Function at 0x473c30
Capabilities:
Contain obfuscated stackstrings
Read file via mapping

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52d5e5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x320
mov eax, dword [0x566090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x308], edi
xor edx, edx
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x2d8], edx
mov dword [ebp - 0x2d4], edx
mov byte [ebp - 0x9c], dl
mov edx, 0x5486b8
mov dword [ebp - 0xa0], 0x203e2d20
call fcn.00488ec0
push eax
lea edx, [ebp - 0x28]
mov dword [ebp - 0x28], 0x5244425b
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x24], 0x494e4945
mov dword [ebp - 0x20], 0x3a205d54
mov word [ebp - 0x1c], 0x203a
mov byte [ebp - 0x1a], 0
call fcn.00489000
add esp, 4
lea ecx, [ebp - 0xa0]
mov edx, eax
push ecx
lea ecx, [ebp - 0x2d0]
call fcn.004891a0
add esp, 4
mov dword [ebp - 0xa0], 0x202d3c20
mov edx, 0x5486b8
mov byte [ebp - 0x9c], 0
lea ecx, [ebp - 0xfc]
call fcn.00488ec0
push eax
lea edx, [ebp - 0x28]
mov dword [ebp - 0x28], 0x5244425b
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x24], 0x494e4945
mov dword [ebp - 0x20], 0x3a205d54
mov word [ebp - 0x1c], 0x203a
mov byte [ebp - 0x1a], 0
call fcn.00489000
add esp, 4
lea ecx, [ebp - 0xa0]
mov edx, eax
push ecx
lea ecx, [ebp - 0x290]
call fcn.004891a0
add esp, 4
call fcn.00441aa0
mov esi, eax
mov dword [ebp - 0x320], 0
xorps xmm0, xmm0
mov dword [ebp - 0x324], esi
lea eax, [ebp - 0x290]
movlpd qword [ebp - 0x330], xmm0
mov dword [ebp - 0x328], eax
mov ecx, dword [esi]
cmp dword [ecx], 0
je 0x473dd5
lea eax, [ebp - 0xa0]
movlpd qword [ebp - 0xa0], xmm0
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
push 0x546f10
mov dword [ebp - 0x330], eax
lea eax, [ebp - 0x2d0]
push eax
push str._s_s
push 0x546f10
push 0
push esi
mov dword [ebp - 0x32c], ecx
call fcn.0043d760
add esp, 0x18
lea ecx, [ebp - 0x314]
mov dword [ebp - 4], 0
push ecx
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x310], 0
lea eax, [edi + 0x620]
mov dword [ebp - 0x314], 0
push ecx
push eax
mov dword [ebp - 0x2dc], eax
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumW]
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x47449f
call fcn.00441aa0
mov dword [ebp - 0x2e8], 0x807d
mov edx, 0x807b
mov dword [ebp - 0x2ec], 0x8000
mov dword [ebp - 0x2f0], 0x28
mov eax, dword [eax]
mov dword [ebp - 0x2e0], 0x29
mov dword [ebp - 0x2e4], 0x2d
cmp dword [eax], 0
je 0x474034
mov eax, dword [ebp - 0x2e8]
lea ecx, [ebp - 0xd0]
mov word [ebp - 0x4a], ax
mov word [ebp - 0x34], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x32], ax
xor eax, eax
mov word [ebp - 0x4c], dx
lea edx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x806f8047
mov dword [ebp - 0x5c], 0x80208074
mov dword [ebp - 0x58], 0x80688063
mov dword [ebp - 0x54], 0x80638065
mov dword [ebp - 0x50], 0x8020806b
mov dword [ebp - 0x48], 0x80768020
mov dword [ebp - 0x44], 0x80208073
mov dword [ebp - 0x40], 0x806f8063
mov dword [ebp - 0x3c], 0x8070806d
mov dword [ebp - 0x38], 0x807b8020
mov word [ebp - 0x30], ax
call fcn.00419a70
mov byte [ebp - 4], 1
lea esi, [ebp - 0xd0]
cmp dword [ebp - 0xbc], 8
mov ecx, dword [ebp - 0x310]
cmovae esi, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x314]
mov dword [ebp - 0x28], ecx
mov ecx, esi
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x2d8], 0x200001
lea edx, [ecx + 2]
mov dword [ebp - 0x1c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x473f27
sub ecx, edx
sub esp, 0x10
mov eax, esp
sar ecx, 1
lea edx, [ebp - 0x28]
push ecx
push esi
lea ecx, [ebp - 0xb8]
mov dword [eax], 0x22
mov dword [eax + 4], 0
mov dword [eax + 8], edx
call fcn.00426fd0
add esp, 0x18
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 2
push eax
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x2d8], 0x600003
call fcn.00444e70
mov eax, dword [ebp - 0x2f0]
lea edi, [ebp - 0x98]
mov dword [ebp - 4], 3
mov edx, 0xe00007
mov ecx, dword [ebp - 0x2e4]
cmp dword [ebp - 0x84], 8
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
cmovae edi, dword [ebp - 0x98]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov dword [ebp - 0x2d4], edx
mov dword [ebp - 0x2d8], edx
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0xf0]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 0
push eax
call fcn.0043ebb0
add esp, 0x14
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x2d4]
test al, 4
je 0x4740b1
mov edx, dword [ebp - 0x84]
and eax, 0xfffffffb
mov dword [ebp - 0x2d4], eax
cmp edx, 8
jb 0x474094
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474084
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d2e
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d4]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], cx
mov dword [ebp - 4], 1
test al, 2
je 0x474128
mov edx, dword [ebp - 0xa4]
and eax, 0xfffffffd
mov dword [ebp - 0x2d4], eax
cmp edx, 8
jb 0x47410b
mov ecx, dword [ebp - 0xb8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4740fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d2e
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d4]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], cx
mov dword [ebp - 4], 0
test al, 1
je 0x47417c
mov edx, dword [ebp - 0xbc]
and eax, 0xfffffffe
mov dword [ebp - 0x2d4], eax
cmp edx, 8
jb 0x47417c
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474172
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d2e
push edx
push ecx
call fcn.004fc7e0
add esp, 8
mov eax, dword [ebp - 0x310]
cmp eax, dword [ebp - 0x314]
je 0x47474f
call fcn.00441aa0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x474345
mov eax, 0x806d
mov dword [ebp - 0x70], 0x80728054
mov word [ebp - 0x34], ax
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 0x2ec]
lea ecx, [ebp - 0xb8]
mov word [ebp - 0x32], ax
xor eax, eax
mov dword [ebp - 0x6c], 0x80638061
mov dword [ebp - 0x68], 0x802c8065
mov dword [ebp - 0x64], 0x80668020
mov dword [ebp - 0x60], 0x8075806f
mov dword [ebp - 0x5c], 0x8064806e
mov dword [ebp - 0x58], 0x80638020
mov dword [ebp - 0x54], 0x8072806f
mov dword [ebp - 0x50], 0x80758072
mov dword [ebp - 0x4c], 0x80748070
mov dword [ebp - 0x48], 0x80648065
mov dword [ebp - 0x44], 0x80638020
mov dword [ebp - 0x40], 0x80658068
mov dword [ebp - 0x3c], 0x806b8063
mov dword [ebp - 0x38], 0x80758073
mov word [ebp - 0x30], ax
call fcn.00419a70
mov esi, dword [ebp - 0x2d4]
or esi, 0x1000000
mov byte [ebp - 4], 4
lea eax, [ebp - 0xb8]
or esi, 8
lea edx, [ebp - 0x2d4]
cmp dword [ebp - 0xa4], 8
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x2d8], esi
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x2d4], eax
call fcn.0041ccb0
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x98]
or esi, 0x10
push eax
mov dword [ebp - 0x2d8], esi
call fcn.00444e70
or esi, 0x2000000
mov eax, dword [ebp - 0x2f0]
lea edi, [ebp - 0x98]
mov dword [ebp - 4], 6
or esi, 0x20
mov ecx, dword [ebp - 0x2e4]
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
cmp dword [ebp - 0x84], 8
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
cmovae edi, dword [ebp - 0x98]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x2d4], esi
mov dword [ebp - 0x2d8], esi
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0xf0]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 0
push eax
call fcn.0043ebb0
add esp, 0x14
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x2d4]
test al, 0x20
je 0x4743c2
mov edx, dword [ebp - 0x84]
and eax, 0xffffffdf
mov dword [ebp - 0x2d4], eax
cmp edx, 8
jb 0x4743a5
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474395
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d33
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d4]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], cx
mov dword [ebp - 4], 4
test al, 0x10
je 0x474439
mov edx, dword [ebp - 0xbc]
and eax, 0xffffffef
mov dword [ebp - 0x2d4], eax
cmp edx, 8
jb 0x47441c
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47440c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d33
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d4]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], cx
mov dword [ebp - 4], 0
test al, 8
je 0x47448d
mov edx, dword [ebp - 0xa4]
and eax, 0xfffffff7
mov dword [ebp - 0x2d4], eax
cmp edx, 8
jb 0x47448d
mov ecx, dword [ebp - 0xb8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474483
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d33
push edx
push ecx
call fcn.004fc7e0
add esp, 8
mov eax, dword [ebp - 0x308]
mov byte [eax + 0x1a48], 1
jmp 0x47474f
mov eax, 0x807d
mov dword [ebp - 0x80], 0x80728045
mov dword [ebp - 0x2e8], eax
lea edx, [ebp - 0x80]
mov eax, 0x8000
mov dword [ebp - 0x7c], 0x806f8072
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x78], 0x802c8072
mov dword [ebp - 0x74], 0x80638020
mov dword [ebp - 0x70], 0x806c8061
mov dword [ebp - 0x6c], 0x8069806c
mov dword [ebp - 0x68], 0x8067806e
mov dword [ebp - 0x64], 0x804d8020
mov dword [ebp - 0x60], 0x80708061
mov dword [ebp - 0x5c], 0x80698046
mov dword [ebp - 0x58], 0x8065806c
mov dword [ebp - 0x54], 0x806e8041
mov dword [ebp - 0x50], 0x80438064
mov dword [ebp - 0x4c], 0x80658068
mov dword [ebp - 0x48], 0x806b8063
mov dword [ebp - 0x44], 0x80758053
mov dword [ebp - 0x40], 0x8057806d
mov dword [ebp - 0x3c], 0x8020803a
mov dword [ebp - 0x38], 0x807d807b
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x34], eax
call fcn.00419a70
mov byte [ebp - 4], 7
lea eax, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 8
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x2e0], eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.0041d930
add esp, 4
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 8
call fcn.00444e70
mov edx, 0x14000000
mov dword [ebp - 0x2d4], edx
mov byte [ebp - 4], 9
lea edi, [ebp - 0x98]
cmp dword [ebp - 0x84], 8
mov eax, 0x28
mov ecx, 0x2d
mov dword [ebp - 0x2f0], eax
cmovae edi, dword [ebp - 0x98]
mov eax, 0x29
mov dword [ebp - 0x2e4], ecx
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x24], 0x290028
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x20], 0x2d0020
mov dword [ebp - 0x1c], 0x20
call fcn.00489460
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0xf0]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 8
push eax
call fcn.0043ebb0
mov byte [ebp - 4], 8
add esp, 0x14
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x47468e
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474684
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d38
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
cmp edx, 8
jb 0x4746ef
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4746e5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d38
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov dword [ebp - 0xc0], 0
mov byte [ebp - 4], al
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
cmp edx, 8
jb 0x47474f
mov ecx, dword [ebp - 0xb8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474745
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d38
push edx
push ecx
call fcn.004fc7e0
add esp, 8
push 0
push 0x80
push 3
push 0
push 7
push SysReAllocString
push dword [ebp - 0x2dc]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
mov dword [ebp - 0x318], edi
mov byte [ebp - 4], 0xa
cmp edi, 0xffffffff
je 0x475a10
test edi, edi
je 0x475a10
push 0
push 0
push 0
push 2
push 0
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
mov dword [ebp - 0x9c], esi
mov byte [ebp - 4], 0xe
test esi, esi
je 0x475740
cmp esi, 0xffffffff
je 0x475740
push 0
push 0
push 0
push 4
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x2f8], eax
test eax, eax
mov byte [ebp - 4], 0x12
setne byte [ebp - 0x309]
test eax, eax
jne 0x474a9c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2dc], eax
lea edx, [ebp - 0x78]
mov eax, 0x807b
mov dword [ebp - 0x78], 0x80728045
mov word [ebp - 0x3c], ax
lea ecx, [ebp - 0xb8]
mov eax, dword [ebp - 0x2e8]
mov word [ebp - 0x3a], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x38], ax
xor eax, eax
mov dword [ebp - 0x74], 0x806f8072
mov dword [ebp - 0x70], 0x802c8072
mov dword [ebp - 0x6c], 0x80638020
mov dword [ebp - 0x68], 0x806c8061
mov dword [ebp - 0x64], 0x8069806c
mov dword [ebp - 0x60], 0x8067806e
mov dword [ebp - 0x5c], 0x804d8020
mov dword [ebp - 0x58], 0x80708061
mov dword [ebp - 0x54], 0x80698056
mov dword [ebp - 0x50], 0x80778065
mov dword [ebp - 0x4c], 0x8066804f
mov dword [ebp - 0x48], 0x80698046
mov dword [ebp - 0x44], 0x8065806c
mov dword [ebp - 0x40], 0x8020803a
mov word [ebp - 0x36], ax
call fcn.00419a70
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 8
lea edx, [ebp - 0x308]
lea ecx, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.0041d930
add esp, 4
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x14
call fcn.00444e70
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x98]
cmp dword [ebp - 0x84], 8
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
mov ecx, dword [ebp - 0x2e4]
cmovae eax, dword [ebp - 0x98]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
mov dword [ebp - 0x2dc], eax
lea ecx, [ebp - 0xf0]
call fcn.00419450
push dword [ebp - 0x2dc]
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov dword [ebp - 0x2dc], eax
call fcn.00441aa0
push dword [ebp - 0x308]
push 0
push dword [ebp - 0x2dc]
push 8
push eax
call fcn.0043ebb0
mov byte [ebp - 4], 0x14
add esp, 0x14
mov edx, dword [ebp - 0x84]
cmp edx, 8
jb 0x4749d1
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4749c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d3d
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
cmp edx, 8
jb 0x474a32
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474a28
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d3d
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
cmp edx, 8
jb 0x475711
mov ecx, dword [ebp - 0xb8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474a8d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d3d
push edx
push ecx
call fcn.004fc7e0
add esp, 8
jmp 0x475711
mov ecx, dword [eax + 0x3c]
mov edx, dword [ebp - 0x308]
add ecx, eax
lea eax, [edx + 0x1a38]
mov dword [ebp - 0x304], eax
mov eax, dword [ecx + 8]
mov dword [edx + 0x1a38], eax
lea eax, [edx + 0x1a3c]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ecx + 0x58]
mov dword [edx + 0x1a3c], eax
lea eax, [edx + 0x1a44]
mov dword [ebp - 0x300], eax
mov eax, dword [ecx + 0x28]
mov dword [edx + 0x1a44], eax
mov eax, dword [ecx + 0x50]
mov dword [edx + 0x1a40], eax
call fcn.00441aa0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x474cc7
mov eax, dword [ebp - 0x2e8]
lea edx, [ebp - 0x5c]
mov word [ebp - 0x34], ax
lea ecx, [ebp - 0xb8]
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x32], ax
xor eax, eax
mov dword [ebp - 0x5c], 0x80788045
mov dword [ebp - 0x58], 0x80658063
mov dword [ebp - 0x54], 0x80748070
mov dword [ebp - 0x50], 0x806f8069
mov dword [ebp - 0x4c], 0x8020806e
mov dword [ebp - 0x48], 0x806f806d
mov dword [ebp - 0x44], 0x80758064
mov dword [ebp - 0x40], 0x8065806c
mov dword [ebp - 0x3c], 0x803a8020
mov dword [ebp - 0x38], 0x807b8020
mov word [ebp - 0x30], ax
call fcn.00419a70
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x2dc]
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0xd0]
or eax, 0x40
cmp dword [ebp - 0xa4], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xb8]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x308]
add eax, 0x418
push eax
call fcn.0041d9c0
add esp, 4
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x98]
mov edx, dword [ebp - 0x2d4]
or edx, 0x80
push eax
mov dword [ebp - 0x2d4], edx
mov dword [ebp - 0x2d8], edx
call fcn.00444e70
mov dword [ebp - 4], 0x18
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x2e4]
or eax, 0x100
cmp dword [ebp - 0x84], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0x98]
cmovae eax, dword [ebp - 0x98]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
mov dword [ebp - 0x2dc], eax
lea ecx, [ebp - 0xf0]
call fcn.00419450
push dword [ebp - 0x2dc]
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov dword [ebp - 0x2dc], eax
call fcn.00441aa0
push dword [ebp - 0x2f4]
push 0
push dword [ebp - 0x2dc]
push 0
push eax
call fcn.0043ebb0
mov edi, dword [ebp - 0x318]
add esp, 0x14
mov dword [ebp - 4], 0x17
mov eax, dword [ebp - 0x2d4]
test eax, 0x100
je 0x474d49
mov edx, dword [ebp - 0x84]
and eax, 0xfffffeff
mov dword [ebp - 0x2d4], eax
cmp edx, 8
jb 0x474d2c
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474d1c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d42
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d4]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], cx
mov dword [ebp - 4], 0x16
test al, al
jns 0x474dc2
mov edx, dword [ebp - 0xbc]
and eax, 0xffffff7f
mov dword [ebp - 0x2d4], eax
cmp edx, 8
jb 0x474da5
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x474d95
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d42
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d4]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], cx
mov dword [ebp - 4], 0x12
test al, 0x40
je 0x474de1
and eax, 0xffffffbf
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
call fcn.00441aa0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x474fc2
mov eax, dword [ebp - 0x308]
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x5c], 0x8066804f
mov dword [ebp - 0x58], 0x80738066
mov dword [ebp - 0x54], 0x80748065
mov eax, dword [eax + 0x1a30]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2e8]
mov word [ebp - 0x34], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x32], ax
xor eax, eax
mov dword [ebp - 0x50], 0x80208020
mov dword [ebp - 0x4c], 0x80208020
mov dword [ebp - 0x48], 0x80208020
mov dword [ebp - 0x44], 0x80208020
mov dword [ebp - 0x40], 0x80208020
mov dword [ebp - 0x3c], 0x803a8020
mov dword [ebp - 0x38], 0x807b8020
mov word [ebp - 0x30], ax
call fcn.00419a70
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x2dc]
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x98]
or eax, 0x200
cmp dword [ebp - 0xa4], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xb8]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x2dc], eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.00486c80
add esp, 4
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0xd0]
mov edx, dword [ebp - 0x2d4]
or edx, 0x400
push eax
mov dword [ebp - 0x2d4], edx
mov dword [ebp - 0x2d8], edx
call fcn.00444e70
mov dword [ebp - 4], 0x1b
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x2e4]
or eax, 0x800
cmp dword [ebp - 0xbc], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
mov dword [ebp - 0x2f4], eax
lea ecx, [ebp - 0xf0]
call fcn.00419450
push dword [ebp - 0x2f4]
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov dword [ebp - 0x2f4], eax
call fcn.00441aa0
push dword [ebp - 0x2dc]
push 0
push dword [ebp - 0x2f4]
push 0
push eax
call fcn.0043ebb0
add esp, 0x14
mov eax, dword [ebp - 0x2d4]
test eax, 0x800
je 0x474feb
and eax, 0xfffff7ff
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
mov eax, dword [ebp - 0x2d4]
test eax, 0x400
je 0x47500e
and eax, 0xfffffbff
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 4], 0x12
test eax, 0x200
je 0x475032
and eax, 0xfffffdff
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
call fcn.00441aa0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x475210
mov eax, 0x8078
mov dword [ebp - 0x64], 0x80688043
mov word [ebp - 0x38], ax
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0x2e8]
lea ecx, [ebp - 0xb8]
mov word [ebp - 0x36], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x34], ax
xor eax, eax
mov dword [ebp - 0x60], 0x80638065
mov dword [ebp - 0x5c], 0x8053806b
mov dword [ebp - 0x58], 0x806d8075
mov dword [ebp - 0x54], 0x80208020
mov dword [ebp - 0x50], 0x80208020
mov dword [ebp - 0x4c], 0x80208020
mov dword [ebp - 0x48], 0x80208020
mov dword [ebp - 0x44], 0x803a8020
mov dword [ebp - 0x40], 0x807b8020
mov dword [ebp - 0x3c], 0x8023803a
mov word [ebp - 0x32], ax
call fcn.00419a70
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0x2f4]
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x98]
push dword [ebp - 0x2fc]
or eax, 0x1000
cmp dword [ebp - 0xa4], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xb8]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x2f4], eax
call fcn.0041d930
add esp, 4
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0xd0]
mov edx, dword [ebp - 0x2d4]
or edx, 0x2000
push eax
mov dword [ebp - 0x2d4], edx
mov dword [ebp - 0x2d8], edx
call fcn.00444e70
mov dword [ebp - 4], 0x1e
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x2e4]
or eax, 0x4000
cmp dword [ebp - 0xbc], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
mov dword [ebp - 0x2fc], eax
lea ecx, [ebp - 0xf0]
call fcn.00419450
push dword [ebp - 0x2fc]
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov dword [ebp - 0x2fc], eax
call fcn.00441aa0
push dword [ebp - 0x2f4]
push 0
push dword [ebp - 0x2fc]
push 0
push eax
call fcn.0043ebb0
add esp, 0x14
mov eax, dword [ebp - 0x2d4]
test eax, 0x4000
je 0x475239
and eax, 0xffffbfff
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
mov eax, dword [ebp - 0x2d4]
test eax, 0x2000
je 0x47525c
and eax, 0xffffdfff
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 4], 0x12
test eax, 0x1000
je 0x475280
and eax, 0xffffefff
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
call fcn.00441aa0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x47545e
mov eax, 0x8078
mov dword [ebp - 0x64], 0x806e8045
mov word [ebp - 0x38], ax
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0x2e8]
lea ecx, [ebp - 0xb8]
mov word [ebp - 0x36], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x34], ax
xor eax, eax
mov dword [ebp - 0x60], 0x80728074
mov dword [ebp - 0x5c], 0x80508079
mov dword [ebp - 0x58], 0x8069806f
mov dword [ebp - 0x54], 0x8074806e
mov dword [ebp - 0x50], 0x80208020
mov dword [ebp - 0x4c], 0x80208020
mov dword [ebp - 0x48], 0x80208020
mov dword [ebp - 0x44], 0x803a8020
mov dword [ebp - 0x40], 0x807b8020
mov dword [ebp - 0x3c], 0x8023803a
mov word [ebp - 0x32], ax
call fcn.00419a70
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x2fc]
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x98]
push dword [ebp - 0x300]
or eax, 0x8000
cmp dword [ebp - 0xa4], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xb8]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x2fc], eax
call fcn.0041d930
add esp, 4
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0xd0]
mov edx, dword [ebp - 0x2d4]
or edx, 0x10000
push eax
mov dword [ebp - 0x2d4], edx
mov dword [ebp - 0x2d8], edx
call fcn.00444e70
mov dword [ebp - 4], 0x21
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x2e4]
or eax, 0x20000
cmp dword [ebp - 0xbc], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
mov dword [ebp - 0x300], eax
lea ecx, [ebp - 0xf0]
call fcn.00419450
push dword [ebp - 0x300]
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov dword [ebp - 0x300], eax
call fcn.00441aa0
push dword [ebp - 0x2fc]
push 0
push dword [ebp - 0x300]
push 0
push eax
call fcn.0043ebb0
add esp, 0x14
mov eax, dword [ebp - 0x2d4]
test eax, 0x20000
je 0x475487
and eax, 0xfffdffff
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
mov eax, dword [ebp - 0x2d4]
test eax, 0x10000
je 0x4754aa
and eax, 0xfffeffff
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 4], 0x12
test eax, 0x8000
je 0x4754ce
and eax, 0xffff7fff
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
call fcn.00441aa0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x4756ac
mov eax, 0x8078
mov dword [ebp - 0x64], 0x80698054
mov word [ebp - 0x38], ax
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0x2e8]
lea ecx, [ebp - 0xb8]
mov word [ebp - 0x36], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x34], ax
xor eax, eax
mov dword [ebp - 0x60], 0x8065806d
mov dword [ebp - 0x5c], 0x80748053
mov dword [ebp - 0x58], 0x806d8061
mov dword [ebp - 0x54], 0x80208070
mov dword [ebp - 0x50], 0x80208020
mov dword [ebp - 0x4c], 0x80208020
mov dword [ebp - 0x48], 0x80208020
mov dword [ebp - 0x44], 0x803a8020
mov dword [ebp - 0x40], 0x807b8020
mov dword [ebp - 0x3c], 0x8023803a
mov word [ebp - 0x32], ax
call fcn.00419a70
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x300]
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x98]
push dword [ebp - 0x304]
or eax, 0x40000
cmp dword [ebp - 0xa4], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xb8]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x300], eax
call fcn.0041d930
add esp, 4
mov dword [ebp - 4], 0x23
lea ecx, [ebp - 0xd0]
mov edx, dword [ebp - 0x2d4]
or edx, 0x80000
push eax
mov dword [ebp - 0x2d4], edx
mov dword [ebp - 0x2d8], edx
call fcn.00444e70
mov dword [ebp - 4], 0x24
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x2e4]
or eax, 0x100000
cmp dword [ebp - 0xbc], 8
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xd0]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
mov dword [ebp - 0x304], eax
lea ecx, [ebp - 0xf0]
call fcn.00419450
push dword [ebp - 0x304]
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov dword [ebp - 0x304], eax
call fcn.00441aa0
push dword [ebp - 0x300]
push 0
push dword [ebp - 0x304]
push 0
push eax
call fcn.0043ebb0
add esp, 0x14
mov eax, dword [ebp - 0x2d4]
test eax, 0x100000
je 0x4756d5
and eax, 0xffefffff
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
mov eax, dword [ebp - 0x2d4]
test eax, 0x80000
je 0x4756f8
and eax, 0xfff7ffff
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x2d4], eax
call fcn.00445ad0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 4], 0x12
test eax, 0x40000
je 0x475711
lea ecx, [ebp - 0xb8]
call fcn.00445ad0
cmp byte [ebp - 0x309], 0
mov byte [ebp - 4], 0xe
je 0x475a02
mov byte [ebp - 4], 0x25
push dword [ebp - 0x2f8]
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x475d02
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2f8], eax
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x2e8]
lea ecx, [ebp - 0xb8]
mov word [ebp - 0x38], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x36], ax
xor eax, eax
mov dword [ebp - 0x80], 0x80728045
mov dword [ebp - 0x7c], 0x806f8072
mov dword [ebp - 0x78], 0x802c8072
mov dword [ebp - 0x74], 0x80638020
mov dword [ebp - 0x70], 0x806c8061
mov dword [ebp - 0x6c], 0x8069806c
mov dword [ebp - 0x68], 0x8067806e
mov dword [ebp - 0x64], 0x80438020
mov dword [ebp - 0x60], 0x80658072
mov dword [ebp - 0x5c], 0x80748061
mov dword [ebp - 0x58], 0x80468065
mov dword [ebp - 0x54], 0x806c8069
mov dword [ebp - 0x50], 0x804d8065
mov dword [ebp - 0x4c], 0x80708061
mov dword [ebp - 0x48], 0x80698070
mov dword [ebp - 0x44], 0x8067806e
mov dword [ebp - 0x40], 0x803a8057
mov dword [ebp - 0x3c], 0x807b8020
mov word [ebp - 0x34], ax
call fcn.00419a70
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 8
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x304], eax
lea eax, [ebp - 0x2f8]
push eax
call fcn.0041d930
add esp, 4
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x10
call fcn.00444e70
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x98]
cmp dword [ebp - 0x84], 8
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
mov ecx, dword [ebp - 0x2e4]
cmovae eax, dword [ebp - 0x98]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
mov dword [ebp - 0x2f8], eax
lea ecx, [ebp - 0xf0]
call fcn.00419450
push dword [ebp - 0x2f8]
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov dword [ebp - 0x2f8], eax
call fcn.00441aa0
push dword [ebp - 0x304]
push 0
push dword [ebp - 0x2f8]
push 8
push eax
call fcn.0043ebb0
mov edx, dword [ebp - 0x84]
add esp, 0x14
cmp edx, 8
jb 0x475937
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47592d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d47
push edx
push ecx
call fcn.004fc7e0
add esp, 8
mov edx, dword [ebp - 0xbc]
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
cmp edx, 8
jb 0x475994
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47598a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d47
push edx
push ecx
call fcn.004fc7e0
add esp, 8
mov edx, dword [ebp - 0xa4]
xor eax, eax
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
cmp edx, 8
jb 0x4759f1
mov ecx, dword [ebp - 0xb8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4759e7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d47
push edx
push ecx
call fcn.004fc7e0
add esp, 8
test esi, esi
je 0x475cfc
cmp esi, 0xffffffff
je 0x475cfc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x475d02
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp - 0x2e8]
mov esi, eax
mov eax, dword [ebp - 0x2ec]
mov ecx, 0x807b
mov word [ebp - 0x32], ax
xor eax, eax
mov word [ebp - 0x48], cx
lea ecx, [ebp - 0xd0]
mov word [ebp - 0x46], dx
mov word [ebp - 0x34], dx
lea edx, [ebp - 0x80]
mov dword [ebp - 0x80], 0x80728045
mov dword [ebp - 0x7c], 0x806f8072
mov dword [ebp - 0x78], 0x802c8072
mov dword [ebp - 0x74], 0x80638020
mov dword [ebp - 0x70], 0x806c8061
mov dword [ebp - 0x6c], 0x8069806c
mov dword [ebp - 0x68], 0x8067806e
mov dword [ebp - 0x64], 0x80438020
mov dword [ebp - 0x60], 0x80658072
mov dword [ebp - 0x5c], 0x80748061
mov dword [ebp - 0x58], 0x80468065
mov dword [ebp - 0x54], 0x806c8069
mov dword [ebp - 0x50], 0x80578065
mov dword [ebp - 0x4c], 0x8020803a
mov dword [ebp - 0x44], 0x8020802c
mov dword [ebp - 0x40], 0x806f8066
mov dword [ebp - 0x3c], 0x803a8072
mov dword [ebp - 0x38], 0x807b8020
mov word [ebp - 0x30], ax
call fcn.00419a70
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0xd0]
cmp dword [ebp - 0xbc], 8
mov ecx, dword [ebp - 0x2dc]
cmovae edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20], ecx
mov ecx, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x1c], eax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x475b06
sub ecx, esi
sub esp, 0x10
mov eax, esp
sar ecx, 1
lea esi, [ebp - 0x28]
push ecx
push edx
lea ecx, [ebp - 0xb8]
mov dword [eax], 0xc2
mov dword [eax + 4], 0
mov dword [eax + 8], esi
call fcn.00426fd0
add esp, 0x18
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x98]
call fcn.00444e70
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x98]
cmp dword [ebp - 0x84], 8
mov edx, str.CrashedModuleInfo::FillExeHeaderInformation
mov ecx, dword [ebp - 0x2e4]
cmovae eax, dword [ebp - 0x98]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x2e0]
mov word [ebp - 0x22], ax
mov eax, 0x20
mov word [ebp - 0x1e], cx
lea ecx, [ebp - 0x158]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1c], eax
call fcn.00489460
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0xf0]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004895c0
add esp, 4
lea ecx, [ebp - 0x24]
mov edx, eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.004897a0
add esp, 4
mov esi, eax
call fcn.00441aa0
push dword [ebp - 0x2f8]
push 0
push esi
push 8
push eax
call fcn.0043ebb0
mov edx, dword [ebp - 0x84]
add esp, 0x14
cmp edx, 8
jb 0x475c3d
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x475c33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d4c
push edx
push ecx
call fcn.004fc7e0
add esp, 8
mov edx, dword [ebp - 0xa4]
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
cmp edx, 8
jb 0x475c9a
mov ecx, dword [ebp - 0xb8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x475c90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d4c
push edx
push ecx
call fcn.004fc7e0
add esp, 8
mov edx, dword [ebp - 0xbc]
xor eax, eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], ax
cmp edx, 8
jb 0x475cf3
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x475ce9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x475d4c
push edx
push ecx
call fcn.004fc7e0
add esp, 8
cmp edi, 0xffffffff
je 0x475d05
test edi, edi
je 0x475d05
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call esi
lea ecx, [ebp - 0x330]
call fcn.0043d670
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004fc7af
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
call fcn.0050175f
call fcn.0050175f
call fcn.0050175f
call fcn.0050175f
call fcn.0050175f
call fcn.0050175f
call fcn.0050175f
int3