Function at 0x4153a0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x20c
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0x7fe47c59
mov eax, dword [ebp - 0x5c]
mov ecx, eax
sub ecx, 0x7fe47c58
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], ecx
jg 0x415db3
jmp 0x41541d
mov eax, dword [ebp - 0x60]
sub eax, 0x75b87a47
mov dword [ebp - 0x68], eax
jg 0x415d9a
jmp 0x415433
mov eax, dword [ebp - 0x60]
sub eax, 0x71e11a7b
mov dword [ebp - 0x6c], eax
jg 0x415d81
jmp 0x415449
mov eax, dword [ebp - 0x60]
sub eax, 0x670f9a9a
mov dword [ebp - 0x70], eax
jg 0x415d68
jmp 0x41545f
mov eax, dword [ebp - 0x60]
sub eax, 0x60009139
mov dword [ebp - 0x74], eax
jg 0x415d4f
jmp 0x415475
mov eax, dword [ebp - 0x60]
sub eax, 0x84e8426e
mov dword [ebp - 0x78], eax
jg 0x4154a1
jmp 0x41548b
mov eax, dword [ebp - 0x60]
sub eax, 0x81588be6
mov dword [ebp - 0x7c], eax
je 0x415fc2
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x8a7d8f58
mov dword [ebp - 0x80], eax
jg 0x4154d0
jmp 0x4154b7
mov eax, dword [ebp - 0x60]
sub eax, 0x84e8426f
mov dword [ebp - 0x84], eax
je 0x4162ea
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x5c21f280
mov dword [ebp - 0x88], eax
jg 0x415d36
jmp 0x4154e9
mov eax, dword [ebp - 0x60]
sub eax, 0x59ed369b
mov dword [ebp - 0x8c], eax
jg 0x415d1d
jmp 0x415502
mov eax, dword [ebp - 0x60]
sub eax, 0x56e3e294
mov dword [ebp - 0x90], eax
jg 0x415d04
jmp 0x41551b
mov eax, dword [ebp - 0x60]
sub eax, 0x5450163d
mov dword [ebp - 0x94], eax
jg 0x415ceb
jmp 0x415534
mov eax, dword [ebp - 0x60]
sub eax, 0x4e4ada65
mov dword [ebp - 0x98], eax
jg 0x415cd2
jmp 0x41554d
mov eax, dword [ebp - 0x60]
sub eax, 0x47562eca
mov dword [ebp - 0x9c], eax
jg 0x415cb9
jmp 0x415566
mov eax, dword [ebp - 0x60]
sub eax, 0x3e83067b
mov dword [ebp - 0xa0], eax
jg 0x415ca0
jmp 0x41557f
mov eax, dword [ebp - 0x60]
sub eax, 0x8c4a7212
mov dword [ebp - 0xa4], eax
jg 0x4155b1
jmp 0x415598
mov eax, dword [ebp - 0x60]
sub eax, 0x8a7d8f59
mov dword [ebp - 0xa8], eax
je 0x415f6a
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x332767fa
mov dword [ebp - 0xac], eax
jg 0x415c87
jmp 0x4155ca
mov eax, dword [ebp - 0x60]
sub eax, 0x325a87aa
mov dword [ebp - 0xb0], eax
jg 0x415c6e
jmp 0x4155e3
mov eax, dword [ebp - 0x60]
sub eax, 0x2b7fdd63
mov dword [ebp - 0xb4], eax
jg 0x415c55
jmp 0x4155fc
mov eax, dword [ebp - 0x60]
sub eax, 0x2420cec7
mov dword [ebp - 0xb8], eax
jg 0x415c3c
jmp 0x415615
mov eax, dword [ebp - 0x60]
sub eax, 0x227a543
mov dword [ebp - 0xbc], eax
jg 0x415c23
jmp 0x41562e
mov eax, dword [ebp - 0x60]
sub eax, 0xffa690b6
mov dword [ebp - 0xc0], eax
jg 0x415c0a
jmp 0x415647
mov eax, dword [ebp - 0x60]
sub eax, 0xf7a9de88
mov dword [ebp - 0xc4], eax
jg 0x415bf1
jmp 0x415660
mov eax, dword [ebp - 0x60]
sub eax, 0xf653236a
mov dword [ebp - 0xc8], eax
jg 0x415bd8
jmp 0x415679
mov eax, dword [ebp - 0x60]
sub eax, 0xf5c19122
mov dword [ebp - 0xcc], eax
jg 0x415bbf
jmp 0x415692
mov eax, dword [ebp - 0x60]
sub eax, 0xf5375800
mov dword [ebp - 0xd0], eax
jg 0x415ba6
jmp 0x4156ab
mov eax, dword [ebp - 0x60]
sub eax, 0xf143e271
mov dword [ebp - 0xd4], eax
jg 0x415b8d
jmp 0x4156c4
mov eax, dword [ebp - 0x60]
sub eax, 0xefaf142e
mov dword [ebp - 0xd8], eax
jg 0x415b74
jmp 0x4156dd
mov eax, dword [ebp - 0x60]
sub eax, 0xeba029d5
mov dword [ebp - 0xdc], eax
jg 0x415b5b
jmp 0x4156f6
mov eax, dword [ebp - 0x60]
sub eax, 0xe4ebbb9a
mov dword [ebp - 0xe0], eax
jg 0x415b42
jmp 0x41570f
mov eax, dword [ebp - 0x60]
sub eax, 0xe18c7247
mov dword [ebp - 0xe4], eax
jg 0x415b29
jmp 0x415728
mov eax, dword [ebp - 0x60]
sub eax, 0xd97ce7fe
mov dword [ebp - 0xe8], eax
jg 0x415b10
jmp 0x415741
mov eax, dword [ebp - 0x60]
sub eax, 0xd5cd4c1c
mov dword [ebp - 0xec], eax
jg 0x415af7
jmp 0x41575a
mov eax, dword [ebp - 0x60]
sub eax, 0xcf794f3c
mov dword [ebp - 0xf0], eax
jg 0x415ade
jmp 0x415773
mov eax, dword [ebp - 0x60]
sub eax, 0xcaa7e790
mov dword [ebp - 0xf4], eax
jg 0x415ac5
jmp 0x41578c
mov eax, dword [ebp - 0x60]
sub eax, 0xca0f4741
mov dword [ebp - 0xf8], eax
jg 0x415aac
jmp 0x4157a5
mov eax, dword [ebp - 0x60]
sub eax, 0xc3c57ba1
mov dword [ebp - 0xfc], eax
jg 0x415a93
jmp 0x4157be
mov eax, dword [ebp - 0x60]
sub eax, 0xc0c7d9a0
mov dword [ebp - 0x100], eax
jg 0x415a7a
jmp 0x4157d7
mov eax, dword [ebp - 0x60]
sub eax, 0xb659b71a
mov dword [ebp - 0x104], eax
jg 0x415a61
jmp 0x4157f0
mov eax, dword [ebp - 0x60]
sub eax, 0xb291a9f3
mov dword [ebp - 0x108], eax
jg 0x415a48
jmp 0x415809
mov eax, dword [ebp - 0x60]
sub eax, 0xb11417a0
mov dword [ebp - 0x10c], eax
jg 0x415a2f
jmp 0x415822
mov eax, dword [ebp - 0x60]
sub eax, 0xb0eb0cd7
mov dword [ebp - 0x110], eax
jg 0x415a16
jmp 0x41583b
mov eax, dword [ebp - 0x60]
sub eax, 0xa9efed4c
mov dword [ebp - 0x114], eax
jg 0x4159fd
jmp 0x415854
mov eax, dword [ebp - 0x60]
sub eax, 0xa33d331d
mov dword [ebp - 0x118], eax
jg 0x4159e4
jmp 0x41586d
mov eax, dword [ebp - 0x60]
sub eax, 0xa13e6583
mov dword [ebp - 0x11c], eax
jg 0x4159cb
jmp 0x415886
mov eax, dword [ebp - 0x60]
sub eax, 0xa0ab8b68
mov dword [ebp - 0x120], eax
jg 0x4159b2
jmp 0x41589f
mov eax, dword [ebp - 0x60]
sub eax, 0x9f5f0394
mov dword [ebp - 0x124], eax
jg 0x415999
jmp 0x4158b8
mov eax, dword [ebp - 0x60]
sub eax, 0x9dcb36e9
mov dword [ebp - 0x128], eax
jg 0x415980
jmp 0x4158d1
mov eax, dword [ebp - 0x60]
sub eax, 0x92f0f150
mov dword [ebp - 0x12c], eax
jg 0x415967
jmp 0x4158ea
mov eax, dword [ebp - 0x60]
sub eax, 0x9122d425
mov dword [ebp - 0x130], eax
jg 0x41594e
jmp 0x415903
mov eax, dword [ebp - 0x60]
sub eax, 0x8c4a7213
mov dword [ebp - 0x134], eax
je 0x4161ac
jmp 0x41591c
mov eax, dword [ebp - 0x60]
sub eax, 0x8c71cf41
mov dword [ebp - 0x138], eax
je 0x4161ed
jmp 0x415935
mov eax, dword [ebp - 0x60]
sub eax, 0x8e8391ac
mov dword [ebp - 0x13c], eax
je 0x4161f9
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x9122d426
mov dword [ebp - 0x140], eax
je 0x4162be
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x92f0f151
mov dword [ebp - 0x144], eax
je 0x416141
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x9dcb36ea
mov dword [ebp - 0x148], eax
je 0x415ec7
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x9f5f0395
mov dword [ebp - 0x14c], eax
je 0x415e3f
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xa0ab8b69
mov dword [ebp - 0x150], eax
je 0x416254
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xa13e6584
mov dword [ebp - 0x154], eax
je 0x415ef5
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xa33d331e
mov dword [ebp - 0x158], eax
je 0x4161c7
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xa9efed4d
mov dword [ebp - 0x15c], eax
je 0x415def
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xb0eb0cd8
mov dword [ebp - 0x160], eax
je 0x416273
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xb11417a1
mov dword [ebp - 0x164], eax
je 0x41621b
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xb291a9f4
mov dword [ebp - 0x168], eax
je 0x415e8a
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xb659b71b
mov dword [ebp - 0x16c], eax
je 0x415f2f
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xc0c7d9a1
mov dword [ebp - 0x170], eax
je 0x415dfc
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xc3c57ba2
mov dword [ebp - 0x174], eax
je 0x4162ab
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xca0f4742
mov dword [ebp - 0x178], eax
je 0x416045
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xcaa7e791
mov dword [ebp - 0x17c], eax
je 0x4160a9
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xcf794f3d
mov dword [ebp - 0x180], eax
je 0x416260
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xd5cd4c1d
mov dword [ebp - 0x184], eax
je 0x415e52
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xd97ce7ff
mov dword [ebp - 0x188], eax
je 0x415fcf
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xe18c7248
mov dword [ebp - 0x18c], eax
je 0x415fa7
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xe4ebbb9b
mov dword [ebp - 0x190], eax
je 0x415f02
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xeba029d6
mov dword [ebp - 0x194], eax
je 0x416234
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xefaf142f
mov dword [ebp - 0x198], eax
je 0x415ea5
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xf143e272
mov dword [ebp - 0x19c], eax
je 0x416281
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xf5375801
mov dword [ebp - 0x1a0], eax
je 0x415f22
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xf5c19123
mov dword [ebp - 0x1a4], eax
je 0x4162ca
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xf653236b
mov dword [ebp - 0x1a8], eax
je 0x416333
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xf7a9de89
mov dword [ebp - 0x1ac], eax
je 0x415f16
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0xffa690b7
mov dword [ebp - 0x1b0], eax
je 0x416019
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x227a544
mov dword [ebp - 0x1b4], eax
je 0x416026
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x2420cec8
mov dword [ebp - 0x1b8], eax
je 0x416327
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x2b7fdd64
mov dword [ebp - 0x1bc], eax
je 0x415e24
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x325a87ab
mov dword [ebp - 0x1c0], eax
je 0x416134
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x332767fb
mov dword [ebp - 0x1c4], eax
je 0x415f4f
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x3e83067c
mov dword [ebp - 0x1c8], eax
je 0x4161da
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x47562ecb
mov dword [ebp - 0x1cc], eax
je 0x415e5f
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x4e4ada66
mov dword [ebp - 0x1d0], eax
je 0x4160e2
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x5450163e
mov dword [ebp - 0x1d4], eax
je 0x416395
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x56e3e295
mov dword [ebp - 0x1d8], eax
je 0x416227
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x59ed369c
mov dword [ebp - 0x1dc], eax
je 0x415eda
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x5c21f281
mov dword [ebp - 0x1e0], eax
je 0x416060
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x6000913a
mov dword [ebp - 0x1e4], eax
je 0x415f77
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x670f9a9b
mov dword [ebp - 0x1e8], eax
je 0x41600d
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x71e11a7c
mov dword [ebp - 0x1ec], eax
je 0x416121
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x75b87a48
mov dword [ebp - 0x1f0], eax
je 0x416293
jmp 0x415dcc
mov eax, dword [ebp - 0x60]
sub eax, 0x7fe47c59
mov dword [ebp - 0x1f4], eax
je 0x415dd1
jmp 0x415dcc
jmp 0x4163ae
mov eax, 0xa13e6584
mov ecx, 0xa9efed4d
mov edx, dword [ebp - 0x18]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xc0c7d9a1
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0x2b7fdd64
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
movzx ecx, word [ecx]
cmp ecx, 0x5a4d
setne dl
and dl, 1
mov byte [ebp - 0x12], dl
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xd5cd4c1d
mov ecx, 0x9f5f0395
mov dl, byte [ebp - 0x12]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0xb0eb0cd8
jmp 0x4163ae
mov eax, 0x47562ecb
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xb291a9f4
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
add ecx, dword [edx + 0x3c]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
cmp dword [ecx], 0x4550
setne bl
and bl, 1
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xefaf142f
mov ecx, 0x9dcb36ea
mov dl, byte [ebp - 0x11]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0x59ed369c
mov ecx, 0x9dcb36ea
mov edx, dword [ebp - 0x38]
movzx edx, word [edx + 0x18]
cmp edx, 0x10b
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0xb0eb0cd8
jmp 0x4163ae
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x80]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x5c], 0xa13e6584
jmp 0x4163ae
mov eax, 0xe4ebbb9b
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xf7a9de89
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov dword [ebp - 0x5c], 0xf5375801
jmp 0x4163ae
mov eax, 0xb659b71b
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0x332767fb
mov ecx, dword [ebp - 0x2c]
cmp dword [ecx + 0xc], 0
setne dl
and dl, 1
mov byte [ebp - 0x10], dl
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xcf794f3d
mov ecx, 0x8a7d8f59
mov dl, byte [ebp - 0x10]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0x6000913a
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx + 0xc]
mov dword [esp], eax
call fcn.004066b0
mov ecx, 0xe18c7248
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x24]
sete dl
and dl, 1
mov byte [ebp - 0xf], dl
mov dword [ebp - 0x5c], ecx
jmp 0x4163ae
mov eax, 0x56e3e295
mov ecx, 0x81588be6
mov dl, byte [ebp - 0xf]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xd97ce7ff
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx + 0xc]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
sub esp, 4
mov ecx, 0x670f9a9b
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
add eax, dword [edx + 0x10]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
add eax, dword [edx]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x5c], ecx
jmp 0x4163ae
mov dword [ebp - 0x5c], 0xffa690b7
jmp 0x4163ae
mov eax, 0x227a544
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xca0f4742
mov ecx, dword [ebp - 0x40]
cmp dword [ecx], 0
setne dl
and dl, 1
mov byte [ebp - 0xe], dl
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xb11417a1
mov ecx, 0x5c21f281
mov dl, byte [ebp - 0xe]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xcaa7e791
mov ecx, 0x8e8391ac
mov edx, 0xffffffff
mov esi, dword [ebp - 0x40]
mov esi, dword [esi]
xor esi, 0xffffffff
mov edi, edx
xor edi, 0x80000000
xor edx, 0x8936c13c
or esi, edi
or edx, 0x8936c13c
xor esi, 0xffffffff
and esi, edx
cmp esi, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x40]
add eax, dword [ecx]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
add eax, 2
mov dword [esp], eax
call fcn.004066b0
mov ecx, 0x8c71cf41
mov edx, 0x4e4ada66
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x20]
cmove ecx, edx
mov dword [ebp - 0x5c], ecx
jmp 0x4163ae
mov eax, dword [ebp - 0x3c]
mov ecx, esp
lea edx, [ebp - 0x58]
mov dword [ecx + 0xc], edx
mov dword [ecx], eax
mov dword [ecx + 8], 4
mov dword [ecx + 4], 4
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
sub esp, 0x10
mov ecx, 0x71e11a7c
mov edx, 0x325a87ab
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x5c], ecx
jmp 0x4163ae
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0xb0eb0cd8
jmp 0x4163ae
mov eax, 0x92f0f151
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 4
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x3c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 4
mov dword [ebp - 0x1f8], eax
call fcn.00407910
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x3c]
mov esi, esp
lea edi, [ebp - 0x58]
mov dword [esi + 0xc], edi
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 4], 4
mov ecx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x1fc], eax
call ecx
sub esp, 0x10
mov ecx, 0x8c4a7213
cmp eax, 0
setne bl
and bl, 1
mov byte [ebp - 0xd], bl
mov dword [ebp - 0x5c], ecx
jmp 0x4163ae
mov eax, 0xa33d331e
mov ecx, 0x3e83067c
mov dl, byte [ebp - 0xd]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0xb0eb0cd8
jmp 0x4163ae
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x5c], 0xb0eb0cd8
jmp 0x4163ae
mov dword [ebp - 0x5c], 0x8e8391ac
jmp 0x4163ae
mov eax, dword [ebp - 0x3c]
add eax, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x40]
add eax, 4
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x5c], 0xffa690b7
jmp 0x4163ae
mov dword [ebp - 0x5c], 0x56e3e295
jmp 0x4163ae
mov eax, 0xeba029d6
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov eax, 0xa0ab8b69
mov ecx, 0
mov edx, dword [ebp - 0x2c]
sub ecx, 0x14
sub edx, ecx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x5c], eax
jmp 0x4163ae
mov dword [ebp - 0x5c], 0xf5375801
jmp 0x4163ae
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0xb0eb0cd8
jmp 0x4163ae
mov eax, dword [ebp - 0x1c]
add esp, 0x20c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x5c], 0xc0c7d9a1
jmp 0x4163ae
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
add eax, dword [ecx + 0x3c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x5c], 0x47562ecb
jmp 0x4163ae
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x5c], 0xe4ebbb9b
jmp 0x4163ae
mov dword [ebp - 0x5c], 0xb659b71b
jmp 0x4163ae
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx + 0xc]
mov dword [esp], eax
call fcn.004066b0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x5c], 0x6000913a
jmp 0x4163ae
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx + 0xc]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
sub esp, 4
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
add eax, dword [ecx]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x5c], 0xd97ce7ff
jmp 0x4163ae
mov dword [ebp - 0x5c], 0x227a544
jmp 0x4163ae
mov eax, 4
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x3c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 4
mov dword [ebp - 0x200], eax
call fcn.00407910
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x3c]
mov esi, esp
lea edi, [ebp - 0x58]
mov dword [esi + 0xc], edi
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 4], 4
mov ecx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x204], eax
call ecx
sub esp, 0x10
mov dword [ebp - 0x5c], 0x92f0f151
mov dword [ebp - 0x208], eax
jmp 0x4163ae
mov eax, 0
mov ecx, dword [ebp - 0x2c]
sub eax, 0x14
sub ecx, eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x5c], 0xeba029d6
jmp 0x415401