Function at 0x48bd70
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x10
push ebx
push edi
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x48c7b2
cmp dword [edi + 0x20], 0
je 0x48c7b2
cmp dword [edi + 0x24], 0
je 0x48c7b2
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x48c7b2
cmp dword [eax], edi
jne 0x48c7b2
mov eax, dword [eax + 4]
cmp eax, 0x2a
je 0x48bdd9
cmp eax, 0x39
je 0x48bdd9
cmp eax, 0x45
je 0x48bdd9
cmp eax, 0x49
je 0x48bdd9
cmp eax, 0x5b
je 0x48bdd9
cmp eax, 0x67
je 0x48bdd9
cmp eax, 0x71
je 0x48bdd9
cmp eax, 0x29a
jne 0x48c7b2
mov ebx, dword [esp + 0x20]
cmp ebx, 5
ja 0x48c7b2
cmp dword [edi + 0xc], 0
push esi
mov esi, dword [edi + 0x1c]
je 0x48c79e
cmp dword [edi + 4], 0
je 0x48be03
cmp dword [edi], 0
je 0x48c79e
cmp dword [esi + 4], 0x29a
jne 0x48be15
cmp ebx, 4
jne 0x48c79e
cmp dword [edi + 0x10], 0
push ebp
je 0x48be7e
cmp dword [esi + 0x14], 0
mov edx, dword [esi + 0x28]
mov dword [esi + 0x28], ebx
je 0x48be3d
push edi
call fcn.0048d3b0
add esp, 4
cmp dword [edi + 0x10], 0
je 0x48c78d
jmp 0x48be6a
cmp dword [edi + 4], 0
jne 0x48be6a
xor eax, eax
mov ebp, 9
cmp edx, 4
cmovg eax, ebp
add edx, edx
sub edx, eax
xor ecx, ecx
cmp ebx, 4
lea eax, [ebx + ebx]
cmovg ecx, ebp
sub eax, ecx
cmp eax, edx
jg 0x48be6a
cmp ebx, 4
jne 0x48be7e
mov eax, dword [esi + 4]
cmp eax, 0x29a
jne 0x48be93
cmp dword [edi + 4], 0
je 0x48bf6c
mov eax, dword [str.buffer_error]
pop ebp
pop esi
mov dword [edi + 0x18], eax
mov eax, 0xfffffffb
pop edi
pop ebx
add esp, 0x10
ret
cmp eax, 0x2a
jne 0x48bf6c
cmp dword [esi + 0x18], 0
jne 0x48beae
mov dword [esi + 4], 0x71
jmp 0x48bf6c
mov edx, dword [esi + 0x30]
shl edx, 0xc
add edx, 0xffff8800
cmp dword [esi + 0x88], 2
jge 0x48bef3
mov eax, dword [esi + 0x84]
cmp eax, 2
jl 0x48bef3
cmp eax, 6
jge 0x48bedd
mov eax, 0x40
lea ecx, [eax + 0x20]
jmp 0x48befa
jne 0x48bee9
mov eax, 0x80
lea ecx, [eax + 0x20]
jmp 0x48befa
mov eax, 0xc0
lea ecx, [eax + 0x20]
jmp 0x48befa
xor eax, eax
mov ecx, 0x20
cmp dword [esi + 0x6c], 0
cmove ecx, eax
mov eax, 0x8421085
or ecx, edx
mul ecx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 4
inc ecx
mov eax, ecx
shl eax, 5
sub eax, ecx
push eax
push esi
call fcn.0048d590
add esp, 8
cmp dword [esi + 0x6c], 0
je 0x48bf44
movzx eax, word [edi + 0x32]
push eax
push esi
call fcn.0048d590
movzx eax, word [edi + 0x30]
push eax
push esi
call fcn.0048d590
add esp, 0x10
push 0
push 0
push 0
call fcn.0048a980
mov dword [edi + 0x30], eax
push edi
mov dword [esi + 4], 0x71
call fcn.0048d3b0
add esp, 0x10
cmp dword [esi + 0x14], 0
jne 0x48c78d
cmp dword [esi + 4], 0x39
jne 0x48c183
push 0
push 0
push 0
call fcn.0048ac00
mov dword [edi + 0x30], eax
add esp, 0xc
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
mov byte [ecx + eax], 0x1f
inc dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
mov byte [ecx + eax], 0x8b
inc dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
mov byte [ecx + eax], 8
mov edx, dword [esi + 0x14]
mov ebp, dword [esi + 0x1c]
inc edx
mov dword [esi + 0x14], edx
test ebp, ebp
jne 0x48c05b
mov eax, dword [esi + 8]
mov byte [edx + eax], 0
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x84]
inc edx
mov dword [esi + 0x14], edx
cmp eax, 9
jne 0x48c012
mov cl, 2
jmp 0x48c026
cmp dword [esi + 0x88], 2
jge 0x48c024
cmp eax, 2
jl 0x48c024
xor cl, cl
jmp 0x48c026
mov cl, 4
mov eax, dword [esi + 8]
push edi
mov byte [edx + eax], cl
inc dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
mov byte [ecx + eax], 0xa
inc dword [esi + 0x14]
mov dword [esi + 4], 0x71
call fcn.0048d3b0
add esp, 4
cmp dword [esi + 0x14], 0
jne 0x48c78d
jmp 0x48c183
mov ecx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x2c]
neg ecx
sbb cl, cl
and cl, 0x10
neg eax
sbb al, al
and al, 2
add cl, al
mov eax, dword [ebp + 0x1c]
neg eax
sbb al, al
and al, 8
add cl, al
mov eax, dword [ebp + 0x10]
neg eax
sbb al, al
and al, 4
add cl, al
cmp dword [ebp], 0
setne al
add cl, al
mov eax, dword [esi + 8]
mov byte [edx + eax], cl
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
movzx eax, byte [eax + 4]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
movzx eax, byte [eax + 5]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
movzx eax, byte [eax + 6]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
movzx eax, byte [eax + 7]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x84]
inc edx
mov dword [esi + 0x14], edx
cmp eax, 9
jne 0x48c0fb
mov cl, 2
jmp 0x48c10f
cmp dword [esi + 0x88], 2
jge 0x48c10d
cmp eax, 2
jl 0x48c10d
xor cl, cl
jmp 0x48c10f
mov cl, 4
mov eax, dword [esi + 8]
mov byte [edx + eax], cl
inc dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
mov al, byte [eax + 0xc]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov dword [esi + 0x14], edx
cmp dword [eax + 0x10], 0
je 0x48c15a
mov ecx, dword [esi + 8]
movzx eax, byte [eax + 0x14]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
movzx eax, byte [eax + 0x15]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x2c], 0
je 0x48c175
push edx
push dword [esi + 8]
push dword [edi + 0x30]
call fcn.0048ac00
add esp, 0xc
mov dword [edi + 0x30], eax
mov dword [esi + 0x20], 0
mov dword [esi + 4], 0x45
mov ecx, dword [esi + 4]
lea ebp, [esi + 0x1c]
mov dword [esp + 0x14], ebp
cmp ecx, 0x45
jne 0x48c2e6
mov eax, dword [ebp]
cmp dword [eax + 0x10], 0
je 0x48c2dd
movzx edx, word [eax + 0x14]
mov ecx, dword [esi + 0x14]
sub edx, dword [esi + 0x20]
mov ebx, dword [esi + 0xc]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x24], edx
lea eax, [ecx + edx]
mov dword [esp + 0x18], ecx
cmp eax, ebx
jbe 0x48c289
mov eax, dword [ebp]
sub ebx, ecx
push ebx
mov dword [esp + 0x20], ebx
mov eax, dword [eax + 0x10]
add eax, dword [esi + 0x20]
push eax
mov eax, dword [esi + 8]
add eax, ecx
push eax
call fcn.00414790
mov eax, dword [ebp]
add esp, 0xc
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x14], ecx
cmp dword [eax + 0x2c], 0
je 0x48c214
mov edx, dword [esp + 0x10]
cmp ecx, edx
jbe 0x48c214
mov eax, dword [esi + 8]
sub ecx, edx
push ecx
add eax, edx
push eax
push dword [edi + 0x30]
call fcn.0048ac00
add esp, 0xc
mov dword [edi + 0x30], eax
add dword [esi + 0x20], ebx
mov ebp, dword [edi + 0x1c]
push ebp
call fcn.0048e180
mov ebx, dword [edi + 0x10]
add esp, 4
cmp dword [ebp + 0x14], ebx
cmovbe ebx, dword [ebp + 0x14]
test ebx, ebx
je 0x48c257
push ebx
push dword [ebp + 0x10]
push dword [edi + 0xc]
call fcn.00414790
add dword [edi + 0xc], ebx
add esp, 0xc
add dword [ebp + 0x10], ebx
add dword [edi + 0x14], ebx
sub dword [edi + 0x10], ebx
sub dword [ebp + 0x14], ebx
jne 0x48c257
mov eax, dword [ebp + 8]
mov dword [ebp + 0x10], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x18], eax
test eax, eax
jne 0x48c78d
mov edx, dword [esp + 0x24]
lea ebp, [esi + 0x1c]
sub edx, dword [esp + 0x1c]
xor ecx, ecx
mov ebx, dword [esi + 0xc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x24], edx
cmp edx, ebx
ja 0x48c1c7
lea ebp, [esi + 0x1c]
mov eax, dword [ebp]
push edx
mov eax, dword [eax + 0x10]
add eax, dword [esi + 0x20]
push eax
mov eax, dword [esi + 8]
add eax, dword [esp + 0x20]
push eax
call fcn.00414790
mov edx, dword [esi + 0x14]
add esp, 0xc
mov eax, dword [ebp]
add edx, dword [esp + 0x24]
mov dword [esi + 0x14], edx
cmp dword [eax + 0x2c], 0
je 0x48c2d6
mov ecx, dword [esp + 0x10]
cmp edx, ecx
jbe 0x48c2d6
mov eax, dword [esi + 8]
sub edx, ecx
push edx
add eax, ecx
push eax
push dword [edi + 0x30]
call fcn.0048ac00
add esp, 0xc
mov dword [edi + 0x30], eax
mov dword [esi + 0x20], 0
mov dword [esi + 4], 0x49
jmp 0x48c2ef
cmp ecx, 0x49
jne 0x48c40b
mov eax, dword [ebp]
cmp dword [eax + 0x1c], 0
je 0x48c3f9
mov ecx, dword [esi + 0x14]
lea edx, [esi + 8]
mov dword [esp + 0x24], ecx
mov ebx, ecx
nop dword [eax + eax]
mov dword [esp + 0x10], edx
cmp ebx, dword [esi + 0xc]
jne 0x48c394
mov eax, dword [ebp]
cmp dword [eax + 0x2c], 0
je 0x48c33c
cmp ebx, ecx
jbe 0x48c33c
mov eax, dword [edx]
sub ebx, ecx
push ebx
add eax, ecx
push eax
push dword [edi + 0x30]
call fcn.0048ac00
add esp, 0xc
mov dword [edi + 0x30], eax
mov ebp, dword [edi + 0x1c]
push ebp
call fcn.0048e180
mov ebx, dword [edi + 0x10]
add esp, 4
cmp dword [ebp + 0x14], ebx
cmovbe ebx, dword [ebp + 0x14]
test ebx, ebx
je 0x48c37c
push ebx
push dword [ebp + 0x10]
push dword [edi + 0xc]
call fcn.00414790
add dword [edi + 0xc], ebx
add esp, 0xc
add dword [ebp + 0x10], ebx
add dword [edi + 0x14], ebx
sub dword [edi + 0x10], ebx
sub dword [ebp + 0x14], ebx
jne 0x48c37c
mov eax, dword [ebp + 8]
mov dword [ebp + 0x10], eax
cmp dword [esi + 0x14], 0
jne 0x48c78d
mov ebp, dword [esp + 0x14]
xor ebx, ebx
mov dword [esp + 0x24], 0
mov eax, dword [ebp]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + 0x1c]
mov dl, byte [ecx + eax]
lea eax, [ecx + 1]
mov dword [esi + 0x20], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov byte [ebx + eax], dl
mov ebx, dword [esi + 0x14]
inc ebx
mov dword [esi + 0x14], ebx
test dl, dl
je 0x48c3c7
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
jmp 0x48c310
mov eax, dword [ebp]
cmp dword [eax + 0x2c], 0
je 0x48c3f2
mov ecx, dword [esp + 0x24]
cmp ebx, ecx
jbe 0x48c3f2
mov eax, dword [esp + 0x10]
sub ebx, ecx
push ebx
mov eax, dword [eax]
add eax, ecx
push eax
push dword [edi + 0x30]
call fcn.0048ac00
add esp, 0xc
mov dword [edi + 0x30], eax
mov dword [esi + 0x20], 0
mov edx, esi
mov dword [esi + 4], 0x5b
add edx, 0xc
mov dword [esp + 0x18], edx
jmp 0x48c41b
lea eax, [esi + 0xc]
mov dword [esp + 0x18], eax
cmp ecx, 0x5b
jne 0x48c526
mov eax, dword [ebp]
cmp dword [eax + 0x24], 0
je 0x48c519
mov ecx, dword [esi + 0x14]
lea edx, [esi + 8]
mov dword [esp + 0x24], ecx
mov ebx, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], edx
cmp ebx, dword [eax]
jne 0x48c4bb
mov eax, dword [ebp]
cmp dword [eax + 0x2c], 0
je 0x48c463
cmp ebx, ecx
jbe 0x48c463
mov eax, dword [edx]
sub ebx, ecx
push ebx
add eax, ecx
push eax
push dword [edi + 0x30]
call fcn.0048ac00
add esp, 0xc
mov dword [edi + 0x30], eax
mov ebp, dword [edi + 0x1c]
push ebp
call fcn.0048e180
mov ebx, dword [edi + 0x10]
add esp, 4
cmp dword [ebp + 0x14], ebx
cmovbe ebx, dword [ebp + 0x14]
test ebx, ebx
je 0x48c4a3
push ebx
push dword [ebp + 0x10]
push dword [edi + 0xc]
call fcn.00414790
add dword [edi + 0xc], ebx
add esp, 0xc
add dword [ebp + 0x10], ebx
add dword [edi + 0x14], ebx
sub dword [edi + 0x10], ebx
sub dword [ebp + 0x14], ebx
jne 0x48c4a3
mov eax, dword [ebp + 8]
mov dword [ebp + 0x10], eax
cmp dword [esi + 0x14], 0
jne 0x48c78d
mov ebp, dword [esp + 0x14]
xor ebx, ebx
mov dword [esp + 0x24], 0
mov eax, dword [ebp]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + 0x24]
mov dl, byte [ecx + eax]
lea eax, [ecx + 1]
mov dword [esi + 0x20], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov byte [ebx + eax], dl
mov ebx, dword [esi + 0x14]
inc ebx
mov dword [esi + 0x14], ebx
test dl, dl
je 0x48c4ee
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
jmp 0x48c434
mov eax, dword [ebp]
cmp dword [eax + 0x2c], 0
je 0x48c519
mov ecx, dword [esp + 0x24]
cmp ebx, ecx
jbe 0x48c519
mov eax, dword [esp + 0x10]
sub ebx, ecx
push ebx
mov eax, dword [eax]
add eax, ecx
push eax
push dword [edi + 0x30]
call fcn.0048ac00
add esp, 0xc
mov dword [edi + 0x30], eax
mov ebx, dword [esp + 0x28]
mov dword [esi + 4], 0x67
jmp 0x48c52b
cmp ecx, 0x67
jne 0x48c59e
mov eax, dword [ebp]
cmp dword [eax + 0x2c], 0
je 0x48c584
mov edx, dword [esi + 0x14]
mov ecx, dword [esp + 0x18]
lea eax, [edx + 2]
cmp eax, dword [ecx]
jbe 0x48c556
push edi
call fcn.0048d3b0
mov edx, dword [esi + 0x14]
add esp, 4
test edx, edx
jne 0x48c78d
mov ecx, dword [esi + 8]
movzx eax, byte [edi + 0x30]
push 0
push 0
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
movzx eax, byte [edi + 0x31]
push 0
mov byte [edx + ecx], al
inc dword [esi + 0x14]
call fcn.0048ac00
add esp, 0xc
mov dword [edi + 0x30], eax
push edi
mov dword [esi + 4], 0x71
call fcn.0048d3b0
add esp, 4
cmp dword [esi + 0x14], 0
jne 0x48c78d
cmp dword [edi + 4], 0
jne 0x48c5bf
cmp dword [esi + 0x74], 0
jne 0x48c5bf
test ebx, ebx
je 0x48c794
cmp dword [esi + 4], 0x29a
je 0x48c6a3
mov eax, dword [esi + 0x84]
push ebx
push esi
test eax, eax
jne 0x48c5d2
call fcn.0048b030
jmp 0x48c5fc
mov ecx, dword [esi + 0x88]
cmp ecx, 2
jne 0x48c5e4
call fcn.0048cc70
jmp 0x48c5fc
cmp ecx, 3
jne 0x48c5f0
call fcn.0048ce60
jmp 0x48c5fc
lea eax, [eax + eax*2]
mov eax, dword [eax*4 + 0x4aab30]
call eax
add esp, 8
cmp eax, 2
je 0x48c609
cmp eax, 3
jne 0x48c610
mov dword [esi + 4], 0x29a
test eax, eax
je 0x48c787
cmp eax, 2
je 0x48c787
cmp eax, 1
jne 0x48c6a3
cmp ebx, eax
jne 0x48c635
push esi
call fcn.0048e090
add esp, 4
jmp 0x48c690
cmp ebx, 5
je 0x48c690
push 0
push 0
push 0
push esi
call fcn.0048e600
add esp, 0x10
cmp ebx, 3
jne 0x48c690
mov eax, dword [esi + 0x44]
xor edx, edx
mov ecx, dword [esi + 0x4c]
mov word [eax + ecx*2 - 2], dx
mov eax, dword [esi + 0x4c]
lea eax, [eax*2 - 2]
push eax
push edx
push dword [esi + 0x44]
call fcn.00412830
add esp, 0xc
cmp dword [esi + 0x74], 0
jne 0x48c690
mov dword [esi + 0x6c], 0
mov dword [esi + 0x5c], 0
mov dword [esi + 0x16b4], 0
push edi
call fcn.0048d3b0
add esp, 4
cmp dword [edi + 0x10], 0
je 0x48c78d
cmp ebx, 4
jne 0x48c794
mov eax, dword [esi + 0x18]
test eax, eax
jg 0x48c6be
pop ebp
pop esi
pop edi
lea eax, [ebx - 3]
pop ebx
add esp, 0x10
ret
cmp eax, 2
jne 0x48c749
mov edx, dword [esi + 0x14]
movzx eax, byte [edi + 0x30]
mov ecx, dword [esi + 8]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov edx, dword [esi + 0x14]
movzx eax, byte [edi + 0x31]
mov ecx, dword [esi + 8]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov edx, dword [esi + 0x14]
movzx eax, byte [edi + 0x32]
mov ecx, dword [esi + 8]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov edx, dword [esi + 0x14]
movzx eax, byte [edi + 0x33]
mov ecx, dword [esi + 8]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov edx, dword [esi + 0x14]
movzx eax, byte [edi + 8]
mov ecx, dword [esi + 8]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
movzx eax, byte [edi + 9]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
movzx eax, byte [edi + 0xa]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
movzx eax, byte [edi + 0xb]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
jmp 0x48c762
movzx eax, word [edi + 0x32]
push eax
push esi
call fcn.0048d590
movzx eax, word [edi + 0x30]
push eax
push esi
call fcn.0048d590
add esp, 0x10
push edi
call fcn.0048d3b0
mov eax, dword [esi + 0x18]
add esp, 4
test eax, eax
jle 0x48c777
neg eax
mov dword [esi + 0x18], eax
xor eax, eax
cmp dword [esi + 0x14], eax
pop ebp
pop esi
pop edi
sete al
pop ebx
add esp, 0x10
ret
cmp dword [edi + 0x10], 0
jne 0x48c794
mov dword [esi + 0x28], 0xffffffff
pop ebp
pop esi
pop edi
xor eax, eax
pop ebx
add esp, 0x10
ret
mov eax, dword [str.stream_error]
pop esi
mov dword [edi + 0x18], eax
mov eax, 0xfffffffe
pop edi
pop ebx
add esp, 0x10
ret
pop edi
mov eax, 0xfffffffe
pop ebx
add esp, 0x10
ret