Function at 0x409891
Capabilities:
Resolve function by parsing pe exports

Disassembly:
dec eax
mov dword [esp + 0x10], edx
push ebp
push ebx
push esi
push edi
inc ecx
push esp
inc ecx
push ebp
inc ecx
push esi
inc ecx
push edi
dec eax
lea ebp, [esp - 0x2c8]
dec eax
sub esp, 0x3c8
dec esp
lea edi, [edx + 0x528]
sub edi, edi
dec ebp
arpl word [edi + 0x3c], si
dec eax
mov esi, ecx
dec ebp
add esi, edi
dec eax
mov dword [esp + 0x60], edi
xor ecx, ecx
dec esp
mov dword [ebp - 0x78], esi
dec esp
mov ebp, edx
dec eax
mov dword [ebp + 0x328], edi
dec eax
mov dword [esp + 0x50], edi
dec esp
mov dword [ebp - 0x80], edi
call dword [esi + 0x40]
dec eax
push eax
pop ecx
dec eax
arpl word [eax + 0x3c], ax
movzx ecx, word [eax + ecx + 4]
inc cx
cmp dword [esi + 4], ecx
jne 0x40a20b
inc ecx
mov eax, dword [esi + 0x50]
dec eax
mov dword [ebp - 0x68], eax
inc ecx
mov eax, dword [esi + 0xb4]
mov dword [ebp + 0x320], eax
or eax, eax
jne 0x409920
dec ecx
mov eax, dword [esi + 0x30]
dec eax
mov dword [ebp + 0x328], eax
nop
push 3
nop
pop ecx
dec eax
mov dword [esp + 0x30], edi
dec eax
lea ebx, [esi + 0x625]
lea eax, [ecx - 2]
inc esp
lea esp, [ecx - 1]
inc eax
cmp byte [ebx], bh
jne 0x409971
mov dword [esp + 0x28], 0x8000000
dec esp
lea ecx, [ebp - 0x68]
inc ebp
sub eax, eax
mov dword [esp + 0x20], 0x40
mov edx, 0xf001f
dec eax
lea ecx, [esp + 0x68]
call dword [esi + 0x210]
test eax, eax
jne 0x40a20b
jmp 0x409a0c
mov dword [esp + 0x28], edi
inc ebp
xor ecx, ecx
mov dword [esp + 0x20], ecx
inc esp
nop
nop
dec eax
push ebx
pop ecx
mov edx, 0x80000000
call dword [esi + 0x90]
dec eax
mov edi, eax
dec eax
dec eax
dec eax
cmp eax, 0xfffffffd
ja 0x40a20b
xor ebx, ebx
dec eax
lea edx, [esp + 0x58]
dec eax
push edi
pop ecx
dec eax
mov dword [esp + 0x58], ebx
call dword [esi + 0x98]
or eax, eax
je 0x40a20b
mov eax, dword [esp + 0x58]
inc ecx
cmp dword [esi + 0x50], eax
ja 0x40a20b
dec eax
mov dword [esp + 0x30], edi
dec eax
lea ecx, [esp + 0x68]
mov dword [esp + 0x28], 0x1000000
inc ebp
sub ecx, ecx
inc ebp
sub eax, eax
inc esp
mov dword [esp + 0x20], esp
mov edx, 0xf001f
call dword [esi + 0x210]
dec eax
mov ecx, edi
mov ebx, eax
call dword [esi + 0xf0]
xor edi, edi
or ebx, ebx
jne 0x40a20b
dec eax
lea ebx, [esi + 0x625]
call dword [esi + 0xb0]
dec eax
mov ecx, dword [esp + 0x68]
dec esp
lea eax, [ebp + 0x328]
mov dword [esp + 0x48], 4
dec eax
mov edx, eax
mov dword [esp + 0x40], edi
dec eax
lea eax, [esp + 0x50]
inc esp
mov dword [esp + 0x38], esp
inc ebp
xor ecx, ecx
dec eax
mov dword [esp + 0x30], eax
dec eax
mov dword [esp + 0x28], edi
dec eax
mov dword [esp + 0x20], edi
call dword [esi + 0x218]
dec eax
mov ecx, dword [ebp + 0x328]
dec ebp
arpl word [edi + 0x3c], sp
dec esp
add esp, ecx
dec esp
mov dword [esp + 0x78], esp
test eax, eax
je 0x409a71
cmp eax, 0x40000003
jne 0x40a20b
dec eax
test ecx, ecx
je 0x40a20b
inc eax
cmp byte [ebx], bh
je 0x409ae4
dec eax
mov edx, dword [esp + 0x50]
dec esp
lea ecx, [ebp + 0x310]
nop
push 4
nop
pop edi
inc esp
push edi
pop eax
call dword [esi + 0x60]
dec ecx
lea ebx, [esi + 0x54]
inc esp
push edi
pop ecx
mov edx, dword [ebx]
sub ecx, ecx
inc ecx
mov eax, 0x3000
dec eax
mov dword [esp + 0x70], ebx
call dword [esi + 0x48]
inc esp
mov eax, dword [ebx]
dec eax
mov ecx, eax
dec eax
mov edx, dword [ebp + 0x328]
dec eax
mov dword [esp + 0x58], eax
call fcn.0040b0ad
inc esp
mov eax, dword [esp + 0x50]
sub edx, edx
dec eax
mov ecx, dword [ebp + 0x328]
call fcn.0040b0cd
dec eax
mov ecx, dword [ebp + 0x328]
xor edi, edi
jmp 0x409af9
dec eax
mov eax, dword [ebp + 0x318]
dec ecx
lea ebx, [esi + 0x54]
dec eax
mov dword [esp + 0x70], ebx
dec eax
mov dword [esp + 0x58], eax
inc esp
mov eax, dword [ebx]
dec ecx
mov edx, edi
call fcn.0040b0ad
dec eax
mov eax, dword [ebp + 0x328]
inc esp
pushal
popal
dec ecx
mov dword [esp + 0x30], eax
inc ecx
movzx eax, word [esp + 0x14]
dec eax
add eax, 0x18
dec ecx
add eax, esp
dec eax
mov dword [ebp - 0x70], eax
inc cx
cmp edi, dword [esp + 6]
jae 0x409b7e
dec esp
mov esi, dword [ebp - 0x80]
dec esp
mov ebp, eax
inc ecx
push edi
pop eax
dec eax
lea edi, [eax + eax*4]
inc ecx
mov ebx, dword [ebp + edi*8 + 0xc]
dec eax
add ebx, dword [ebp + 0x328]
inc ecx
mov edx, dword [ebp + edi*8 + 0x14]
dec eax
mov ecx, ebx
inc ebp
mov eax, dword [ebp + edi*8 + 0x10]
dec ecx
add edx, esi
call fcn.0040b0ad
movzx eax, byte [ebx]
inc ecx
inc edi
inc ecx
mov dword [ebp + edi*8 + 8], eax
inc ecx
movzx eax, word [esp + 6]
inc esp
cmp edi, eax
jb 0x409b33
dec esp
mov esi, dword [ebp - 0x78]
sub edi, edi
dec esp
mov ebp, dword [ebp + 0x318]
dec esp
mov eax, dword [ebp + 0x328]
mov eax, dword [ebp + 0x320]
dec ebp
push eax
pop edx
dec ebp
sub edx, dword [esi + 0x30]
or eax, eax
je 0x409c8c
dec ebp
or edx, edx
je 0x409c8c
inc ecx
mov ecx, dword [esp + 0xb0]
dec eax
lea ebx, [ecx + eax]
dec edx
lea eax, [ebx + eax]
dec esi
lea ecx, [ecx + eax]
dec esp
cmp ecx, eax
jae 0x409c8c
inc ecx
mov edi, 0xfff
inc ecx
cmp dword [ecx + 4], edi
je 0x409c8c
inc ecx
mov eax, dword [ecx + 4]
dec ebp
lea ebx, [ecx + 8]
dec ecx
add eax, ecx
dec esp
cmp ebx, eax
je 0x409c7c
nop
push 2
nop
pop ecx
inc ecx
movzx edx, word [ebx]
mov eax, edx
inc ecx
and eax, edi
inc ecx
add eax, dword [ecx]
inc ecx
cmp eax, dword [esp + 0x50]
jae 0x409c69
inc ecx
mov ecx, dword [ecx]
push edx
pop eax
dec ecx
and eax, edi
shr dx, 0xc
dec ecx
add eax, eax
dec eax
add ecx, eax
cmp dx, 0xa
jne 0x409c19
dec esp
add dword [ecx], edx
jmp 0x409c4f
mov eax, 3
cmp dx, ax
jne 0x409c28
inc ecx
mov eax, edx
jmp 0x409c4c
push 1
pop eax
pushal
popal
cmp dx, ax
jne 0x409c3e
dec ecx
mov eax, edx
dec eax
shr eax, 0x10
movzx eax, ax
jmp 0x409c4c
push edx
pop edx
push 2
pop eax
cmp dx, ax
jne 0x409c5d
inc ecx
movzx eax, dx
dec eax
add dword [ecx], eax
dec esp
mov eax, dword [ebp + 0x328]
nop
nop
push 2
pop ecx
jmp 0x409c69
test dx, dx
jne 0x40a19e
dec eax
mov ecx, eax
inc ecx
mov eax, dword [ecx + 4]
dec esp
add ebx, ecx
dec ecx
add eax, ecx
dec esp
cmp ebx, eax
jne 0x409be9
dec edx
lea eax, [ebx + eax]
dec ebp
mov ecx, ebx
dec esp
cmp ebx, eax
jb 0x409bc6
inc ecx
mov eax, dword [esp + 0x90]
or eax, eax
je 0x409d52
dec ecx
lea ebx, [eax + eax]
cmp dword [ebx + 0xc], edi
je 0x409d52
dec esp
mov esi, dword [ebp + 0x318]
mov edx, dword [ebx + 0xc]
dec eax
mov ecx, esi
dec ecx
add edx, eax
call fcn.0040a89d
dec esp
mov eax, dword [ebp + 0x328]
dec esp
mov ebp, eax
mov edi, dword [ebx]
inc esp
mov edi, dword [ebx + 0x10]
dec ecx
add edi, eax
dec ebp
add edi, eax
dec eax
mov ecx, dword [edi]
sub eax, eax
dec eax
test ecx, ecx
je 0x409d33
jns 0x409ce8
inc esp
push ecx
pop ecx
inc ebp
xor eax, eax
jmp 0x409d14
dec esi
lea esp, [ecx + eax]
inc ecx
cmp dword [esi + 4], eax
je 0x409d0c
dec ecx
lea edx, [esp + 2]
dec eax
push esi
pop ecx
call fcn.00408d31
or eax, eax
je 0x409d0c
dec eax
mov eax, dword [esi + 0x1e0]
jmp 0x409d1f
inc ebp
xor ecx, ecx
dec ebp
lea eax, [esp + 2]
dec ecx
push ebp
pop edx
dec eax
mov ecx, esi
call fcn.0040a985
dec ecx
mov dword [edi], eax
dec eax
add edi, 8
dec esp
mov eax, dword [ebp + 0x328]
dec ecx
add edi, 8
jmp 0x409cd4
dec eax
add ebx, 0x14
sub edi, edi
cmp dword [ebx + 0xc], edi
jne 0x409cb0
dec esp
mov esi, dword [ebp - 0x78]
dec esp
mov ebp, dword [ebp + 0x318]
dec esp
mov esp, dword [esp + 0x78]
inc ecx
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x409de8
dec eax
lea edi, [eax + 4]
dec ecx
add edi, eax
mov eax, dword [edi]
or eax, eax
je 0x409de6
mov edx, eax
dec eax
mov ecx, esi
dec ecx
add edx, eax
call fcn.0040a89d
dec esp
mov eax, dword [ebp + 0x328]
dec esp
mov esp, eax
sub eax, eax
dec ebp
test esp, esp
je 0x409dd7
mov ebx, dword [edi + 0xc]
inc esp
mov edi, dword [edi + 8]
dec ecx
add ebx, eax
dec ebp
add edi, eax
jmp 0x409dcf
jns 0x409da6
inc esp
mov ecx, dword [ebx]
dec esp
mov eax, eax
jmp 0x409db0
dec ecx
add eax, 2
inc esp
mov ecx, eax
dec esp
add eax, ecx
dec ecx
push esp
pop edx
dec eax
mov ecx, esi
call fcn.0040a985
dec ecx
mov dword [edi], eax
dec eax
add ebx, 8
dec esp
mov eax, dword [ebp + 0x328]
dec ecx
add edi, 8
xor eax, eax
dec eax
mov ecx, dword [ebx]
dec eax
test ecx, ecx
jne 0x409d9c
dec eax
add edi, 0x20
mov eax, dword [edi]
test eax, eax
jne 0x409d6f
dec esp
mov esp, dword [esp + 0x78]
sub edi, edi
inc ebp
mov esp, dword [esp + 0x28]
dec eax
lea ecx, [ebp - 0x60]
nop
push 2
nop
pop eax
dec ebp
add esp, eax
dec esp
mov dword [ebp - 0x80], esp
lea edx, [eax + 0x7e]
inc ecx
movups xmm0, xmmword [esi]
inc ecx
movups xmm1, xmmword [esi + 0x10]
movups xmmword [ecx], xmm0
inc ecx
movups xmm0, xmmword [esi + 0x20]
movups xmmword [ecx + 0x10], xmm1
inc ecx
movups xmm1, xmmword [esi + 0x30]
movups xmmword [ecx + 0x20], xmm0
inc ecx
movups xmm0, xmmword [esi + 0x40]
movups xmmword [ecx + 0x30], xmm1
inc ecx
movups xmm1, xmmword [esi + 0x50]
movups xmmword [ecx + 0x40], xmm0
inc ecx
movups xmm0, xmmword [esi + 0x60]
movups xmmword [ecx + 0x50], xmm1
inc ecx
movups xmm1, xmmword [esi + 0x70]
dec esp
add esi, edx
movups xmmword [ecx + 0x60], xmm0
dec eax
add ecx, edx
movups xmmword [ecx - 0x10], xmm1
dec eax
sub eax, 1
jne 0x409e00
dec ecx
mov eax, dword [esi]
inc ecx
mov eax, 0x3000
dec eax
mov dword [ecx], eax
xor ecx, ecx
dec eax
mov eax, dword [ebp - 0x60]
dec eax
shr eax, 0x30
inc esp
lea ecx, [ecx + 4]
dec eax
lea edx, [eax + eax*4]
dec eax
shl edx, 3
call dword [esi + 0x48]
inc esp
movzx edi, word [ebp - 0x5a]
dec eax
push eax
pop ecx
dec eax
mov edx, dword [ebp - 0x70]
dec eax
mov ebx, eax
dec eax
mov dword [esp + 0x60], eax
inc edi
lea eax, [edi + edi*4]
inc ecx
shl eax, 3
call fcn.0040b0ad
pushfd
xor eax, eax
inc eax
popfd
cmp dword [esi + 0x574], eax
jne 0x409efd
inc eax
cmp byte [esi + 0x625], bh
jne 0x409ed7
dec eax
mov ebx, dword [esp + 0x70]
xor edx, edx
dec eax
mov ecx, dword [ebp + 0x328]
inc esp
mov eax, dword [ebx]
call fcn.0040b0cd
inc esp
mov eax, dword [ebx]
dec ecx
lea ecx, [ebp + 0x528]
xor edx, edx
call fcn.0040b0cd
jmp 0x409ef8
dec eax
mov eax, dword [esp + 0x58]
dec eax
or eax, eax
je 0x409efd
dec eax
mov ebx, dword [esp + 0x70]
dec eax
mov edx, eax
dec eax
mov ecx, dword [ebp + 0x328]
inc esp
mov eax, dword [ebx]
call fcn.0040b0ad
dec eax
mov ebx, dword [esp + 0x60]
inc eax
cmp byte [esi + 0x625], bh
jne 0x409f94
call dword [esi + 0xb0]
dec eax
mov edx, dword [ebp + 0x328]
dec eax
push eax
pop ecx
call dword [esi + 0x220]
test eax, eax
jne 0x40a20b
dec eax
mov eax, dword [ebp + 0x328]
cmp dword [ebp + 0x320], edi
dec eax
mov dword [esp + 0x50], edi
dec eax
cmovne eax, edi
dec eax
mov dword [ebp + 0x328], eax
call dword [esi + 0xb0]
dec eax
mov ecx, dword [esp + 0x68]
dec esp
lea eax, [ebp + 0x328]
mov dword [esp + 0x48], pe_nt_image_headers32
dec eax
mov edx, eax
mov dword [esp + 0x40], edi
push 2
pop eax
push edi
pop edi
mov dword [esp + 0x38], eax
inc ebp
xor ecx, ecx
dec eax
lea eax, [esp + 0x50]
dec eax
mov dword [esp + 0x30], eax
dec eax
mov dword [esp + 0x28], edi
dec eax
mov dword [esp + 0x20], edi
call dword [esi + 0x218]
test eax, eax
jne 0x40a20b
dec eax
mov edx, dword [esp + 0x50]
dec esp
lea ecx, [ebp + 0x310]
dec eax
mov ecx, dword [ebp + 0x328]
inc ecx
nop
push 8
nop
pop eax
call dword [esi + 0x60]
inc esp
push edi
pop esi
inc ebp
or edi, edi
je 0x40a0a7
dec esp
mov ebp, dword [esp + 0x60]
dec eax
lea edi, [ebx + 0xc]
mov ebx, dword [ebp + 0x318]
inc ebp
xor esp, esp
inc ebp
lea edx, [esp + 1]
mov edx, dword [edi + 0x18]
inc esp
push edx
pop eax
mov ecx, edx
inc ecx
shr eax, 0x1e
shr edx, 0x1d
inc ecx
and edx, edx
shr ecx, 0x1f
test ecx, edx
jne 0x40a08a
inc ecx
test eax, edx
je 0x409ffc
mov ebx, 0x20
jmp 0x40a042
inc esp
push edx
pop ecx
mov eax, ecx
inc ebp
xor ecx, edx
inc ecx
and eax, eax
inc ecx
test ecx, eax
je 0x40a01e
mov al, byte [esi + 0x625]
neg al
sbb ebx, ebx
and ebx, 0xfffffffc
add ebx, 8
jmp 0x40a042
inc ecx
xor ecx, edx
inc ecx
push eax
pop eax
inc ecx
xor eax, edx
and eax, ecx
test edx, eax
je 0x40a034
mov ebx, 0x10
jmp 0x40a042
inc ecx
and ecx, eax
push 2
pop eax
push edi
pop edi
inc ecx
or ecx, ecx
cmovne ebx, eax
inc esp
mov eax, dword [edi]
inc ecx
lea eax, [edi - 1]
dec esp
mov edx, dword [ebp + 0x328]
dec ebp
add edx, eax
inc esp
cmp esi, eax
jae 0x40a06a
inc ecx
lea eax, [esi + 1]
dec eax
lea eax, [eax + eax*4]
inc ecx
mov edx, dword [ebp + eax*8 + 0xc]
dec ecx
sub edx, eax
jmp 0x40a06d
mov edx, dword [edi + 4]
dec esp
lea ecx, [ebp + 0x310]
inc esp
mov dword [ebp + 0x310], esp
inc esp
push ebx
pop eax
dec ecx
push edx
pop ecx
call dword [esi + 0x60]
inc ecx
pushfd
xor edx, edx
inc edx
popfd
inc ebp
add esi, edx
dec eax
add edi, 0x28
inc ebp
cmp esi, edi
jb 0x409fd3
dec esp
mov esp, dword [ebp - 0x80]
sub edi, edi
dec esp
mov ebp, dword [ebp + 0x318]
mov edx, dword [ebp - 0x34]
dec esp
lea ecx, [ebp + 0x310]
dec eax
mov ecx, dword [ebp + 0x328]
inc ecx
mov eax, 2
mov dword [ebp + 0x310], edi
call dword [esi + 0x60]
dec eax
mov ecx, dword [esp + 0x78]
inc ecx
nop
push 1
nop
pop esi
mov eax, dword [ecx + 0xd0]
dec eax
mov ecx, dword [ebp + 0x328]
test eax, eax
je 0x40a10a
dec eax
mov ebx, dword [eax + ecx + 0x18]
dec eax
or ebx, ebx
je 0x40a10a
jmp 0x40a102
inc ebp
sub eax, eax
inc ecx
mov edx, esi
call eax
dec eax
mov ecx, dword [ebp + 0x328]
dec eax
lea ebx, [ebx + 8]
dec eax
mov eax, dword [ebx]
dec eax
or eax, eax
jne 0x40a0ef
nop
push 3
nop
pop eax
inc ecx
cmp dword [ebp], eax
jne 0x40a28b
mov eax, dword [ebp - 0x38]
inc ebp
sub eax, eax
dec eax
add eax, ecx
inc ecx
mov edx, esi
call eax
inc ecx
cmp byte [ebp + 0x30c], bh
je 0x40a2fe
mov eax, dword [ebp + 0x28]
dec esp
mov eax, dword [ebp + 0x328]
dec ecx
lea ecx, [eax + eax]
or eax, eax
je 0x40a319
mov ebx, dword [ecx + 0x18]
test ebx, ebx
je 0x40a319
mov edi, dword [ecx + 0x1c]
inc esp
mov edi, dword [ecx + 0x20]
dec ecx
add edi, eax
inc esp
mov esi, dword [ecx + 0x24]
dec ebp
add edi, eax
dec ebp
add esi, eax
lea eax, [ebx - 1]
inc ecx
mov ecx, dword [edi + eax*4]
dec ecx
lea edx, [ebp + 0x30c]
dec ecx
add ecx, eax
inc esp
push eax
pop esp
mov ebx, eax
call fcn.0040b0e9
dec esp
mov eax, dword [ebp + 0x328]
or eax, eax
je 0x40a21f
or ebx, ebx
jne 0x40a169
dec esp
mov ebp, dword [ebp + 0x318]
dec ebp
or eax, eax
je 0x40a1f6
movzx eax, word [ebp - 0x5a]
mov edi, 0xc000
dec eax
mov ecx, dword [esp + 0x60]
inc esp
mov eax, edi
dec eax
lea edx, [eax + eax*4]
dec eax
shl edx, 3
call dword [esi + 0x50]
dec eax
mov eax, dword [esp + 0x58]
dec eax
or eax, eax
je 0x40a1d5
mov edx, dword [ebp - 0xc]
inc esp
mov eax, edi
dec eax
push eax
pop ecx
call dword [esi + 0x50]
call dword [esi + 0xb0]
dec eax
mov edx, dword [ebp + 0x328]
dec eax
mov ecx, eax
call dword [esi + 0x220]
dec eax
mov ecx, dword [esp + 0x68]
call dword [esi + 0xf0]
inc ebp
mov eax, dword [ebp + 0x524]
dec ecx
lea ecx, [ebp + 0x528]
sub edx, edx
call fcn.0040b0cd
dec eax
add esp, 0x3c8
inc ecx
pop edi
inc ecx
pop esi
inc ecx
pop ebp
inc ecx
pop esp
pop edi
pop esi
pop ebx
pop ebp
ret
inc ebx
movzx eax, word [esi]
mov ebx, dword [edi + eax*4]
dec ecx
add ebx, eax
je 0x40a197
dec esp
mov ebp, dword [ebp + 0x318]
inc ebp
xor esi, esi
dec ecx
lea edi, [ebp + 0x40c]
inc esp
cmp byte [edi], dh
je 0x40a287
inc ebp
cmp dword [ebp + 0x50c], esi
je 0x40a271
dec eax
lea eax, [ebp + 0xb0]
mov dword [esp + 0x28], 0x100
inc ecx
or ecx, 0xffffffff
dec eax
mov dword [esp + 0x20], eax
dec esp
mov eax, edi
xor edx, edx
sub ecx, ecx
call dword [esi + 0x70]
inc ebp
cmp dword [ebp + 0x50c], esi
dec eax
lea ecx, [ebp + 0xb0]
dec eax
cmove ecx, edi
call ebx
jmp 0x40a2f5
call ebx
jmp 0x40a2f5
dec ebp
lea eax, [ebp + 0x40c]
inc ecx
cmp byte [eax], bh
je 0x40a2c5
dec eax
lea eax, [ebp + 0xb0]
mov dword [esp + 0x28], 0x100
inc ecx
or ecx, 0xffffffff
dec eax
mov dword [esp + 0x20], eax
xor edx, edx
xor ecx, ecx
call dword [esi + 0x70]
dec eax
lea edx, [ebp + 0xb0]
dec eax
push esi
pop ecx
call fcn.0040a641
inc ecx
cmp dword [ebp + 4], edi
je 0x40a307
dec eax
mov dword [esp + 0x28], edi
inc ebp
sub ecx, ecx
dec ebp
mov eax, esp
mov dword [esp + 0x20], edi
sub edx, edx
xor ecx, ecx
call dword [esi + 0x88]
dec eax
or eax, eax
je 0x40a2f5
or edx, 0xffffffff
dec eax
push eax
pop ecx
call dword [esi + pe_nt_image_headers32]
dec esp
mov eax, dword [ebp + 0x328]
jmp 0x40a320
dec esp
mov ebp, dword [ebp + 0x318]
jmp 0x40a2f5
dec eax
mov ecx, dword [0x30]
dec eax
mov ecx, dword [ecx + 0x60]
inc ecx
call esp
jmp 0x40a2f5
dec esp
mov ebp, dword [ebp + 0x318]
push 3
pop eax
nop
nop
cmp dword [esi + 0x230], eax
jne 0x40a19e
or ecx, 0xffffffff
call dword [esi + 0x68]
dec esp
mov eax, dword [ebp + 0x328]
jmp 0x40a19e