Function at 0x451000
Capabilities:
Inspect section memory permissions

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x557028
push 0x4e7f40
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
sub esp, 0x58
mov eax, dword [0x55f2b4]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
movups xmmword [ebp - 0x68], xmm0
movups xmmword [ebp - 0x58], xmm0
movups xmmword [ebp - 0x48], xmm0
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 4], 0
mov byte [ebp - 0x73], 0
mov edx, 0x200000
pushfd
pushfd
pop eax
xor eax, edx
push eax
popfd
pushfd
pop ecx
xor eax, ecx
and eax, edx
jne 0x451087
mov byte [ebp - 0x73], 1
popfd
cmp byte [ebp - 0x73], 0
je 0x45111c
lea edi, [ebp - 0x68]
xor eax, eax
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
mov dword [edi], eax
mov dword [edi + 4], esi
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
lea edi, [ebp - 0x58]
mov eax, 1
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
mov dword [edi], eax
mov dword [edi + 4], esi
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
lea edi, [ebp - 0x48]
mov eax, SysReAllocString
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
mov dword [edi], eax
mov dword [edi + 4], esi
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
lea edi, [ebp - 0x38]
mov eax, 7
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
mov dword [edi], eax
mov dword [edi + 4], esi
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
jmp 0x45111c
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x4c]
test al, 1
je 0x451139
mov esi, 1
mov dword [ebp - 0x70], esi
xor edi, edi
mov dword [ebp - 0x6c], edi
jmp 0x45113f
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
test eax, 0x800000
je 0x45114f
or esi, 2
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x2000000
je 0x45115f
or esi, 4
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x4000000
je 0x45116f
or esi, 8
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, dword [ebp - 0x50]
test al, 1
je 0x45117f
or esi, 0x10
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x200
je 0x45118f
or esi, 0x20
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x80000
je 0x45119f
or esi, 0x40
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x100000
je 0x4511b2
or esi, 0x80
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x800000
je 0x4511c5
or esi, 0x8000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x2000000
je 0x4511d8
or esi, 0x100
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test al, 2
je 0x4511e8
or esi, 0x200
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x10000000
je 0x4511fb
or esi, 0x400
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x40000000
je 0x45120e
or esi, 0x20000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, dword [ebp - 0x34]
test al, 0x20
je 0x451221
or esi, 0x1000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test al, 8
je 0x451231
or esi, 0x2000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x100
je 0x451244
or esi, 0x4000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x200
je 0x451257
mov dword [ebp - 0x70], esi
or edi, 0x100
mov dword [ebp - 0x6c], edi
test eax, 0x10000
je 0x45126a
or esi, 0x100000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x20000
je 0x45127d
or esi, 0x400000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x40000
je 0x45128d
mov dword [ebp - 0x70], esi
or edi, 8
mov dword [ebp - 0x6c], edi
test eax, 0x80000
je 0x4512a0
or esi, 0x10000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x10000000
je 0x4512b3
or esi, 0x2000000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x20000000
je 0x4512c6
or esi, 0x40000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, 0x40000000
je 0x4512d9
or esi, 0x200000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test eax, eax
jns 0x4512e9
or esi, 0x800000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
test byte [ebp - 0x30], 2
je 0x4512fb
or esi, 0x1000000
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov edx, dword [ebp - 0x58]
sar edx, 8
and edx, 0xff00f
mov ecx, dword [ebp - 0x58]
sar ecx, 4
and ecx, 0xf00f
mov eax, dword [ebp - 0x64]
cmp eax, 0x6f677948
jg 0x45146a
je 0x45142d
cmp eax, 0x68532020
je 0x4513da
cmp eax, 0x68747541
jne 0x451632
cmp dword [ebp - 0x60], 0x444d4163
jne 0x451632
cmp dword [ebp - 0x5c], 0x69746e65
jne 0x451632
cmp edx, 5
jb 0x451368
jne 0x451371
cmp ecx, 6
jb 0x451368
cmp ecx, 0xa
jne 0x451371
mov dword [ebp - 0x70], esi
or edi, 1
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x400
or eax, 0
je 0x451392
test dword [ebp - 0x40], 0x800
je 0x451392
or esi, 0x800
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
cmp edx, 0x700f
jb 0x451632
mov eax, esi
and eax, 0x200
or eax, 0
je 0x4513b6
or edi, 0x400
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov ecx, dword [ebp - 0x60]
mov eax, esi
and eax, 0x80
or eax, 0
je 0x451635
mov dword [ebp - 0x70], esi
or edi, 0x800
mov dword [ebp - 0x6c], edi
jmp 0x451635
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x20206961
jne 0x451635
cmp dword [ebp - 0x5c], 0x68676e61
jne 0x451635
mov eax, esi
and eax, 0x20
or eax, 0
je 0x45140c
mov dword [ebp - 0x70], esi
or edi, 0x1000
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x200
or eax, 0
je 0x451635
mov dword [ebp - 0x70], esi
or edi, 0x400
mov dword [ebp - 0x6c], edi
jmp 0x451635
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x656e6975
jne 0x451635
cmp dword [ebp - 0x5c], 0x6e65476e
jne 0x451635
mov eax, esi
and eax, 0x200
or eax, 0
je 0x4513b9
mov dword [ebp - 0x70], esi
or edi, 0x400
mov dword [ebp - 0x6c], edi
jmp 0x4513b9
cmp eax, 0x746e6543
je 0x4515dd
cmp eax, 0x756e6547
jne 0x451632
mov eax, dword [ebp - 0x60]
and eax, 0xfffffffe
cmp eax, 0x6c65746e
jne 0x451632
cmp dword [ebp - 0x5c], 0x49656e69
jne 0x451632
mov dword [ebp - 0x70], esi
or edi, 4
mov dword [ebp - 0x6c], edi
cmp edx, 6
jae 0x4514b4
or edi, 1
jmp 0x45159a
jne 0x4515a0
cmp ecx, 0x100c
je 0x451597
cmp ecx, 0x2006
je 0x451597
cmp ecx, 0x2007
je 0x451597
cmp ecx, 0x3005
je 0x451597
cmp ecx, 0x3006
je 0x451597
cmp ecx, 0x3007
je 0x451592
cmp ecx, 0x400a
je 0x451592
cmp ecx, 0x400c
je 0x451592
cmp ecx, 0x400d
je 0x451592
cmp ecx, 0x500c
je 0x4515a0
cmp ecx, 0x500f
je 0x4515a0
cmp ecx, 0x700a
je 0x4515a0
cmp ecx, 0x200a
je 0x45158a
cmp ecx, 0x200d
je 0x45158a
cmp ecx, 0x300a
je 0x45158a
cmp ecx, 0x300e
je 0x45158a
cmp ecx, 0x400f
je 0x45158a
cmp ecx, 0x300c
je 0x451576
cmp ecx, 0x300d
je 0x451576
cmp ecx, 0x300f
jb 0x4515a0
mov eax, esi
and eax, 0x200
or eax, 0
je 0x4515a0
or edi, 0x400
jmp 0x45159a
or edi, 0x200
jmp 0x45159a
or edi, 2
jmp 0x45159a
or edi, 3
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x20
or eax, 0
je 0x4513b6
cmp ecx, 0x1006
je 0x4513b6
cmp ecx, 0xf
je 0x4513b6
mov ecx, edi
and ecx, 2
xor eax, eax
or eax, ecx
jne 0x4513b6
or edi, 0x1000
jmp 0x4513b0
cmp dword [ebp - 0x60], 0x736c7561
jne 0x451632
cmp dword [ebp - 0x5c], 0x48727561
jne 0x451632
cmp edx, 6
jb 0x4515fb
jne 0x451604
cmp ecx, 0xf
jae 0x451604
mov dword [ebp - 0x70], esi
or edi, 1
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x20
or eax, 0
je 0x45161a
mov dword [ebp - 0x70], esi
or edi, 0x1000
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x200
or eax, 0
je 0x451632
mov dword [ebp - 0x70], esi
or edi, 0x400
mov dword [ebp - 0x6c], edi
mov ecx, dword [ebp - 0x60]
mov dword [0x566710], ecx
mov eax, dword [ebp - 0x58]
mov dword [0x56670c], eax
mov dword [ebp - 4], 1
mov eax, esi
and eax, 2
or eax, 0
je 0x4516aa
mov dword [ebp - 4], 2
call fcn.00408530
test al, al
jne 0x451672
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov dword [ebp - 4], 1
jmp 0x45169f
mov eax, esi
or eax, edi
jne 0x4516aa
call fcn.00408560
mov eax, esi
and eax, 8
or eax, 0
je 0x4516e0
mov eax, esi
and eax, 4
or eax, 0
jne 0x4516c9
and esi, 0xfffffff7
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x4516e0
call fcn.004084f0
test al, al
jne 0x4516e0
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, esi
and eax, 0x10
or eax, 0
je 0x4516fd
mov eax, esi
and eax, 8
or eax, 0
jne 0x4516fd
and esi, 0xffffffef
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x20
or eax, 0
je 0x451733
mov eax, esi
and eax, 0x10
or eax, 0
jne 0x45171c
and esi, 0xffffffdf
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x451733
call fcn.004084b0
test al, al
jne 0x451733
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, esi
and eax, 0x40
or eax, 0
je 0x451769
mov eax, esi
and eax, 0x20
or eax, 0
jne 0x451752
and esi, 0xffffffbf
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x451769
call fcn.00408460
test al, al
jne 0x451769
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, esi
and eax, 0x80
or eax, 0
je 0x4517aa
mov eax, esi
and eax, 0x40
or eax, 0
jne 0x451793
and esi, 0xffffff7f
mov dword [ebp - 0x70], esi
and edi, 0xfffff7ff
mov dword [ebp - 0x6c], edi
jmp 0x4517aa
call fcn.00408430
test al, al
jne 0x4517aa
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, esi
and eax, 0x8000
or eax, 0
je 0x4517d5
mov eax, esi
and eax, 0x10
or eax, 0
je 0x4517c9
call fcn.00408410
test al, al
jne 0x4517d5
and esi, 0xffff7fff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x200
or eax, 0
je 0x451808
mov eax, esi
and eax, 0x80
or eax, 0
je 0x4517f6
call fcn.00408370
test al, al
jne 0x451808
and esi, 0xfffffdff
mov dword [ebp - 0x70], esi
and edi, 0xfffffbff
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x100
or eax, 0
je 0x451835
mov eax, esi
and eax, 0x80
or eax, 0
je 0x451829
call fcn.004083b0
test al, al
jne 0x451835
and esi, 0xfffffeff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x400
or eax, 0
je 0x4518e7
mov eax, esi
and eax, 0x80
or eax, 0
jne 0x451862
and esi, 0xfffffbff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x4518e7
test dword [ebp - 0x50], 0x8000000
jne 0x451879
and esi, 0xffefebff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x4518e7
mov byte [ebp - 0x71], 0
mov dword [ebp - 4], 3
call fcn.00408200
movzx ecx, byte [ebp - 0x71]
test al, al
mov eax, 1
cmovne ecx, eax
mov byte [ebp - 0x71], cl
mov dword [ebp - 4], eax
jmp 0x4518be
test cl, cl
jne 0x4518d0
and esi, 0xffffebff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x4518e7
call fcn.004082f0
test al, al
jne 0x4518e7
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, esi
and eax, 0x800
or eax, 0
je 0x451924
mov eax, esi
and eax, 0x400
or eax, 0
jne 0x45190d
and esi, 0xfffff7ff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x451924
call fcn.00408330
test al, al
jne 0x451924
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, esi
and eax, 0x2000
or eax, 0
je 0x451961
mov eax, esi
and eax, 0x400
or eax, 0
jne 0x45194a
and esi, 0xffffdfff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x451961
call fcn.00408260
test al, al
jne 0x451961
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, esi
and eax, 0x4000
or eax, 0
je 0x4519a0
mov eax, esi
and eax, 0x2400
cmp eax, 0x2400
jne 0x451994
call fcn.00408290
test al, al
jne 0x4519a0
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
jmp 0x4519a0
and esi, 0xffffbfff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x10000
or eax, 0
je 0x4519dd
mov eax, esi
and eax, 0x4000
or eax, 0
jne 0x4519c6
and esi, 0xfffeffff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x4519dd
call fcn.004082c0
test al, al
jne 0x4519dd
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, esi
and eax, 0x20000
or eax, 0
je 0x451a1f
mov dword [ebp - 4], 4
call fcn.00408580
jmp 0x451a18
mov dword [ebp - 4], 1
mov ecx, edi
and ecx, 8
xor eax, eax
or eax, ecx
je 0x451a74
mov eax, esi
and eax, 0x20000
or eax, 0
jne 0x451a41
mov dword [ebp - 0x70], esi
and edi, 0xfffffff7
mov dword [ebp - 0x6c], edi
jmp 0x451a74
mov dword [ebp - 4], 5
call fcn.00408590
jmp 0x451a6d
mov dword [ebp - 4], 1
mov eax, esi
and eax, 0x1000
or eax, 0
je 0x451ab3
mov eax, esi
and eax, 0x6400
cmp eax, 0x6400
jne 0x451aa7
call fcn.00408210
test al, al
jne 0x451ab3
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
jmp 0x451ab3
and esi, 0xffffefff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x40000
or eax, 0
je 0x451aee
mov eax, esi
and eax, 0x40
or eax, 0
jne 0x451ad7
and esi, 0xfffbffff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
jmp 0x451aee
call fcn.004085a0
test al, al
jne 0x451aee
xorps xmm0, xmm0
movlpd qword [ebp - 0x70], xmm0
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
mov eax, esi
and eax, 0x100000
or eax, 0
je 0x451b74
mov eax, esi
and eax, 0x1000
or eax, 0
jne 0x451b0e
and esi, 0xffefffff
jmp 0x451b6e
mov byte [ebp - 0x72], 0
mov dword [ebp - 4], 6
call fcn.00408600
movzx ecx, byte [ebp - 0x72]
test al, al
mov eax, 1
cmovne ecx, eax
mov byte [ebp - 0x72], cl
mov dword [ebp - 4], eax
jmp 0x451b53
test cl, cl
jne 0x451b5f
and esi, 0xffefffff
jmp 0x451b6e
call fcn.00408620
test al, al
jne 0x451b74
and esi, 0xfc0fffff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x200000
or eax, 0
je 0x451ba9
mov eax, esi
and eax, 0x100000
or eax, 0
jne 0x451b94
and esi, 0xffdfffff
jmp 0x451ba3
call fcn.00408680
test al, al
jne 0x451ba9
and esi, 0xfc0fffff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x400000
or eax, 0
je 0x451bde
mov eax, esi
and eax, 0x100000
or eax, 0
jne 0x451bc9
and esi, 0xffbfffff
jmp 0x451bd8
call fcn.004086f0
test al, al
jne 0x451bde
and esi, 0xfc0fffff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x800000
or eax, 0
je 0x451c13
mov eax, esi
and eax, 0x100000
or eax, 0
jne 0x451bfe
and esi, 0xff7fffff
jmp 0x451c0d
call fcn.00408750
test al, al
jne 0x451c13
and esi, 0xfc0fffff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x2000000
or eax, 0
je 0x451c48
mov eax, esi
and eax, 0x100000
or eax, 0
jne 0x451c33
and esi, 0xfdffffff
jmp 0x451c42
call fcn.004087b0
test al, al
jne 0x451c48
and esi, 0xfc0fffff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov eax, esi
and eax, 0x1000000
or eax, 0
je 0x451c8a
mov eax, esi
and eax, 0x100000
or eax, 0
jne 0x451c75
and esi, 0xfeffffff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 4], 0xfffffffe
jmp 0x451cb7
call fcn.004087f0
test al, al
jne 0x451c8a
and esi, 0xfc0fffff
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 4], 0xfffffffe
jmp 0x451cb7
mov eax, esi
and eax, 4
or eax, 0
je 0x451ccd
lea ecx, [ebp - 0x58]
call fcn.00450da0
or esi, eax
or edi, edx
mov dword [0x566718], esi
mov dword [0x56671c], edi
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.004d0675
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret