Function at 0x4d3770
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc8
mov eax, dword [ecx]
mov dword [esp + 0x24], ecx
test byte [eax + 0x59], 1
mov dword [esp + 0xc], eax
jne 0x4d37bf
mov esi, dword [ecx + 4]
mov eax, dword [esi + 0x80]
mov edx, dword [esi + 0x88]
lea ecx, [esi + 0x80]
lea ebx, [esi + 0x88]
sub eax, edx
cmp eax, 0xc
jb 0x4d46c0
mov eax, dword [ecx + 4]
mov edi, 0xc
jmp 0x4d3805
mov eax, dword [eax + 0x280]
mov esi, dword [ecx + 4]
mov eax, dword [eax + 0x15c]
mov ebx, dword [esi + 0x80]
mov edx, dword [esi + 0x88]
lea ecx, [esi + 0x80]
lea eax, [eax + eax*2]
sub ebx, edx
lea edi, [eax + eax + 0xc]
cmp ebx, edi
lea ebx, [esi + 0x88]
jb 0x4d46c5
test edi, edi
je 0x4d385b
mov eax, dword [ecx + 4]
cmp edi, 8
mov ecx, edi
jb 0x4d3850
movaps xmm0, xmmword [0x7d4550]
mov dword [esp + 4], ebx
mov ebx, edi
mov ecx, edi
mov dword [esp + 8], esi
mov dword [esp + 0x10], edi
lea esi, [eax + edx*4 + 0x10]
and ebx, 0xfffffff8
and ecx, 7
add edx, ebx
mov edi, ebx
nop word [eax + eax]
movups xmmword [esi - 0x10], xmm0
movups xmmword [esi], xmm0
add esi, 0x20
add edi, 0xfffffff8
jne 0x4d3830
cmp dword [esp + 0x10], ebx
mov esi, dword [esp + 8]
mov ebx, dword [esp + 4]
je 0x4d385b
nop dword [eax]
mov dword [eax + edx*4], 0x80000000
inc edx
dec ecx
jne 0x4d3850
mov dword [ebx], edx
call fcn.004d3330
mov dword [esp + 0x14], eax
lock inc dword [eax]
jle 0x4d46f5
mov eax, dword [esi + 0xc]
mov edi, dword [esi + 0x94]
mov ebx, esi
mov esi, dword [esi + 0x88]
mov dword [esp + 0x1c], edx
mov dword [esp + 8], ebx
add esi, dword [ebx + 0x7c]
lea ecx, [edx + edi*8 + 0x14]
lea eax, [eax + eax*2]
mov edx, edi
mov edi, dword [esp + 0xc]
lea eax, [ecx + eax*4]
add eax, dword [ebx + 0xa4]
add esi, dword [ebx + 0x38]
movzx ecx, byte [edi + 0x284]
add eax, dword [ebx + 0x68]
add esi, dword [ebx + 0x44]
add esi, dword [ebx + 0x54]
add esi, dword [ebx + 0x60]
add esi, dword [ebx + 0x98]
lea eax, [eax + esi*4]
mov esi, 4
shl esi, cl
add eax, esi
mov esi, dword [esp + 0x24]
cmp eax, dword [edi + 0x288]
jbe 0x4d3942
cmp dword [edi + 0x48], 1
jne 0x4d393b
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x6c]
cmp eax, dword [edi + 0x4c]
jb 0x4d393b
cmp dword [edi + 0x50], 1
jne 0x4d4725
mov esi, dword [esp + 8]
mov eax, dword [edi + 0x54]
mov edi, dword [esi + 0x70]
cmp dword [esi + 0xb0], 0
je 0x4d391d
mov ecx, dword [esi + 0xb8]
mov esi, dword [esi + 0xb4]
mov ebx, ecx
sub ebx, esi
neg ebx
sub ecx, esi
cmovb ecx, ebx
jmp 0x4d391f
xor ecx, ecx
add ecx, edi
mov edi, dword [esp + 0xc]
mov esi, dword [esp + 0x24]
mul edx
mov edx, 0xffffffff
cmovno edx, eax
cmp ecx, edx
jb 0x4d4725
mov ecx, esi
call fcn.004d4850
mov ecx, esi
call fcn.004d4ee0
test eax, eax
mov dword [esp + 4], edx
jne 0x4d4725
mov ebx, dword [edi + 0x284]
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 8]
mov edi, 1
and ebx, 0x1f
movzx eax, byte [eax + 8]
mov edx, dword [esi + 0x7c]
mov ecx, ebx
shl edi, cl
mov ecx, dword [esi + 0x74]
and eax, 1
shl eax, 0x1b
sub ecx, edx
mov dword [esp + 0x18], eax
cmp ecx, edi
jb 0x4d3cfa
mov eax, dword [esp + 4]
or dword [esp + 0x18], eax
mov eax, dword [esi + 0x78]
cmp ebx, 3
jb 0x4d39d7
movaps xmm0, xmmword [0x7d4550]
mov ecx, edi
and edi, 6
lea esi, [eax + edx*4 + 0x10]
and ecx, 0xfffffff8
add edx, ecx
mov ebx, ecx
nop word cs:[eax + eax]
nop
movups xmmword [esi - 0x10], xmm0
movups xmmword [esi], xmm0
add esi, 0x20
add ebx, 0xfffffff8
jne 0x4d39c0
mov esi, dword [esp + 8]
test ecx, ecx
jne 0x4d39ef
mov ecx, edx
nop dword [eax]
lea edx, [ecx + 1]
mov dword [eax + ecx*4], 0x80000000
dec edi
mov ecx, edx
jne 0x4d39e0
mov dword [esi + 0x7c], edx
mov esi, dword [esp + 0xc]
or dword [esp + 0x18], 0x80000000
mov ecx, dword [esi + 0x26c]
mov edi, dword [esi + 0x264]
mov eax, dword [esi + 0x260]
mov edx, dword [esi + 0x268]
or ecx, dword [esi + 0x27c]
or edi, dword [esi + 0x274]
or edx, dword [esi + 0x278]
or eax, dword [esi + 0x270]
or edi, ecx
lea ecx, [esi + 0x260]
mov esi, dword [esp + 8]
or eax, edx
or edi, eax
mov dword [esp + 0x10], ecx
je 0x4d3a7a
cmp dword [esp + 0x18], 0x80000000
je 0x4d3a7a
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x284]
mov eax, 1
and ecx, 0x1f
shl eax, cl
cmp ecx, 0x1b
jae 0x4d4825
or eax, 0x40000000
cmp eax, dword [esp + 0x18]
jne 0x4d3baf
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
add dword [esi + 0x68], ebx
lock inc dword [eax]
jle 0x4d46f5
mov edx, dword [esi + 0x94]
lea ecx, [esi + 0x8c]
mov dword [esp + 0x50], ecx
cmp edx, dword [esi + 0x8c]
jne 0x4d3ab5
call fcn.004c7a80
mov ebx, dword [esp + 0x1c]
mov edx, dword [esi + 0x94]
mov eax, dword [esi + 0x90]
mov edi, dword [esp + 0x14]
mov ecx, esi
mov dword [eax + edx*8], edi
mov dword [eax + edx*8 + 4], ebx
mov eax, ebx
mov ebx, dword [esp + 0x18]
inc edx
mov dword [esi + 0x94], edx
mov edx, edi
push ebx
push eax
call fcn.004d50a0
add esp, 8
mov dword [esp + 0x54], ebx
lock inc dword [edi]
jle 0x4d46f5
mov ebx, dword [esp + 0x1c]
mov edx, dword [esi + 0x94]
mov eax, dword [esi + 0xc]
mov edi, dword [esp + 0xc]
add ebx, 0x14
lea eax, [eax + eax*2]
lea ecx, [ebx + edx*8]
mov dword [esp + 0x4c], ebx
mov ebx, esi
mov esi, dword [esi + 0x88]
lea eax, [ecx + eax*4]
movzx ecx, byte [edi + 0x284]
add eax, dword [ebx + 0xa4]
add esi, dword [ebx + 0x7c]
add eax, dword [ebx + 0x68]
add esi, dword [ebx + 0x38]
add esi, dword [ebx + 0x44]
add esi, dword [ebx + 0x54]
add esi, dword [ebx + 0x60]
add esi, dword [ebx + 0x98]
lea eax, [eax + esi*4]
mov esi, 4
shl esi, cl
add eax, esi
mov esi, dword [esp + 0x24]
cmp eax, dword [edi + 0x288]
jbe 0x4d3d33
cmp dword [edi + 0x48], 1
jne 0x4d3d2c
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x6c]
cmp eax, dword [edi + 0x4c]
jb 0x4d3d2c
cmp dword [edi + 0x50], 1
jne 0x4d4759
mov esi, dword [esp + 8]
mov eax, dword [edi + 0x54]
mov edi, dword [esi + 0x70]
cmp dword [esi + 0xb0], 0
je 0x4d3d0e
mov ecx, dword [esi + 0xb8]
mov esi, dword [esi + 0xb4]
mov ebx, ecx
sub ebx, esi
neg ebx
sub ecx, esi
cmovb ecx, ebx
jmp 0x4d3d10
mov eax, 2
shl eax, cl
cmp eax, 0x8000000
jae 0x4d46f7
or eax, 0x20000000
xor edi, edi
mov dword [esp + 0x4c], eax
cmp edi, 0x101
mov eax, pe_nt_image_headers32
cmovae eax, edi
mov dword [esp + 0x28], eax
nop
cmp dword [esp + 0x28], edi
je 0x4d3a7a
mov dword [esp + 4], edi
mov eax, dword [esp + 4]
and al, 0x78
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 1
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov ecx, dword [esp + 4]
shr al, 3
neg al
movsx edi, al
mov edx, dword [esp + edi + 0xbc]
mov eax, dword [esp + edi + 0xc0]
mov ch, cl
and ch, 7
mov cl, ch
shld eax, edx, cl
shl edx, cl
not cl
mov dword [esp + 0x20], eax
mov eax, dword [esp + 4]
mov ebx, dword [esp + edi + 0xb8]
shr eax, 3
mov esi, ebx
and eax, 0x10
shr esi, 1
shr esi, cl
mov cl, ch
or esi, edx
mov edx, dword [esp + edi + 0xb4]
mov edi, dword [esp + 0x20]
shld ebx, edx, cl
shl edx, cl
mov ecx, dword [esp + 0x10]
and esi, dword [ecx + eax + 8]
and edx, dword [ecx + eax]
and edi, dword [ecx + eax + 0xc]
and ebx, dword [ecx + eax + 4]
mov eax, dword [esp + 4]
or edx, esi
mov esi, dword [esp + 8]
or ebx, edi
lea edi, [eax + 1]
or ebx, edx
je 0x4d3be0
cmp eax, 0xff
ja 0x4d3a7a
mov ecx, dword [esp + 0xc]
shl eax, 8
mov edx, esi
movzx eax, ax
push dword [esp + 0x4c]
push eax
push dword [esp + 0x20]
call fcn.004d4fb0
add esp, 0xc
jmp 0x4d3bcc
lea ecx, [esi + 0x74]
push edi
call fcn.007c7a80
add esp, 4
mov edx, dword [esi + 0x7c]
jmp 0x4d398d
xor ecx, ecx
add ecx, edi
mov edi, dword [esp + 0xc]
mov esi, dword [esp + 0x24]
mul edx
mov edx, 0xffffffff
cmovno edx, eax
cmp ecx, edx
jb 0x4d4759
mov ecx, esi
call fcn.004d4850
mov ecx, esi
call fcn.004d4ee0
test eax, eax
mov dword [esp + 4], edx
jne 0x4d4759
mov ecx, dword [edi + 0x284]
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 8]
mov edi, 1
and ecx, 0x1f
movzx eax, byte [eax + 8]
mov edx, dword [esi + 0x7c]
mov ebx, ecx
shl edi, cl
mov ecx, dword [esi + 0x74]
and eax, 1
sub ecx, edx
shl eax, 0x1b
cmp ecx, edi
mov dword [esp + 0x18], eax
jb 0x4d40aa
mov eax, dword [esp + 4]
or dword [esp + 0x18], eax
mov eax, dword [esi + 0x78]
cmp ebx, 3
jb 0x4d3dc7
movaps xmm0, xmmword [0x7d4550]
mov ecx, edi
and edi, 6
lea esi, [eax + edx*4 + 0x10]
and ecx, 0xfffffff8
add edx, ecx
mov ebx, ecx
nop word cs:[eax + eax]
nop
movups xmmword [esi - 0x10], xmm0
movups xmmword [esi], xmm0
add esi, 0x20
add ebx, 0xfffffff8
jne 0x4d3db0
mov esi, dword [esp + 8]
test ecx, ecx
jne 0x4d3ddf
mov ecx, edx
nop dword [eax]
lea edx, [ecx + 1]
mov dword [eax + ecx*4], 0x80000000
dec edi
mov ecx, edx
jne 0x4d3dd0
mov edi, dword [esp + 0x10]
mov dword [esi + 0x7c], edx
or dword [esp + 0x18], 0x40000000
mov ecx, dword [edi + 0xc]
mov eax, dword [edi]
mov edx, dword [edi + 8]
mov ebx, dword [edi + 4]
or edx, dword [edi + 0x18]
or eax, dword [edi + 0x10]
or ecx, dword [edi + 0x1c]
or ebx, dword [edi + 0x14]
or eax, edx
or ebx, ecx
or ebx, eax
je 0x4d3e39
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x284]
mov eax, 1
and ecx, 0x1f
shl eax, cl
cmp ecx, 0x1b
jae 0x4d4825
or eax, 0x40000000
cmp eax, dword [esp + 0x18]
jne 0x4d3f61
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
add dword [esi + 0x68], ecx
lock inc dword [eax]
jle 0x4d46f5
mov edx, dword [esi + 0x94]
cmp edx, dword [esi + 0x8c]
jne 0x4d3e6e
mov ecx, dword [esp + 0x50]
call fcn.004c7a80
mov ecx, dword [esp + 0x1c]
mov edx, dword [esi + 0x94]
mov eax, dword [esi + 0x90]
mov ebx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov dword [eax + edx*8], ebx
mov dword [eax + edx*8 + 4], ecx
inc edx
mov eax, ecx
mov ecx, esi
mov dword [esi + 0x94], edx
mov edx, ebx
push edi
push eax
call fcn.004d50a0
add esp, 8
mov dword [esp + 0x58], edi
lock inc dword [ebx]
jle 0x4d46f5
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 0x94]
mov ebx, esi
mov esi, dword [esi + 0x88]
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0xc]
add esi, dword [ebx + 0x7c]
lea eax, [eax + eax*2]
lea ecx, [ecx + edx*8]
lea eax, [ecx + eax*4]
movzx ecx, byte [edi + 0x284]
add eax, dword [ebx + 0xa4]
add esi, dword [ebx + 0x38]
add eax, dword [ebx + 0x68]
add esi, dword [ebx + 0x44]
add esi, dword [ebx + 0x54]
add esi, dword [ebx + 0x60]
add esi, dword [ebx + 0x98]
lea eax, [eax + esi*4]
mov esi, 4
shl esi, cl
add eax, esi
mov esi, dword [esp + 0x24]
cmp eax, dword [edi + 0x288]
jbe 0x4d40e3
cmp dword [edi + 0x48], 1
jne 0x4d40dc
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x6c]
cmp eax, dword [edi + 0x4c]
jb 0x4d40dc
cmp dword [edi + 0x50], 1
jne 0x4d478d
mov esi, dword [esp + 8]
mov eax, dword [edi + 0x54]
mov edi, dword [esi + 0x70]
cmp dword [esi + 0xb0], 0
je 0x4d40be
mov ecx, dword [esi + 0xb8]
mov esi, dword [esi + 0xb4]
mov ebx, ecx
sub ebx, esi
neg ebx
sub ecx, esi
cmovb ecx, ebx
jmp 0x4d40c0
mov eax, 2
shl eax, cl
cmp eax, 0x8000000
jae 0x4d46f7
or eax, 0x20000000
xor edi, edi
mov dword [esp + 0x5c], eax
cmp edi, 0x101
mov eax, pe_nt_image_headers32
cmovae eax, edi
mov dword [esp + 0x28], eax
cmp dword [esp + 0x28], edi
je 0x4d3e39
mov dword [esp + 4], edi
mov eax, dword [esp + 4]
and al, 0x78
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 1
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov ecx, dword [esp + 4]
shr al, 3
neg al
movsx edi, al
mov esi, dword [esp + edi + 0x9c]
mov eax, dword [esp + edi + 0xa0]
mov ch, cl
and ch, 7
mov cl, ch
shld eax, esi, cl
shl esi, cl
not cl
mov dword [esp + 0x20], eax
mov eax, dword [esp + 4]
mov edx, dword [esp + edi + 0x98]
shr eax, 3
mov ebx, edx
and eax, 0x10
shr ebx, 1
shr ebx, cl
mov cl, ch
or ebx, esi
mov esi, dword [esp + edi + 0x94]
mov edi, dword [esp + 0x20]
shld edx, esi, cl
shl esi, cl
mov ecx, dword [esp + 0x10]
and ebx, dword [ecx + eax + 8]
and esi, dword [ecx + eax]
and edi, dword [ecx + eax + 0xc]
and edx, dword [ecx + eax + 4]
mov eax, dword [esp + 4]
or edx, edi
or esi, ebx
lea edi, [eax + 1]
or edx, esi
mov esi, dword [esp + 8]
je 0x4d3f90
cmp eax, 0xff
ja 0x4d3e39
mov ecx, dword [esp + 0xc]
shl eax, 8
mov edx, esi
movzx eax, ax
push dword [esp + 0x5c]
push eax
push dword [esp + 0x20]
call fcn.004d4fb0
add esp, 0xc
jmp 0x4d3f7e
lea ecx, [esi + 0x74]
push edi
call fcn.007c7a80
add esp, 4
mov edx, dword [esi + 0x7c]
jmp 0x4d3d7e
xor ecx, ecx
add ecx, edi
mov edi, dword [esp + 0xc]
mov esi, dword [esp + 0x24]
mul edx
mov edx, 0xffffffff
cmovno edx, eax
cmp ecx, edx
jb 0x4d478d
mov ecx, esi
call fcn.004d4850
mov ecx, esi
call fcn.004d4ee0
test eax, eax
mov dword [esp + 4], edx
jne 0x4d478d
mov ecx, dword [edi + 0x284]
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 8]
mov edi, 1
and ecx, 0x1f
movzx eax, byte [eax + 8]
mov edx, dword [esi + 0x7c]
mov ebx, ecx
shl edi, cl
mov ecx, dword [esi + 0x74]
and eax, 1
sub ecx, edx
shl eax, 0x1b
cmp ecx, edi
mov dword [esp + 0x20], eax
jb 0x4d46ac
mov eax, dword [esp + 4]
or dword [esp + 0x20], eax
mov eax, dword [esi + 0x78]
cmp ebx, 3
jb 0x4d4177
movaps xmm0, xmmword [0x7d4550]
mov ecx, edi
and edi, 6
lea esi, [eax + edx*4 + 0x10]
and ecx, 0xfffffff8
add edx, ecx
mov ebx, ecx
nop word cs:[eax + eax]
nop
movups xmmword [esi - 0x10], xmm0
movups xmmword [esi], xmm0
add esi, 0x20
add ebx, 0xfffffff8
jne 0x4d4160
mov esi, dword [esp + 8]
test ecx, ecx
jne 0x4d418f
mov ecx, edx
nop dword [eax]
lea edx, [ecx + 1]
mov dword [eax + ecx*4], 0x80000000
dec edi
mov ecx, edx
jne 0x4d4180
mov edi, dword [esp + 0x10]
mov dword [esi + 0x7c], edx
or dword [esp + 0x20], 0x20000000
mov ecx, dword [edi + 0xc]
mov eax, dword [edi]
mov edx, dword [edi + 8]
mov ebx, dword [edi + 4]
or edx, dword [edi + 0x18]
or eax, dword [edi + 0x10]
or ecx, dword [edi + 0x1c]
or ebx, dword [edi + 0x14]
or eax, edx
or ebx, ecx
or ebx, eax
je 0x4d41f8
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x284]
and ecx, 0x1f
cmp ecx, 0x1b
jae 0x4d481e
mov eax, 2
shl eax, cl
cmp eax, 0x8000000
jae 0x4d46f7
or eax, 0x20000000
cmp eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
jne 0x4d458d
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
add dword [esi + 0x68], ecx
lock inc dword [eax]
jle 0x4d46f5
mov edx, dword [esi + 0x94]
mov edi, esi
cmp edx, dword [esi + 0x8c]
mov esi, dword [esp + 0xc]
jne 0x4d4233
mov ecx, dword [esp + 0x50]
call fcn.004c7a80
mov ecx, dword [esp + 0x1c]
mov edx, dword [edi + 0x94]
mov eax, dword [edi + 0x90]
mov ebx, dword [esp + 0x14]
mov dword [eax + edx*8], ebx
mov dword [eax + edx*8 + 4], ecx
inc edx
mov eax, ecx
mov ecx, edi
mov dword [edi + 0x94], edx
mov edi, dword [esp + 0x20]
mov edx, ebx
push edi
push eax
call fcn.004d50a0
add esp, 8
cmp dword [esp + 0x54], 0x80000000
mov dword [esp + 0x60], edi
mov dword [esp + 0x2c], 0x80000000
jne 0x4d47c1
mov ecx, dword [esi + 0x284]
mov eax, 1
and ecx, 0x1f
shl eax, cl
cmp ecx, 0x1b
jae 0x4d4825
or eax, 0x40000000
mov esi, dword [esp + 8]
cmp dword [esp + 0x58], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], eax
jne 0x4d47e0
mov eax, 2
shl eax, cl
cmp eax, 0x8000000
jae 0x4d46f7
or eax, 0x20000000
cmp dword [esp + 0x20], eax
mov dword [esp + 0x2c], eax
jne 0x4d47ff
xor eax, eax
mov dword [esp + 0x10], 0
jmp 0x4d4317
movzx ebx, byte [edi + eax + 0x160]
lea ecx, [eax + 1]
xor edx, edx
mov dword [esp + 4], ecx
mov cl, 1
mov dword [esp + 0x10], ecx
shl eax, 8
mov ecx, edi
or eax, edx
mov edx, esi
push 0x80000000
push eax
push 0x80000000
call fcn.004d4fb0
add esp, 0xc
mov eax, dword [esp + 4]
mov ecx, ebx
cmp byte [esp + 0x10], 0
je 0x4d4360
mov edi, dword [esp + 0xc]
cmp eax, 0x101
mov edx, pe_nt_image_headers32
cmovae edx, eax
nop
cmp edx, eax
je 0x4d4380
movzx esi, al
inc eax
movzx ebx, byte [edi + esi + 0x160]
cmp cl, bl
je 0x4d4330
mov dword [esp + 4], eax
mov eax, esi
mov esi, dword [esp + 8]
mov cl, 1
xor edx, edx
jmp 0x4d42f1
mov edi, dword [esp + 0xc]
cmp eax, 0xff
jbe 0x4d42de
mov edx, eax
cmp edx, 0xffffffff
jne 0x4d4389
jmp 0x4d43af
mov esi, dword [esp + 8]
cmp edx, 0xffffffff
je 0x4d43af
movzx eax, byte [edi + 0x25f]
mov edx, 1
mov ebx, ecx
mov dword [esp + 4], 0xffffffff
shl eax, 0x10
add eax, 0x10001
shr eax, 8
jmp 0x4d42f5
xor eax, eax
mov dword [esp + 0x10], 0
jmp 0x4d43f0
movzx ebx, byte [edi + eax + 0x160]
lea ecx, [eax + 1]
xor edx, edx
mov dword [esp + 4], ecx
mov cl, 1
mov dword [esp + 0x10], ecx
mov ecx, edi
mov edi, dword [esp + 0x28]
shl eax, 8
or eax, edx
mov edx, esi
push edi
push eax
push edi
call fcn.004d4fb0
add esp, 0xc
mov eax, dword [esp + 4]
mov ecx, ebx
cmp byte [esp + 0x10], 0
je 0x4d4440
mov edi, dword [esp + 0xc]
cmp eax, 0x101
mov edx, pe_nt_image_headers32
cmovae edx, eax
nop dword [eax + eax]
cmp edx, eax
je 0x4d4460
movzx esi, al
inc eax
movzx ebx, byte [edi + esi + 0x160]
cmp cl, bl
je 0x4d4410
mov dword [esp + 4], eax
mov eax, esi
mov esi, dword [esp + 8]
mov cl, 1
xor edx, edx
jmp 0x4d43ce
mov edi, dword [esp + 0xc]
cmp eax, 0xff
jbe 0x4d43bb
mov edx, eax
cmp edx, 0xffffffff
jne 0x4d4469
jmp 0x4d448f
mov esi, dword [esp + 8]
cmp edx, 0xffffffff
je 0x4d448f
movzx eax, byte [edi + 0x25f]
mov edx, 1
mov ebx, ecx
mov dword [esp + 4], 0xffffffff
shl eax, 0x10
add eax, 0x10001
shr eax, 8
jmp 0x4d43d2
xor eax, eax
mov dword [esp + 0x10], 0
jmp 0x4d44d0
movzx ebx, byte [edi + eax + 0x160]
lea ecx, [eax + 1]
xor edx, edx
mov dword [esp + 4], ecx
mov cl, 1
mov dword [esp + 0x10], ecx
mov ecx, edi
mov edi, dword [esp + 0x20]
shl eax, 8
or eax, edx
mov edx, esi
push edi
push eax
push edi
call fcn.004d4fb0
add esp, 0xc
mov eax, dword [esp + 4]
mov ecx, ebx
cmp byte [esp + 0x10], 0
je 0x4d4520
mov edi, dword [esp + 0xc]
cmp eax, 0x101
mov edx, pe_nt_image_headers32
cmovae edx, eax
nop dword [eax + eax]
cmp edx, eax
je 0x4d4540
movzx esi, al
inc eax
movzx ebx, byte [edi + esi + 0x160]
cmp cl, bl
je 0x4d44f0
mov dword [esp + 4], eax
mov eax, esi
mov esi, dword [esp + 8]
xor edx, edx
jmp 0x4d44ac
mov edi, dword [esp + 0xc]
cmp eax, 0xff
jbe 0x4d449b
mov edx, eax
cmp edx, 0xffffffff
jne 0x4d4549
jmp 0x4d456f
mov esi, dword [esp + 8]
cmp edx, 0xffffffff
je 0x4d456f
movzx eax, byte [edi + 0x25f]
mov edx, 1
mov dword [esp + 4], 0xffffffff
mov ebx, ecx
shl eax, 0x10
add eax, 0x10001
shr eax, 8
jmp 0x4d44b2
mov edx, dword [esp + 0x14]
mov ecx, esi
push dword [esp + 0x28]
push dword [esp + 0x20]
call fcn.004d50a0
add esp, 8
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor edi, edi
cmp edi, 0x101
mov eax, pe_nt_image_headers32
cmovae eax, edi
mov dword [esp + 0x18], eax
nop word cs:[eax + eax]
nop dword [eax + eax]
cmp dword [esp + 0x18], edi
je 0x4d41f8
mov dword [esp + 4], edi
mov eax, dword [esp + 4]
and al, 0x78
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 1
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
mov ecx, dword [esp + 4]
shr al, 3
neg al
movsx edi, al
mov esi, dword [esp + edi + 0x7c]
mov eax, dword [esp + edi + 0x80]
mov ch, cl
and ch, 7
mov cl, ch
shld eax, esi, cl
shl esi, cl
not cl
mov dword [esp + 0x28], eax
mov eax, dword [esp + 4]
mov edx, dword [esp + edi + 0x78]
shr eax, 3
mov ebx, edx
and eax, 0x10
shr ebx, 1
shr ebx, cl
mov cl, ch
or ebx, esi
mov esi, dword [esp + edi + 0x74]
mov edi, dword [esp + 0x28]
shld edx, esi, cl
shl esi, cl
mov ecx, dword [esp + 0x10]
and ebx, dword [ecx + eax + 8]
and esi, dword [ecx + eax]
and edi, dword [ecx + eax + 0xc]
and edx, dword [ecx + eax + 4]
mov eax, dword [esp + 4]
or edx, edi
or esi, ebx
lea edi, [eax + 1]
or edx, esi
mov esi, dword [esp + 8]
je 0x4d45b0
cmp eax, 0xff
ja 0x4d41f8
mov ecx, dword [esp + 0xc]
shl eax, 8
mov edx, esi
movzx eax, ax
push dword [esp + 0x24]
push eax
push dword [esp + 0x28]
call fcn.004d4fb0
add esp, 0xc
jmp 0x4d458f
lea ecx, [esi + 0x74]
push edi
call fcn.007c7a80
add esp, 4
mov edx, dword [esi + 0x7c]
jmp 0x4d412e
mov edi, 0xc
mov dword [esp + 8], ecx
lea ecx, [esi + 0x80]
push edi
call fcn.007c7a80
add esp, 4
mov edx, dword [esi + 0x88]
mov ecx, dword [esp + 8]
mov eax, dword [ecx + 4]
cmp edi, 8
mov ecx, edi
jb 0x4d3850
jmp 0x4d3805
ud2
lea eax, [esp + 0x30]
mov ecx, 0x93b384
mov edx, 0x2b
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0x8000000
push 0x84eefc
push 0x84df38
push eax
call fcn.007c1f60
mov eax, dword [esp + 0x14]
lock dec dword [eax]
jne 0x4d473b
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
call fcn.004731d0
lea eax, [esp + 0x30]
mov ecx, 0x93b384
mov edx, 0x2b
push 0x84ed14
push 0x84deb8
push eax
call fcn.007c1f60
mov eax, dword [esp + 0x14]
lock dec dword [eax]
jne 0x4d476f
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
call fcn.004731d0
lea eax, [esp + 0x30]
mov ecx, 0x93b384
mov edx, 0x2b
push 0x84ed24
push 0x84deb8
push eax
call fcn.007c1f60
mov eax, dword [esp + 0x14]
lock dec dword [eax]
jne 0x4d47a3
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
call fcn.004731d0
lea eax, [esp + 0x30]
mov ecx, 0x93b384
mov edx, 0x2b
push 0x84ed34
push 0x84deb8
push eax
call fcn.007c1f60
mov dword [esp + 0x30], 0
lea eax, [esp + 0x30]
lea ecx, [esp + 0x54]
lea edx, [esp + 0x2c]
push 0x84ed44
push eax
call fcn.007c7b20
mov dword [esp + 0x30], 0
lea eax, [esp + 0x30]
lea ecx, [esp + 0x58]
lea edx, [esp + 0x2c]
push 0x84ed54
push eax
call fcn.007c7b20
mov dword [esp + 0x30], 0
lea eax, [esp + 0x30]
lea ecx, [esp + 0x60]
lea edx, [esp + 0x2c]
push 0x84ed64
push eax
call fcn.007c7b20
mov eax, 1
shl eax, cl
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
mov ecx, 0x93b384
mov edx, 0x2b
mov dword [esp + 0x34], 0
push 0x84eeec
push 0x84df38
push eax
call fcn.007c1f60
int3