Function at 0x48bed0
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d205c
mov eax, dword fs:[0]
push eax
mov eax, 0x10568
call fcn.0055b970
mov eax, dword [0x6385e0]
xor eax, ebp
mov dword [ebp - 0x34], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10528], ecx
mov dword [ebp - 0x10464], 0
push 0x80
call fcn.0054d57b
add esp, 4
mov dword [ebp - 0x10500], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x10500], 0
je 0x48bf5d
mov eax, dword [ebp - 0x10528]
mov ecx, dword [eax + 0x85c]
push ecx
push 0x4000
mov edx, dword [ebp + 0xc]
push edx
mov ecx, dword [ebp - 0x10500]
call fcn.004101f0
mov dword [ebp - 0x1052c], eax
jmp 0x48bf67
mov dword [ebp - 0x1052c], 0
mov eax, dword [ebp - 0x1052c]
mov dword [ebp - 0x104fc], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x104fc]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0048e0c0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x24]
call fcn.004b9730
mov dword [ebp - 0x10530], eax
lea edx, [ebp - 0x1046c]
push edx
push 0x10000
lea eax, [ebp - 0x10034]
push eax
mov ecx, dword [ebp - 0x10530]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10530]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
test ecx, ecx
jne 0x48bfec
mov byte [ebp - 0x10501], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0048e100
mov al, byte [ebp - 0x10501]
jmp 0x48cf55
mov edx, dword [ebp - 0x10464]
add edx, dword [ebp - 0x1046c]
mov dword [ebp - 0x10464], edx
lea eax, [ebp - 0x10034]
mov dword [ebp - 0x10468], eax
mov ecx, dword [ebp - 0x10468]
movzx edx, word [ecx]
cmp edx, 0x5253
jne 0x48c029
mov eax, 0x5a4d
mov ecx, dword [ebp - 0x10468]
mov word [ecx], ax
mov edx, dword [ebp - 0x10468]
movzx eax, word [edx]
cmp eax, 0x5a4d
je 0x48c0fb
mov byte [ebp - 0x1046d], 0
push 0
push str..COM
mov ecx, dword [ebp + 8]
call fcn.00435950
mov ecx, eax
call fcn.004b47a0
movzx ecx, al
test ecx, ecx
je 0x48c0cb
mov edx, dword [ebp - 0x10464]
push edx
lea eax, [ebp - 0x10034]
push eax
mov ecx, dword [ebp - 0x10528]
call fcn.0048dc60
movzx ecx, al
test ecx, ecx
jne 0x48c097
push 1
mov ecx, dword [ebp + 8]
call fcn.0048ae50
push 1
mov ecx, dword [ebp + 8]
call fcn.0048af40
jmp 0x48c0cb
mov edx, dword [ebp - 0x10464]
push edx
lea eax, [ebp - 0x10034]
push eax
mov ecx, dword [ebp - 0x10528]
call fcn.0048dd80
movzx ecx, al
test ecx, ecx
je 0x48c0cb
push 1
mov ecx, dword [ebp + 8]
call fcn.0048ae50
push 1
mov ecx, dword [ebp + 8]
call fcn.0048af40
mov ecx, dword [ebp + 8]
call fcn.004127c0
movzx edx, al
test edx, edx
jne 0x48c0fb
mov byte [ebp - 0x10502], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0048e100
mov al, byte [ebp - 0x10502]
jmp 0x48cf55
lea eax, [ebp - 0x1045c]
push eax
lea ecx, [ebp - 0x24]
call fcn.004b9730
mov ecx, eax
call fcn.00410540
lea ecx, [ebp - 0x1045c]
push ecx
mov edx, dword [ebp - 0x10528]
mov ecx, dword [edx + 4]
call fcn.004207b0
movzx eax, al
test eax, eax
je 0x48c137
push 1
mov ecx, dword [ebp + 8]
call fcn.00401590
mov ecx, dword [ebp + 8]
call fcn.00401550
movzx ecx, al
neg ecx
sbb ecx, ecx
add ecx, 1
mov byte [ebp - 0x15], cl
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x10038], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov ecx, dword [ebp + 8]
call fcn.0048ae10
movzx edx, al
test edx, edx
jne 0x48cbf0
mov eax, dword [ebp - 0x10468]
cmp dword [eax + 0x3c], 0x40
jae 0x48c1b2
mov ecx, 7
mov edi, str.MZfarbrauschPE
lea esi, [ebp - 0x10034]
xor edx, edx
repe cmpsw word [esi], word es:[edi]
je 0x48c1b2
push 2
mov ecx, dword [ebp + 8]
call fcn.0048aa60
mov eax, dword [ebp - 0x10468]
mov ecx, dword [eax + 0x3c]
add ecx, 0xe0
cmp ecx, dword [ebp - 0x10464]
ja 0x48ca2c
mov edx, dword [ebp - 0x10468]
mov eax, dword [edx + 0x3c]
lea ecx, [ebp + eax - 0x10034]
mov dword [ebp - 0x10460], ecx
mov edx, dword [ebp - 0x10460]
movzx eax, word [edx]
cmp eax, 0x454e
jne 0x48c20c
push 1
mov ecx, dword [ebp + 8]
call fcn.0048aea0
push 1
mov ecx, dword [ebp + 8]
call fcn.0048af40
jmp 0x48ca2c
mov ecx, dword [ebp - 0x10460]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x10468]
mov ecx, dword [eax + 0x3c]
add ecx, edx
mov edx, dword [ebp - 0x10460]
movzx eax, word [edx + 6]
imul eax, eax, 0x28
add ecx, eax
cmp ecx, dword [ebp - 0x10464]
jbe 0x48c247
push 1
mov ecx, dword [ebp + 8]
call fcn.0048af40
jmp 0x48ca2c
mov ecx, dword [ebp - 0x10460]
cmp dword [ecx], 0x4550
jne 0x48ca2c
push 1
mov ecx, dword [ebp + 8]
call fcn.0048aef0
push 1
mov ecx, dword [ebp + 8]
call fcn.0048af40
mov edx, dword [ebp - 0x10460]
movzx eax, word [edx + 0x16]
and eax, 0x2000
je 0x48c288
push 1
mov ecx, dword [ebp + 8]
call fcn.0048ac40
mov dword [ebp - 0x10480], 0
mov dword [ebp - 0x10474], 0
mov byte [ebp - 0x10479], 0
mov ecx, dword [ebp - 0x10460]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x10460]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x10460]
movzx eax, word [edx + 0x18]
cmp eax, 0x20b
jne 0x48c34f
push 1
mov ecx, dword [ebp + 8]
call fcn.0048ab10
mov ecx, dword [ebp - 0x10460]
add ecx, 0x18
mov dword [ebp - 0x10474], ecx
mov edx, dword [ebp - 0x10474]
mov eax, dword [edx + 0x6c]
mov dword [ebp - 0x10478], eax
mov ecx, dword [ebp - 0x10474]
mov edx, dword [ecx + 0x38]
mov dword [ebp - 0x10484], edx
mov eax, dword [ebp - 0x10474]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x10488], ecx
mov edx, dword [ebp - 0x10474]
movzx eax, word [edx + 0x44]
cmp eax, 3
sete cl
movzx edx, cl
push edx
mov ecx, dword [ebp + 8]
call fcn.0048abf0
mov eax, dword [ebp - 0x10474]
movzx ecx, word [eax + 0x44]
cmp ecx, 1
sete dl
movzx eax, dl
push eax
mov ecx, dword [ebp + 8]
call fcn.0048acd0
jmp 0x48c3c3
mov ecx, dword [ebp - 0x10460]
add ecx, 0x18
mov dword [ebp - 0x10480], ecx
mov edx, dword [ebp - 0x10480]
mov eax, dword [edx + 0x5c]
mov dword [ebp - 0x10478], eax
mov ecx, dword [ebp - 0x10480]
mov edx, dword [ecx + 0x38]
mov dword [ebp - 0x10484], edx
mov eax, dword [ebp - 0x10480]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x10488], ecx
mov edx, dword [ebp - 0x10480]
movzx eax, word [edx + 0x44]
cmp eax, 3
sete cl
movzx edx, cl
push edx
mov ecx, dword [ebp + 8]
call fcn.0048abf0
mov eax, dword [ebp - 0x10480]
movzx ecx, word [eax + 0x44]
cmp ecx, 1
sete dl
movzx eax, dl
push eax
mov ecx, dword [ebp + 8]
call fcn.0048acd0
mov dword [ebp - 0x1048c], 0
jmp 0x48c3de
mov ecx, dword [ebp - 0x1048c]
add ecx, 1
mov dword [ebp - 0x1048c], ecx
mov edx, dword [ebp - 0x1048c]
cmp edx, dword [ebp - 0x10478]
jae 0x48c58f
mov ecx, dword [ebp + 8]
call fcn.0048aad0
movzx eax, al
test eax, eax
je 0x48c417
mov ecx, dword [ebp - 0x1048c]
mov edx, dword [ebp - 0x10474]
lea eax, [edx + ecx*8 + 0x70]
mov dword [ebp - 0x10490], eax
jmp 0x48c42d
mov ecx, dword [ebp - 0x1048c]
mov edx, dword [ebp - 0x10480]
lea eax, [edx + ecx*8 + 0x60]
mov dword [ebp - 0x10490], eax
mov ecx, dword [ebp - 0x10490]
mov edx, dword [ecx]
mov dword [ebp - 0x10498], edx
mov eax, dword [ebp - 0x10490]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x10494], ecx
cmp dword [ebp - 0x10498], 0
jne 0x48c458
jmp case.0x48c4ad.7
cmp dword [ebp - 0x1048c], 4
je 0x48c48e
mov edx, dword [ebp - 0x10490]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10490]
add eax, dword [ecx + 4]
cmp eax, dword [ebp - 0x10484]
jbe 0x48c48e
push 8
mov ecx, dword [ebp + 8]
call fcn.0048aa60
jmp 0x48c58f
mov edx, dword [ebp - 0x1048c]
mov dword [ebp - 0x10534], edx
cmp dword [ebp - 0x10534], 0xe
ja case.0x48c4ad.7
mov eax, dword [ebp - 0x10534]
jmp dword [eax*4 + 0x48cf74]
push 1
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp case.0x48c4ad.7
push 2
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp case.0x48c4ad.7
push 4
mov ecx, dword [ebp + 8]
call fcn.0048b050
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x10460]
push eax
mov ecx, dword [ebp - 0x10468]
push ecx
mov edx, dword [ebp - 0x10498]
push edx
call fcn.0048d060
add esp, 0x14
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x10494]
mov dword [ebp - 0x28], eax
jmp case.0x48c4ad.7
push 8
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp case.0x48c4ad.7
push 0x10
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp case.0x48c4ad.7
push 0x20
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp case.0x48c4ad.7
mov ecx, dword [ebp - 0x10460]
movzx edx, word [ecx + 0x16]
and edx, 0xc
je 0x48c544
jmp 0x48c54e
push 0x40
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp case.0x48c4ad.7
push 0x80
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp case.0x48c4ad.7
push 0x100
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp case.0x48c4ad.7
push 0x200
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp case.0x48c4ad.7
push 0x400
mov ecx, dword [ebp + 8]
call fcn.0048b050
jmp 0x48c3cf
mov eax, dword [ebp - 0x10460]
movzx ecx, word [eax + 0x14]
cmp ecx, 0xe0
jge 0x48c5b0
push 4
mov ecx, dword [ebp + 8]
call fcn.0048aa60
jmp 0x48ca2c
mov ecx, dword [ebp + 8]
call fcn.0048aad0
movzx edx, al
test edx, edx
je 0x48c5d7
mov eax, dword [ebp - 0x10474]
cmp dword [eax + 0x40], 0
jne 0x48c5d5
push 1
mov ecx, dword [ebp + 8]
call fcn.0048aa60
jmp 0x48c5ed
mov ecx, dword [ebp - 0x10480]
cmp dword [ecx + 0x40], 0
jne 0x48c5ed
push 1
mov ecx, dword [ebp + 8]
call fcn.0048aa60
mov dword [ebp - 0x1049c], 0
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x104a8], edx
mov dword [ebp - 0x104a4], 0
mov eax, dword [ebp - 0x10460]
movzx ecx, word [eax + 6]
mov dword [ebp - 0x104a0], ecx
cmp dword [ebp - 0x104a0], 0
jne 0x48c648
mov edx, dword [ebp - 0x104a8]
movzx eax, byte [edx]
cmp eax, 0x2e
jne 0x48c648
mov dword [ebp - 0x104a0], 1
push 0x100
mov ecx, dword [ebp + 8]
call fcn.0048aa60
mov dword [ebp - 0x104ac], 0
jmp 0x48c663
mov ecx, dword [ebp - 0x104ac]
add ecx, 1
mov dword [ebp - 0x104ac], ecx
mov edx, dword [ebp - 0x104ac]
cmp edx, dword [ebp - 0x104a0]
jge 0x48c8c2
mov byte [ebp - 0x104ad], 0
mov dword [ebp - 0x104c4], 0
jmp 0x48c697
mov eax, dword [ebp - 0x104c4]
add eax, 1
mov dword [ebp - 0x104c4], eax
cmp dword [ebp - 0x104c4], 8
jge 0x48c712
mov ecx, dword [ebp - 0x104ac]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x104a8]
mov edx, dword [ebp - 0x104c4]
movzx eax, byte [ecx + edx]
test eax, eax
je 0x48c70b
mov ecx, dword [ebp - 0x104ac]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x104a8]
mov edx, dword [ebp - 0x104c4]
movzx eax, byte [ecx + edx]
cmp eax, 0x80
jb 0x48c6e4
mov byte [ebp - 0x104ad], 1
mov ecx, dword [ebp - 0x104ac]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x104a8]
mov edx, dword [ebp - 0x104c4]
mov eax, dword [ebp - 0x104c4]
mov cl, byte [ecx + eax]
mov byte [ebp + edx - 0x104c0], cl
jmp 0x48c70d
jmp 0x48c712
jmp 0x48c688
mov edx, dword [ebp - 0x104c4]
mov byte [ebp + edx - 0x104c0], 0
mov eax, dword [ebp - 0x104ac]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x104a8]
mov edx, dword [ecx + eax + 0x10]
mov dword [ebp - 0x104b4], edx
mov eax, dword [ebp - 0x104ac]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x104a8]
mov edx, dword [ecx + eax + 0x24]
and edx, 0x20
jne 0x48c78b
mov eax, dword [ebp - 0x104ac]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x104a8]
mov edx, dword [ecx + eax + 0x24]
and edx, 0x20000000
jne 0x48c78b
mov eax, dword [ebp - 0x104ac]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x104a8]
mov edx, dword [ecx + eax + 0x24]
and edx, 0x80000000
je 0x48c823
mov eax, dword [ebp - 0x104a4]
add eax, 1
mov dword [ebp - 0x104a4], eax
mov ecx, dword [ebp - 0x104ac]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x104a8]
mov eax, dword [ebp - 0x10488]
cmp eax, dword [edx + ecx + 0xc]
jb 0x48c823
mov ecx, dword [ebp - 0x104ac]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x104a8]
mov eax, dword [edx + ecx + 0xc]
add eax, dword [ebp - 0x104b4]
cmp dword [ebp - 0x10488], eax
jae 0x48c823
mov ecx, dword [ebp - 0x104ac]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x104a8]
mov eax, dword [ebp - 0x10488]
sub eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0x104c8], eax
mov ecx, dword [ebp - 0x104ac]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x104a8]
mov eax, dword [edx + ecx + 0x14]
add eax, dword [ebp - 0x104c8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x104b4]
sub ecx, dword [ebp - 0x104c8]
mov dword [ebp - 0x10038], ecx
lea edx, [ebp - 0x104c0]
mov dword [ebp - 0x10538], edx
mov eax, dword [ebp - 0x10538]
add eax, 1
mov dword [ebp - 0x1053c], eax
mov ecx, dword [ebp - 0x10538]
mov dl, byte [ecx]
mov byte [ebp - 0x1053d], dl
add dword [ebp - 0x10538], 1
cmp byte [ebp - 0x1053d], 0
jne 0x48c83e
mov eax, dword [ebp - 0x10538]
sub eax, dword [ebp - 0x1053c]
mov dword [ebp - 0x10544], eax
jne 0x48c87c
push 0x10
mov ecx, dword [ebp + 8]
call fcn.0048aa60
jmp 0x48c891
movzx ecx, byte [ebp - 0x104ad]
test ecx, ecx
je 0x48c891
push 0x10
mov ecx, dword [ebp + 8]
call fcn.0048aa60
mov ecx, dword [ebp + 8]
call fcn.004b7130
cmp dword [ebp - 0x104b4], eax
jbe 0x48c8ab
push 0x20
mov ecx, dword [ebp + 8]
call fcn.0048aa60
mov edx, dword [ebp - 0x1049c]
add edx, dword [ebp - 0x104b4]
mov dword [ebp - 0x1049c], edx
jmp 0x48c654
cmp dword [ebp - 0x104a4], 0
jne 0x48c8f8
push 0
mov ecx, dword [ebp + 8]
call fcn.0048af40
mov byte [ebp - 0x10503], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0048e100
mov al, byte [ebp - 0x10503]
jmp 0x48cf55
cmp dword [ebp - 0x10038], 0
jbe 0x48c935
cmp dword [ebp - 0x10038], 5
ja 0x48c935
push 0
mov ecx, dword [ebp + 8]
call fcn.0048af40
mov byte [ebp - 0x10504], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0048e100
mov al, byte [ebp - 0x10504]
jmp 0x48cf55
mov dword [ebp - 0x1049c], 0
mov ecx, dword [ebp + 8]
call fcn.0048aad0
movzx eax, al
test eax, eax
je 0x48c9a5
mov dword [ebp - 0x104cc], 0
jmp 0x48c969
mov ecx, dword [ebp - 0x104cc]
add ecx, 1
mov dword [ebp - 0x104cc], ecx
cmp dword [ebp - 0x104cc], 0x10
jae 0x48c9a3
mov edx, dword [ebp - 0x104cc]
mov eax, dword [ebp - 0x10474]
cmp dword [eax + edx*8 + 0x70], 0
je 0x48c9a1
mov ecx, dword [ebp - 0x104cc]
mov edx, dword [ebp - 0x10474]
mov eax, dword [ebp - 0x1049c]
add eax, dword [edx + ecx*8 + 0x74]
mov dword [ebp - 0x1049c], eax
jmp 0x48c95a
jmp 0x48c9fa
mov dword [ebp - 0x104d0], 0
jmp 0x48c9c0
mov ecx, dword [ebp - 0x104d0]
add ecx, 1
mov dword [ebp - 0x104d0], ecx
cmp dword [ebp - 0x104d0], 0x10
jae 0x48c9fa
mov edx, dword [ebp - 0x104d0]
mov eax, dword [ebp - 0x10480]
cmp dword [eax + edx*8 + 0x60], 0
je 0x48c9f8
mov ecx, dword [ebp - 0x104d0]
mov edx, dword [ebp - 0x10480]
mov eax, dword [ebp - 0x1049c]
add eax, dword [edx + ecx*8 + 0x64]
mov dword [ebp - 0x1049c], eax
jmp 0x48c9b1
cmp dword [ebp - 0x1049c], 0
jne 0x48ca0f
push 0x40
mov ecx, dword [ebp + 8]
call fcn.0048aa60
jmp 0x48ca2c
mov ecx, dword [ebp + 8]
call fcn.004b7130
cmp dword [ebp - 0x1049c], eax
jbe 0x48ca2c
push 0x80
mov ecx, dword [ebp + 8]
call fcn.0048aa60
mov ecx, dword [ebp + 8]
call fcn.004127c0
movzx ecx, al
test ecx, ecx
jne 0x48ca5c
mov byte [ebp - 0x10505], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0048e100
mov al, byte [ebp - 0x10505]
jmp 0x48cf55
cmp dword [ebp - 0x10], 0
jbe 0x48cb0d
mov edx, dword [ebp - 0x10]
add edx, 8
cmp edx, dword [ebp - 0x1046c]
jae 0x48cb0d
mov byte [ebp - 0x104d1], 1
cmp dword [ebp - 0x10038], 0x80
jae 0x48ca99
mov eax, dword [ebp - 0x10038]
mov dword [ebp - 0x10548], eax
jmp 0x48caa3
mov dword [ebp - 0x10548], 0x80
mov ecx, dword [ebp - 0x10548]
mov dword [ebp - 0x104d8], ecx
mov dword [ebp - 0x104dc], 0
jmp 0x48caca
mov edx, dword [ebp - 0x104dc]
add edx, 1
mov dword [ebp - 0x104dc], edx
mov eax, dword [ebp - 0x104dc]
cmp eax, dword [ebp - 0x104d8]
jae 0x48caf8
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x104dc]
movzx edx, byte [ebp + ecx - 0x10034]
test edx, edx
je 0x48caf6
mov byte [ebp - 0x104d1], 0
jmp 0x48caf8
jmp 0x48cabb
movzx eax, byte [ebp - 0x104d1]
test eax, eax
je 0x48cb0d
mov dword [ebp - 0x104e0], 0
mov ecx, dword [ebp + 8]
call fcn.0048ac90
movzx ecx, al
test ecx, ecx
je 0x48cbf0
mov ecx, dword [ebp + 8]
call fcn.00408090
movzx edx, al
test edx, edx
je 0x48cbf0
push 8
lea eax, [ebp - 0x10514]
push eax
mov ecx, dword [ebp + 8]
call fcn.00408420
mov dword [ebp - 0x1054c], eax
mov ecx, dword [ebp - 0x1054c]
mov dword [ebp - 0x10550], ecx
mov byte [ebp - 4], 2
push 0
push str.Boot
mov ecx, dword [ebp - 0x10550]
call fcn.004b4b20
mov byte [ebp - 0x10506], al
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10514]
call fcn.004b3860
movzx edx, byte [ebp - 0x10506]
test edx, edx
je 0x48cbf0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x10528]
mov ecx, dword [ecx + 4]
call fcn.0042dde0
movzx edx, al
test edx, edx
je 0x48cbf0
push 7
lea eax, [ebp - 0x10520]
push eax
mov ecx, dword [ebp + 8]
call fcn.00408420
mov dword [ebp - 0x10554], eax
mov ecx, dword [ebp - 0x10554]
mov dword [ebp - 0x10558], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x10558]
push edx
push 0xc
mov ecx, dword [ebp + 8]
call fcn.00412a00
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10520]
call fcn.004b3860
mov byte [ebp - 0x15], 1
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x48cf39
cmp dword [ebp - 0x30], 0
je 0x48cc6d
mov byte [ebp - 0x104e1], 0
lea ecx, [ebp - 0x104e1]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x10460]
push edx
mov eax, dword [ebp - 0x10468]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x10528]
call fcn.0048d0a0
movzx edx, byte [ebp - 0x104e1]
test edx, edx
je 0x48cc6d
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x10460]
push eax
mov ecx, dword [ebp - 0x10468]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x10528]
call fcn.0048d690
push 0x400
push 0
lea eax, [ebp - 0x1043c]
push eax
call fcn.00555bf0
add esp, 0xc
mov dword [ebp - 0x104e8], 0
jmp 0x48cc9e
mov ecx, dword [ebp - 0x104e8]
add ecx, 1
mov dword [ebp - 0x104e8], ecx
mov edx, dword [ebp - 0x104e8]
cmp edx, dword [ebp - 0x1046c]
jae 0x48ccdb
mov eax, dword [ebp - 0x104e8]
movzx ecx, byte [ebp + eax - 0x10034]
mov edx, dword [ebp + ecx*4 - 0x1043c]
add edx, 1
mov eax, dword [ebp - 0x104e8]
movzx ecx, byte [ebp + eax - 0x10034]
mov dword [ebp + ecx*4 - 0x1043c], edx
jmp 0x48cc8f
mov edx, 1
test edx, edx
je 0x48cd94
lea ecx, [ebp - 0x24]
call fcn.004b9730
mov dword [ebp - 0x1055c], eax
lea eax, [ebp - 0x1046c]
push eax
push 0x10000
lea ecx, [ebp - 0x10034]
push ecx
mov edx, dword [ebp - 0x1055c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1055c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
test eax, eax
jne 0x48cd25
jmp 0x48cd94
mov ecx, dword [ebp - 0x10464]
add ecx, dword [ebp - 0x1046c]
mov dword [ebp - 0x10464], ecx
mov dword [ebp - 0x104ec], 0
jmp 0x48cd52
mov edx, dword [ebp - 0x104ec]
add edx, 1
mov dword [ebp - 0x104ec], edx
mov eax, dword [ebp - 0x104ec]
cmp eax, dword [ebp - 0x1046c]
jae 0x48cd8f
mov ecx, dword [ebp - 0x104ec]
movzx edx, byte [ebp + ecx - 0x10034]
mov eax, dword [ebp + edx*4 - 0x1043c]
add eax, 1
mov ecx, dword [ebp - 0x104ec]
movzx edx, byte [ebp + ecx - 0x10034]
mov dword [ebp + edx*4 - 0x1043c], eax
jmp 0x48cd43
jmp 0x48ccdb
lea eax, [ebp - 0x1045c]
push eax
lea ecx, [ebp - 0x24]
call fcn.004b9730
mov ecx, eax
call fcn.00410580
lea ecx, [ebp - 0x1045c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00441fe0
fldz
fstp dword [ebp - 0x14]
mov dword [ebp - 0x104f0], 0
jmp 0x48cdd9
mov edx, dword [ebp - 0x104f0]
add edx, 1
mov dword [ebp - 0x104f0], edx
cmp dword [ebp - 0x104f0], 0x100
jae 0x48ce74
mov eax, dword [ebp - 0x104f0]
mov ecx, dword [ebp + eax*4 - 0x1043c]
mov dword [ebp - 0x10564], ecx
mov dword [ebp - 0x10560], 0
fild qword [ebp - 0x10564]
mov edx, dword [ebp - 0x10464]
mov dword [ebp - 0x1056c], edx
mov dword [ebp - 0x10568], 0
fild qword [ebp - 0x1056c]
fdivp st(1)
fstp dword [ebp - 0x104f4]
fld dword [ebp - 0x104f4]
fcomp qword [0x612a68]
fnstsw ax
test ah, 0x41
jne 0x48ce6f
fld dword [ebp - 0x104f4]
fchs
push ecx
fld dword [ebp - 0x104f4]
fstp dword [esp]
fstp qword [ebp - 0x10574]
call fcn.0048b140
add esp, 4
fmul qword [ebp - 0x10574]
fadd dword [ebp - 0x14]
fstp dword [ebp - 0x14]
jmp 0x48cdca
push ecx
fld dword [ebp - 0x14]
fstp dword [esp]
mov ecx, dword [ebp + 8]
call fcn.0048afe0
mov ecx, dword [ebp + 8]
call fcn.0048ac90
movzx eax, al
test eax, eax
je 0x48cf39
mov byte [ebp - 0x104f5], 0
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0x104f5]
push ecx
lea edx, [ebp - 0x1045c]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x10528]
call fcn.0048d930
mov byte [ebp - 0x104f6], al
movzx ecx, byte [ebp - 0x104f6]
test ecx, ecx
jne 0x48cef6
lea edx, [ebp - 0x104f5]
push edx
lea eax, [ebp - 0x1045c]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x10528]
call fcn.0048da80
mov byte [ebp - 0x104f6], al
movzx edx, byte [ebp - 0x104f6]
test edx, edx
je 0x48cf39
movzx eax, byte [ebp - 0x104f5]
test eax, eax
je 0x48cf39
mov ecx, dword [ebp + 8]
call fcn.00435950
mov ecx, eax
call fcn.004553f0
push eax
push str.____API_RAW_DIFFER____s_r_n
call fcn.0054eca8
add esp, 8
movzx ecx, byte [ebp - 0x104f5]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0048ad70
mov byte [ebp - 0x10521], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0048e100
mov al, byte [ebp - 0x10521]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x34]
xor ecx, ebp
call fcn.0054d4f5
mov esp, ebp
pop ebp
ret 8