Function at 0x4155b0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x238
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x60], 0x1eb10ad5
mov eax, dword [ebp - 0x60]
mov ecx, eax
sub ecx, 0x79ed3b6b
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], ecx
jg 0x4160f2
jmp 0x41562d
mov eax, dword [ebp - 0x64]
sub eax, 0x8a8e8681
mov dword [ebp - 0x6c], eax
jg 0x415659
jmp 0x415643
mov eax, dword [ebp - 0x64]
sub eax, 0x8681d4d0
mov dword [ebp - 0x70], eax
je 0x416390
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x739e2efb
mov dword [ebp - 0x74], eax
jg 0x4160d9
jmp 0x41566f
mov eax, dword [ebp - 0x64]
sub eax, 0x70cdf386
mov dword [ebp - 0x78], eax
jg 0x4160c0
jmp 0x415685
mov eax, dword [ebp - 0x64]
sub eax, 0x6d0bf666
mov dword [ebp - 0x7c], eax
jg 0x4160a7
jmp 0x41569b
mov eax, dword [ebp - 0x64]
sub eax, 0x69c652bf
mov dword [ebp - 0x80], eax
jg 0x41608e
jmp 0x4156b1
mov eax, dword [ebp - 0x64]
sub eax, 0x8c9be62a
mov dword [ebp - 0x84], eax
jg 0x4156e3
jmp 0x4156ca
mov eax, dword [ebp - 0x64]
sub eax, 0x8a8e8682
mov dword [ebp - 0x88], eax
je 0x416540
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x99baabfc
mov dword [ebp - 0x8c], eax
jg 0x415715
jmp 0x4156fc
mov eax, dword [ebp - 0x64]
sub eax, 0x8c9be62b
mov dword [ebp - 0x90], eax
je 0x4161c9
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x9c8c590c
mov dword [ebp - 0x94], eax
jg 0x415747
jmp 0x41572e
mov eax, dword [ebp - 0x64]
sub eax, 0x99baabfd
mov dword [ebp - 0x98], eax
je 0x41623c
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x66f106ec
mov dword [ebp - 0x9c], eax
jg 0x416075
jmp 0x415760
mov eax, dword [ebp - 0x64]
sub eax, 0x650c76a9
mov dword [ebp - 0xa0], eax
jg 0x41605c
jmp 0x415779
mov eax, dword [ebp - 0x64]
sub eax, 0x5fdb4be8
mov dword [ebp - 0xa4], eax
jg 0x416043
jmp 0x415792
mov eax, dword [ebp - 0x64]
sub eax, 0x5ae875f3
mov dword [ebp - 0xa8], eax
jg 0x41602a
jmp 0x4157ab
mov eax, dword [ebp - 0x64]
sub eax, 0x587bd05b
mov dword [ebp - 0xac], eax
jg 0x416011
jmp 0x4157c4
mov eax, dword [ebp - 0x64]
sub eax, 0x5745460b
mov dword [ebp - 0xb0], eax
jg 0x415ff8
jmp 0x4157dd
mov eax, dword [ebp - 0x64]
sub eax, 0x9d70a828
mov dword [ebp - 0xb4], eax
jg 0x41580f
jmp 0x4157f6
mov eax, dword [ebp - 0x64]
sub eax, 0x9c8c590d
mov dword [ebp - 0xb8], eax
je 0x4164f2
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xa6f211ef
mov dword [ebp - 0xbc], eax
jg 0x415841
jmp 0x415828
mov eax, dword [ebp - 0x64]
sub eax, 0x9d70a829
mov dword [ebp - 0xc0], eax
je 0x4162b2
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xaa15e371
mov dword [ebp - 0xc4], eax
jg 0x415873
jmp 0x41585a
mov eax, dword [ebp - 0x64]
sub eax, 0xa6f211f0
mov dword [ebp - 0xc8], eax
je 0x41617e
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x54a94703
mov dword [ebp - 0xcc], eax
jg 0x415fdf
jmp 0x41588c
mov eax, dword [ebp - 0x64]
sub eax, 0x54579041
mov dword [ebp - 0xd0], eax
jg 0x415fc6
jmp 0x4158a5
mov eax, dword [ebp - 0x64]
sub eax, 0x4af9e076
mov dword [ebp - 0xd4], eax
jg 0x415fad
jmp 0x4158be
mov eax, dword [ebp - 0x64]
sub eax, 0x4723edce
mov dword [ebp - 0xd8], eax
jg 0x415f94
jmp 0x4158d7
mov eax, dword [ebp - 0x64]
sub eax, 0x44503b4a
mov dword [ebp - 0xdc], eax
jg 0x415f7b
jmp 0x4158f0
mov eax, dword [ebp - 0x64]
sub eax, 0x3b8413c3
mov dword [ebp - 0xe0], eax
jg 0x415f62
jmp 0x415909
mov eax, dword [ebp - 0x64]
sub eax, 0x38643280
mov dword [ebp - 0xe4], eax
jg 0x415f49
jmp 0x415922
mov eax, dword [ebp - 0x64]
sub eax, 0x32aff9e7
mov dword [ebp - 0xe8], eax
jg 0x415f30
jmp 0x41593b
mov eax, dword [ebp - 0x64]
sub eax, 0x2f730c52
mov dword [ebp - 0xec], eax
jg 0x415f17
jmp 0x415954
mov eax, dword [ebp - 0x64]
sub eax, 0x2bcd8879
mov dword [ebp - 0xf0], eax
jg 0x415efe
jmp 0x41596d
mov eax, dword [ebp - 0x64]
sub eax, 0x1fca6eb7
mov dword [ebp - 0xf4], eax
jg 0x415ee5
jmp 0x415986
mov eax, dword [ebp - 0x64]
sub eax, 0x1eb10ad4
mov dword [ebp - 0xf8], eax
jg 0x415ecc
jmp 0x41599f
mov eax, dword [ebp - 0x64]
sub eax, 0x10d023b6
mov dword [ebp - 0xfc], eax
jg 0x415eb3
jmp 0x4159b8
mov eax, dword [ebp - 0x64]
sub eax, 0x101fdcbe
mov dword [ebp - 0x100], eax
jg 0x415e9a
jmp 0x4159d1
mov eax, dword [ebp - 0x64]
sub eax, 0xe19bcea
mov dword [ebp - 0x104], eax
jg 0x415e81
jmp 0x4159ea
mov eax, dword [ebp - 0x64]
sub eax, 0xd917d87
mov dword [ebp - 0x108], eax
jg 0x415e68
jmp 0x415a03
mov eax, dword [ebp - 0x64]
sub eax, 0x8daeacc
mov dword [ebp - 0x10c], eax
jg 0x415e4f
jmp 0x415a1c
mov eax, dword [ebp - 0x64]
sub eax, 0x78e2dc3
mov dword [ebp - 0x110], eax
jg 0x415e36
jmp 0x415a35
mov eax, dword [ebp - 0x64]
sub eax, 0x12281b5
mov dword [ebp - 0x114], eax
jg 0x415e1d
jmp 0x415a4e
mov eax, dword [ebp - 0x64]
sub eax, 0xfe594d53
mov dword [ebp - 0x118], eax
jg 0x415e04
jmp 0x415a67
mov eax, dword [ebp - 0x64]
sub eax, 0xfd936774
mov dword [ebp - 0x11c], eax
jg 0x415deb
jmp 0x415a80
mov eax, dword [ebp - 0x64]
sub eax, 0xfc10e2a1
mov dword [ebp - 0x120], eax
jg 0x415dd2
jmp 0x415a99
mov eax, dword [ebp - 0x64]
sub eax, 0xaa319510
mov dword [ebp - 0x124], eax
jg 0x415acb
jmp 0x415ab2
mov eax, dword [ebp - 0x64]
sub eax, 0xaa15e372
mov dword [ebp - 0x128], eax
je 0x41629e
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xb1826130
mov dword [ebp - 0x12c], eax
jg 0x415afd
jmp 0x415ae4
mov eax, dword [ebp - 0x64]
sub eax, 0xaa319511
mov dword [ebp - 0x130], eax
je 0x416559
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xb1b7baa8
mov dword [ebp - 0x134], eax
jg 0x415b2f
jmp 0x415b16
mov eax, dword [ebp - 0x64]
sub eax, 0xb1826131
mov dword [ebp - 0x138], eax
je 0x41664f
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xc0f9f260
mov dword [ebp - 0x13c], eax
jg 0x415b61
jmp 0x415b48
mov eax, dword [ebp - 0x64]
sub eax, 0xb1b7baa9
mov dword [ebp - 0x140], eax
je 0x41622f
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xc37e7eb3
mov dword [ebp - 0x144], eax
jg 0x415b93
jmp 0x415b7a
mov eax, dword [ebp - 0x64]
sub eax, 0xc0f9f261
mov dword [ebp - 0x148], eax
je 0x41654d
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xc88f1ee2
mov dword [ebp - 0x14c], eax
jg 0x415bc5
jmp 0x415bac
mov eax, dword [ebp - 0x64]
sub eax, 0xc37e7eb4
mov dword [ebp - 0x150], eax
je 0x416475
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xca9969b2
mov dword [ebp - 0x154], eax
jg 0x415bf7
jmp 0x415bde
mov eax, dword [ebp - 0x64]
sub eax, 0xc88f1ee3
mov dword [ebp - 0x158], eax
je 0x416335
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xd70bed7b
mov dword [ebp - 0x15c], eax
jg 0x415c29
jmp 0x415c10
mov eax, dword [ebp - 0x64]
sub eax, 0xca9969b3
mov dword [ebp - 0x160], eax
je 0x41665b
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xd9b996fc
mov dword [ebp - 0x164], eax
jg 0x415c5b
jmp 0x415c42
mov eax, dword [ebp - 0x64]
sub eax, 0xd70bed7c
mov dword [ebp - 0x168], eax
je 0x416285
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xdc7c5819
mov dword [ebp - 0x16c], eax
jg 0x415c8d
jmp 0x415c74
mov eax, dword [ebp - 0x64]
sub eax, 0xd9b996fd
mov dword [ebp - 0x170], eax
je 0x416505
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xe14e4410
mov dword [ebp - 0x174], eax
jg 0x415cbf
jmp 0x415ca6
mov eax, dword [ebp - 0x64]
sub eax, 0xdc7c581a
mov dword [ebp - 0x178], eax
je 0x4162cb
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xe701e7f4
mov dword [ebp - 0x17c], eax
jg 0x415cf1
jmp 0x415cd8
mov eax, dword [ebp - 0x64]
sub eax, 0xe14e4411
mov dword [ebp - 0x180], eax
je 0x4165b7
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xe7544308
mov dword [ebp - 0x184], eax
jg 0x415d23
jmp 0x415d0a
mov eax, dword [ebp - 0x64]
sub eax, 0xe701e7f5
mov dword [ebp - 0x188], eax
je 0x416191
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xe8154e99
mov dword [ebp - 0x18c], eax
jg 0x415d55
jmp 0x415d3c
mov eax, dword [ebp - 0x64]
sub eax, 0xe7544309
mov dword [ebp - 0x190], eax
je 0x416511
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xee541679
mov dword [ebp - 0x194], eax
jg 0x415d87
jmp 0x415d6e
mov eax, dword [ebp - 0x64]
sub eax, 0xe8154e9a
mov dword [ebp - 0x198], eax
je 0x416163
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xee54167a
mov dword [ebp - 0x19c], eax
je 0x416214
jmp 0x415da0
mov eax, dword [ebp - 0x64]
sub eax, 0xef80acef
mov dword [ebp - 0x1a0], eax
je 0x416269
jmp 0x415db9
mov eax, dword [ebp - 0x64]
sub eax, 0xef86d15d
mov dword [ebp - 0x1a4], eax
je 0x4163c1
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xfc10e2a2
mov dword [ebp - 0x1a8], eax
je 0x416250
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xfd936775
mov dword [ebp - 0x1ac], eax
je 0x416447
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xfe594d54
mov dword [ebp - 0x1b0], eax
je 0x416602
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x12281b6
mov dword [ebp - 0x1b4], eax
je 0x41619e
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x78e2dc4
mov dword [ebp - 0x1b8], eax
je 0x4165d8
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x8daeacd
mov dword [ebp - 0x1bc], eax
je 0x416692
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xd917d88
mov dword [ebp - 0x1c0], eax
je 0x416372
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0xe19bceb
mov dword [ebp - 0x1c4], eax
je 0x4161f1
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x101fdcbf
mov dword [ebp - 0x1c8], eax
je 0x4165ea
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x10d023b7
mov dword [ebp - 0x1cc], eax
je 0x4165aa
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x1eb10ad5
mov dword [ebp - 0x1d0], eax
je 0x416110
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x1fca6eb8
mov dword [ebp - 0x1d4], eax
je 0x41625c
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x2bcd887a
mov dword [ebp - 0x1d8], eax
je 0x4161e4
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x2f730c53
mov dword [ebp - 0x1dc], eax
je 0x416533
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x32aff9e8
mov dword [ebp - 0x1e0], eax
je 0x416597
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x38643281
mov dword [ebp - 0x1e4], eax
je 0x41660e
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x3b8413c4
mov dword [ebp - 0x1e8], eax
je 0x4163fa
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x44503b4b
mov dword [ebp - 0x1ec], eax
je 0x416566
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x4723edcf
mov dword [ebp - 0x1f0], eax
je 0x41612e
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x4af9e077
mov dword [ebp - 0x1f4], eax
je 0x4165ca
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x54579042
mov dword [ebp - 0x1f8], eax
je 0x41663c
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x54a94704
mov dword [ebp - 0x1fc], eax
je 0x41669e
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x5745460c
mov dword [ebp - 0x200], eax
je 0x4162eb
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x587bd05c
mov dword [ebp - 0x204], eax
je 0x4166bc
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x5ae875f4
mov dword [ebp - 0x208], eax
je 0x416306
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x5fdb4be9
mov dword [ebp - 0x20c], eax
je 0x416621
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x650c76aa
mov dword [ebp - 0x210], eax
je 0x41613b
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x66f106ed
mov dword [ebp - 0x214], eax
je 0x416291
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x69c652c0
mov dword [ebp - 0x218], eax
je 0x4164df
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x6d0bf667
mov dword [ebp - 0x21c], eax
je 0x416407
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x70cdf387
mov dword [ebp - 0x220], eax
je 0x416462
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x739e2efc
mov dword [ebp - 0x224], eax
je 0x41658b
jmp 0x41610b
mov eax, dword [ebp - 0x64]
sub eax, 0x79ed3b6c
mov dword [ebp - 0x228], eax
je 0x4162be
jmp 0x41610b
jmp 0x4166c3
mov eax, 0x66f106ed
mov ecx, 0x4723edcf
mov edx, dword [ebp - 0x1c]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x650c76aa
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0xe8154e9a
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx]
cmp ecx, 0x5a4d
setne dl
and dl, 1
mov byte [ebp - 0x15], dl
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0xe701e7f5
mov ecx, 0xa6f211f0
mov dl, byte [ebp - 0x15]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x60], 0x10d023b7
jmp 0x4166c3
mov eax, 0x12281b6
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x8c9be62b
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x38]
add ecx, dword [edx + 0x3c]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x3c]
cmp dword [ecx], 0x4550
setne bl
and bl, 1
mov byte [ebp - 0x14], bl
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x2bcd887a
mov ecx, 0xb1b7baa9
mov dl, byte [ebp - 0x14]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0xe19bceb
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0xee54167a
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x10b
setne dl
and dl, 1
mov byte [ebp - 0x13], dl
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x1fca6eb8
mov ecx, 0xb1b7baa9
mov dl, byte [ebp - 0x13]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x99baabfd
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0xfc10e2a2
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov dword [ebp - 0x60], 0x10d023b7
jmp 0x4166c3
mov eax, 0xef80acef
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0xd70bed7c
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x3c]
add ecx, dword [edx + 0x80]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov dword [ebp - 0x60], 0x66f106ed
jmp 0x4166c3
mov eax, 0xaa15e372
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x9d70a829
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov dword [ebp - 0x60], 0x79ed3b6c
jmp 0x4166c3
mov eax, 0xdc7c581a
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x5745460c
mov ecx, dword [ebp - 0x30]
cmp dword [ecx + 0xc], 0
setne dl
and dl, 1
mov byte [ebp - 0x12], dl
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x32aff9e8
mov ecx, 0x5ae875f4
mov dl, byte [ebp - 0x12]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
add eax, dword [ecx + 0xc]
mov dword [esp], eax
call fcn.00405ee0
mov ecx, 0xaa319511
mov edx, 0xc88f1ee3
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x28]
cmove ecx, edx
mov dword [ebp - 0x60], ecx
jmp 0x4166c3
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
add eax, dword [ecx + 0xc]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
sub esp, 4
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
add eax, dword [ecx]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x60], 0xd917d88
jmp 0x4166c3
mov eax, 0x2f730c53
mov ecx, 0x8681d4d0
mov edx, dword [ebp - 0x44]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0xef86d15d
mov ecx, 0xe7544309
mov edx, 0xffffffff
mov esi, dword [ebp - 0x44]
mov esi, dword [esi]
xor edx, 0x80000000
mov edi, esi
xor edi, edx
and edi, esi
cmp edi, 0
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x44]
add eax, dword [ecx]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 2
mov dword [esp], eax
call fcn.00405ee0
mov ecx, 0xd9b996fd
mov edx, 0x3b8413c4
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x24]
cmove ecx, edx
mov dword [ebp - 0x60], ecx
jmp 0x4166c3
mov eax, 0x6d0bf667
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, dword [ebp - 0x40]
mov ecx, esp
lea edx, [ebp - 0x5c]
mov dword [ecx + 0xc], edx
mov dword [ecx], eax
mov dword [ecx + 8], 4
mov dword [ecx + 4], 4
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
sub esp, 0x10
mov ecx, 0xfd936775
cmp eax, 0
setne bl
and bl, 1
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x60], ecx
jmp 0x4166c3
mov eax, 0x70cdf387
mov ecx, 0xc37e7eb4
mov dl, byte [ebp - 0x11]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x60], 0x10d023b7
jmp 0x4166c3
mov eax, 4
lea ecx, [ebp - 0x2c]
mov edx, dword [ebp - 0x40]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 4
mov dword [ebp - 0x22c], eax
call fcn.004069d0
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x40]
mov esi, esp
lea edi, [ebp - 0x5c]
mov dword [esi + 0xc], edi
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 4], 4
mov ecx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x230], eax
call ecx
sub esp, 0x10
mov ecx, 0x69c652c0
mov edx, 0x9c8c590d
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x60], ecx
jmp 0x4166c3
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x60], 0x10d023b7
jmp 0x4166c3
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x60], 0x10d023b7
jmp 0x4166c3
mov dword [ebp - 0x60], 0xe7544309
jmp 0x4166c3
mov eax, dword [ebp - 0x40]
add eax, 4
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x44]
add eax, 4
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x60], 0xd917d88
jmp 0x4166c3
mov eax, 0x8a8e8682
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0xc0f9f261
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov dword [ebp - 0x60], 0xaa319511
jmp 0x4166c3
mov eax, 0x44503b4b
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x739e2efc
mov ecx, dword [ebp - 0x30]
add ecx, 0x6e8ae2fa
add ecx, 0x14
sub ecx, 0x6e8ae2fa
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov dword [ebp - 0x60], 0x79ed3b6c
jmp 0x4166c3
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x60], 0x10d023b7
jmp 0x4166c3
mov eax, 0xe14e4411
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, 0x4af9e077
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x60], eax
jmp 0x4166c3
mov eax, dword [ebp - 0x10]
add esp, 0x238
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x60], 0x650c76aa
jmp 0x4166c3
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x3c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x60], 0x12281b6
jmp 0x4166c3
mov dword [ebp - 0x60], 0xe19bceb
jmp 0x4166c3
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x60], 0x99baabfd
jmp 0x4166c3
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
add eax, dword [ecx + 0x80]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x60], 0xef80acef
jmp 0x4166c3
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x60], 0xaa15e372
jmp 0x4166c3
mov dword [ebp - 0x60], 0xdc7c581a
jmp 0x4166c3
mov eax, dword [ebp - 0x40]
mov ecx, esp
lea edx, [ebp - 0x5c]
mov dword [ecx + 0xc], edx
mov dword [ecx], eax
mov dword [ecx + 8], 4
mov dword [ecx + 4], 4
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
sub esp, 0x10
mov dword [ebp - 0x60], 0x6d0bf667
mov dword [ebp - 0x234], eax
jmp 0x4166c3
mov dword [ebp - 0x60], 0x8a8e8682
jmp 0x4166c3
mov eax, 0
mov ecx, dword [ebp - 0x30]
sub eax, 0x14
sub ecx, eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x60], 0x44503b4b
jmp 0x4166c3
mov dword [ebp - 0x60], 0xe14e4411
jmp 0x415611