
add eax, edx
jmp 0x40595c
push dword [esp + 0x4c]
call fcn.0045e7f0
add esp, 0x50
pop ebx
pop ebp
ret