Function at 0x414eb0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1e8
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x58], 0x5f606e58
mov eax, dword [ebp - 0x58]
mov ecx, eax
sub ecx, 0x7e34c5bc
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], ecx
jg 0x41582a
jmp 0x414f2d
mov eax, dword [ebp - 0x5c]
sub eax, 0x83c95a70
mov dword [ebp - 0x64], eax
jg 0x414f59
jmp 0x414f43
mov eax, dword [ebp - 0x5c]
sub eax, 0x804001f3
mov dword [ebp - 0x68], eax
je 0x415cd5
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x8646f45d
mov dword [ebp - 0x6c], eax
jg 0x414f85
jmp 0x414f6f
mov eax, dword [ebp - 0x5c]
sub eax, 0x83c95a71
mov dword [ebp - 0x70], eax
je 0x4158e3
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x8d88b1f9
mov dword [ebp - 0x74], eax
jg 0x414fb1
jmp 0x414f9b
mov eax, dword [ebp - 0x5c]
sub eax, 0x8646f45e
mov dword [ebp - 0x78], eax
je 0x415d68
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x9869e8a6
mov dword [ebp - 0x7c], eax
jg 0x414fdd
jmp 0x414fc7
mov eax, dword [ebp - 0x5c]
sub eax, 0x8d88b1fa
mov dword [ebp - 0x80], eax
je 0x415985
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x6bbfd717
mov dword [ebp - 0x84], eax
jg 0x415811
jmp 0x414ff6
mov eax, dword [ebp - 0x5c]
sub eax, 0x696c709b
mov dword [ebp - 0x88], eax
jg 0x4157f8
jmp 0x41500f
mov eax, dword [ebp - 0x5c]
sub eax, 0x9a0bc5a5
mov dword [ebp - 0x8c], eax
jg 0x415041
jmp 0x415028
mov eax, dword [ebp - 0x5c]
sub eax, 0x9869e8a7
mov dword [ebp - 0x90], eax
je 0x415ca2
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xa4247ad8
mov dword [ebp - 0x94], eax
jg 0x415073
jmp 0x41505a
mov eax, dword [ebp - 0x5c]
sub eax, 0x9a0bc5a6
mov dword [ebp - 0x98], eax
je 0x415c75
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xa4e25a1d
mov dword [ebp - 0x9c], eax
jg 0x4150a5
jmp 0x41508c
mov eax, dword [ebp - 0x5c]
sub eax, 0xa4247ad9
mov dword [ebp - 0xa0], eax
je 0x415b16
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xab9ee8b0
mov dword [ebp - 0xa4], eax
jg 0x4150d7
jmp 0x4150be
mov eax, dword [ebp - 0x5c]
sub eax, 0xa4e25a1e
mov dword [ebp - 0xa8], eax
je 0x415979
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xb06cc306
mov dword [ebp - 0xac], eax
jg 0x415109
jmp 0x4150f0
mov eax, dword [ebp - 0x5c]
sub eax, 0xab9ee8b1
mov dword [ebp - 0xb0], eax
je 0x415a1b
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xc9f36c01
mov dword [ebp - 0xb4], eax
jg 0x41513b
jmp 0x415122
mov eax, dword [ebp - 0x5c]
sub eax, 0xb06cc307
mov dword [ebp - 0xb8], eax
je 0x415cb0
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xd007df97
mov dword [ebp - 0xbc], eax
jg 0x41516d
jmp 0x415154
mov eax, dword [ebp - 0x5c]
sub eax, 0xc9f36c02
mov dword [ebp - 0xc0], eax
je 0x415cf4
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xd4da4101
mov dword [ebp - 0xc4], eax
jg 0x41519f
jmp 0x415186
mov eax, dword [ebp - 0x5c]
sub eax, 0xd007df98
mov dword [ebp - 0xc8], eax
je 0x415d31
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xd9cd9b73
mov dword [ebp - 0xcc], eax
jg 0x4151d1
jmp 0x4151b8
mov eax, dword [ebp - 0x5c]
sub eax, 0xd4da4102
mov dword [ebp - 0xd0], eax
je 0x4158b6
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xd9e8f92b
mov dword [ebp - 0xd4], eax
jg 0x415203
jmp 0x4151ea
mov eax, dword [ebp - 0x5c]
sub eax, 0xd9cd9b74
mov dword [ebp - 0xd8], eax
je 0x415ab4
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xdd69d73c
mov dword [ebp - 0xdc], eax
jg 0x415235
jmp 0x41521c
mov eax, dword [ebp - 0x5c]
sub eax, 0xd9e8f92c
mov dword [ebp - 0xe0], eax
je 0x4159c1
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xe1126663
mov dword [ebp - 0xe4], eax
jg 0x415267
jmp 0x41524e
mov eax, dword [ebp - 0x5c]
sub eax, 0xdd69d73d
mov dword [ebp - 0xe8], eax
je 0x4159a0
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xe2a380d4
mov dword [ebp - 0xec], eax
jg 0x415299
jmp 0x415280
mov eax, dword [ebp - 0x5c]
sub eax, 0xe1126664
mov dword [ebp - 0xf0], eax
je 0x4158c3
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xe3ca1504
mov dword [ebp - 0xf4], eax
jg 0x4152cb
jmp 0x4152b2
mov eax, dword [ebp - 0x5c]
sub eax, 0xe2a380d5
mov dword [ebp - 0xf8], eax
je 0x415c14
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xeabe227e
mov dword [ebp - 0xfc], eax
jg 0x4152fd
jmp 0x4152e4
mov eax, dword [ebp - 0x5c]
sub eax, 0xe3ca1505
mov dword [ebp - 0x100], eax
je 0x415c96
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xf0113da0
mov dword [ebp - 0x104], eax
jg 0x41532f
jmp 0x415316
mov eax, dword [ebp - 0x5c]
sub eax, 0xeabe227f
mov dword [ebp - 0x108], eax
je 0x41589b
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xf09b5e1d
mov dword [ebp - 0x10c], eax
jg 0x415361
jmp 0x415348
mov eax, dword [ebp - 0x5c]
sub eax, 0xf0113da1
mov dword [ebp - 0x110], eax
je 0x415bee
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xf3672339
mov dword [ebp - 0x114], eax
jg 0x415393
jmp 0x41537a
mov eax, dword [ebp - 0x5c]
sub eax, 0xf09b5e1e
mov dword [ebp - 0x118], eax
je 0x415965
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xf675ed42
mov dword [ebp - 0x11c], eax
jg 0x4153c5
jmp 0x4153ac
mov eax, dword [ebp - 0x5c]
sub eax, 0xf367233a
mov dword [ebp - 0x120], eax
je 0x4159ad
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xf9e147b8
mov dword [ebp - 0x124], eax
jg 0x4153f7
jmp 0x4153de
mov eax, dword [ebp - 0x5c]
sub eax, 0xf675ed43
mov dword [ebp - 0x128], eax
je 0x415c82
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xfaa06a67
mov dword [ebp - 0x12c], eax
jg 0x415429
jmp 0x415410
mov eax, dword [ebp - 0x5c]
sub eax, 0xf9e147b9
mov dword [ebp - 0x130], eax
je 0x415b84
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x1971b7c
mov dword [ebp - 0x134], eax
jg 0x41545b
jmp 0x415442
mov eax, dword [ebp - 0x5c]
sub eax, 0xfaa06a68
mov dword [ebp - 0x138], eax
je 0x41593d
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x395427e
mov dword [ebp - 0x13c], eax
jg 0x41548d
jmp 0x415474
mov eax, dword [ebp - 0x5c]
sub eax, 0x1971b7d
mov dword [ebp - 0x140], eax
je 0x415aa7
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x50e33fd
mov dword [ebp - 0x144], eax
jg 0x4154bf
jmp 0x4154a6
mov eax, dword [ebp - 0x5c]
sub eax, 0x395427f
mov dword [ebp - 0x148], eax
je 0x415a58
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0xf31bf5a
mov dword [ebp - 0x14c], eax
jg 0x4154f1
jmp 0x4154d8
mov eax, dword [ebp - 0x5c]
sub eax, 0x50e33fe
mov dword [ebp - 0x150], eax
je 0x415c01
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x109067f4
mov dword [ebp - 0x154], eax
jg 0x415523
jmp 0x41550a
mov eax, dword [ebp - 0x5c]
sub eax, 0xf31bf5b
mov dword [ebp - 0x158], eax
je 0x4158d7
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x1667db7a
mov dword [ebp - 0x15c], eax
jg 0x415555
jmp 0x41553c
mov eax, dword [ebp - 0x5c]
sub eax, 0x109067f5
mov dword [ebp - 0x160], eax
je 0x415aee
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x179de4d1
mov dword [ebp - 0x164], eax
jg 0x415587
jmp 0x41556e
mov eax, dword [ebp - 0x5c]
sub eax, 0x1667db7b
mov dword [ebp - 0x168], eax
je 0x415873
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x1be6217f
mov dword [ebp - 0x16c], eax
jg 0x4155b9
jmp 0x4155a0
mov eax, dword [ebp - 0x5c]
sub eax, 0x179de4d2
mov dword [ebp - 0x170], eax
je 0x415d07
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x1f84ed22
mov dword [ebp - 0x174], eax
jg 0x4155eb
jmp 0x4155d2
mov eax, dword [ebp - 0x5c]
sub eax, 0x1be62180
mov dword [ebp - 0x178], eax
je 0x415c4e
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x236c97da
mov dword [ebp - 0x17c], eax
jg 0x41561d
jmp 0x415604
mov eax, dword [ebp - 0x5c]
sub eax, 0x1f84ed23
mov dword [ebp - 0x180], eax
je 0x4159cd
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x25d0df0c
mov dword [ebp - 0x184], eax
jg 0x41564f
jmp 0x415636
mov eax, dword [ebp - 0x5c]
sub eax, 0x236c97db
mov dword [ebp - 0x188], eax
je 0x41590d
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x274bf197
mov dword [ebp - 0x18c], eax
jg 0x415681
jmp 0x415668
mov eax, dword [ebp - 0x5c]
sub eax, 0x25d0df0d
mov dword [ebp - 0x190], eax
je 0x415ce1
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x3055de2c
mov dword [ebp - 0x194], eax
jg 0x4156b3
jmp 0x41569a
mov eax, dword [ebp - 0x5c]
sub eax, 0x274bf198
mov dword [ebp - 0x198], eax
je 0x415cc2
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x3fdc0307
mov dword [ebp - 0x19c], eax
jg 0x4156e5
jmp 0x4156cc
mov eax, dword [ebp - 0x5c]
sub eax, 0x3055de2d
mov dword [ebp - 0x1a0], eax
je 0x415b09
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x4201d538
mov dword [ebp - 0x1a4], eax
jg 0x415717
jmp 0x4156fe
mov eax, dword [ebp - 0x5c]
sub eax, 0x3fdc0308
mov dword [ebp - 0x1a8], eax
je 0x415c42
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x4b3c2ac7
mov dword [ebp - 0x1ac], eax
jg 0x415749
jmp 0x415730
mov eax, dword [ebp - 0x5c]
sub eax, 0x4201d539
mov dword [ebp - 0x1b0], eax
je 0x415a76
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x4d9d84c2
mov dword [ebp - 0x1b4], eax
jg 0x41577b
jmp 0x415762
mov eax, dword [ebp - 0x5c]
sub eax, 0x4b3c2ac8
mov dword [ebp - 0x1b8], eax
je 0x415c20
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x5e67a9b5
mov dword [ebp - 0x1bc], eax
jg 0x4157ad
jmp 0x415794
mov eax, dword [ebp - 0x5c]
sub eax, 0x4d9d84c3
mov dword [ebp - 0x1c0], eax
je 0x415866
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x5e67a9b6
mov dword [ebp - 0x1c4], eax
je 0x415b56
jmp 0x4157c6
mov eax, dword [ebp - 0x5c]
sub eax, 0x5f586c7c
mov dword [ebp - 0x1c8], eax
je 0x415958
jmp 0x4157df
mov eax, dword [ebp - 0x5c]
sub eax, 0x5f606e58
mov dword [ebp - 0x1cc], eax
je 0x415848
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x696c709c
mov dword [ebp - 0x1d0], eax
je 0x41591a
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x6bbfd718
mov dword [ebp - 0x1d4], eax
je 0x415b71
jmp 0x415843
mov eax, dword [ebp - 0x5c]
sub eax, 0x7e34c5bd
mov dword [ebp - 0x1d8], eax
je 0x4159ec
jmp 0x415843
jmp 0x415d76
mov eax, 0xdd69d73d
mov ecx, 0x4d9d84c3
mov edx, dword [ebp - 0x14]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0x1667db7b
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xeabe227f
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, word [ecx]
cmp ecx, 0x5a4d
setne dl
and dl, 1
mov byte [ebp - 0x10], dl
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0x83c95a71
mov ecx, 0xd4da4102
mov dl, byte [ebp - 0x10]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xe1126664
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xf31bf5b
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov dword [ebp - 0x58], 0x9869e8a7
jmp 0x415d76
mov eax, 0x236c97db
mov ecx, 0x5f586c7c
mov edx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x30]
add edx, dword [esi + 0x3c]
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x34]
cmp dword [edx], 0x4550
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0x696c709c
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xfaa06a68
mov ecx, dword [ebp - 0x34]
movzx ecx, word [ecx + 0x18]
cmp ecx, 0x10b
setne dl
and dl, 1
mov byte [ebp - 0xf], dl
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0x8d88b1fa
mov ecx, 0x5f586c7c
mov dl, byte [ebp - 0xf]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xf09b5e1e
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xa4e25a1e
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov dword [ebp - 0x58], 0x9869e8a7
jmp 0x415d76
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
add eax, dword [ecx + 0x80]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x58], 0xdd69d73d
jmp 0x415d76
mov eax, 0xf367233a
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xd9e8f92c
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov dword [ebp - 0x58], 0x1f84ed23
jmp 0x415d76
mov eax, 0x9a0bc5a6
mov ecx, 0x7e34c5bd
mov edx, dword [ebp - 0x28]
cmp dword [edx + 0xc], 0
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0xc]
mov dword [esp], eax
call fcn.00405f60
mov ecx, 0x1be62180
mov edx, 0xab9ee8b1
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x20]
cmove ecx, edx
mov dword [ebp - 0x58], ecx
jmp 0x415d76
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0xc]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
sub esp, 4
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x58], 0x395427f
jmp 0x415d76
mov eax, 0x3fdc0308
mov ecx, 0x4201d539
mov edx, dword [ebp - 0x3c]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0x1971b7d
mov ecx, 0x4b3c2ac8
mov edx, 0xffffffff
mov esi, dword [ebp - 0x3c]
mov esi, dword [esi]
xor edx, 0x80000000
mov edi, esi
xor edi, edx
and edi, esi
cmp edi, 0
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xd9cd9b74
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3c]
add eax, dword [ecx]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
add eax, 2
mov dword [esp], eax
call fcn.00405f60
mov ecx, 0x109067f5
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x1c]
sete dl
and dl, 1
mov byte [ebp - 0xe], dl
mov dword [ebp - 0x58], ecx
jmp 0x415d76
mov eax, 0xe2a380d5
mov ecx, 0x3055de2d
mov dl, byte [ebp - 0xe]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xa4247ad9
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, dword [ebp - 0x38]
mov ecx, esp
lea edx, [ebp - 0x54]
mov dword [ecx + 0xc], edx
mov dword [ecx], eax
mov dword [ecx + 8], 4
mov dword [ecx + 4], 4
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
sub esp, 0x10
mov ecx, 0x5e67a9b6
cmp eax, 0
setne bl
and bl, 1
mov byte [ebp - 0xd], bl
mov dword [ebp - 0x58], ecx
jmp 0x415d76
mov eax, 0x6bbfd718
mov ecx, 0xf9e147b9
mov dl, byte [ebp - 0xd]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x58], 0x9869e8a7
jmp 0x415d76
mov eax, 4
lea ecx, [ebp - 0x24]
mov edx, dword [ebp - 0x38]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 4
mov dword [ebp - 0x1dc], eax
call fcn.00406dc0
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x38]
mov esi, esp
lea edi, [ebp - 0x54]
mov dword [esi + 0xc], edi
mov dword [esi + 8], ecx
mov dword [esi], edx
mov dword [esi + 4], 4
mov ecx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x1e0], eax
call ecx
sub esp, 0x10
mov ecx, 0xf0113da1
mov edx, 0x50e33fe
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x58], ecx
jmp 0x415d76
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x58], 0x9869e8a7
jmp 0x415d76
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x58], 0x9869e8a7
jmp 0x415d76
mov dword [ebp - 0x58], 0x4b3c2ac8
jmp 0x415d76
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
add eax, 4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x58], 0x395427f
jmp 0x415d76
mov dword [ebp - 0x58], 0x1be62180
jmp 0x415d76
mov eax, 0
mov ecx, dword [ebp - 0x28]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 0x14
add edx, ecx
sub eax, edx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x58], 0x1f84ed23
jmp 0x415d76
mov eax, 0xf675ed43
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov eax, 0xe3ca1505
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x58], eax
jmp 0x415d76
mov dword [ebp - 0x58], 0x9869e8a7
jmp 0x415d76
mov eax, dword [ebp - 0x18]
add esp, 0x1e8
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x58], 0x1667db7b
jmp 0x415d76
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x58], 0xe1126664
jmp 0x415d76
mov dword [ebp - 0x58], 0x696c709c
jmp 0x415d76
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x58], 0xf09b5e1e
jmp 0x415d76
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x58], 0xf367233a
jmp 0x415d76
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3c]
add eax, dword [ecx]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
add eax, 2
mov dword [esp], eax
call fcn.00405f60
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x58], 0xd9cd9b74
jmp 0x415d76
mov eax, dword [ebp - 0x38]
mov ecx, esp
lea edx, [ebp - 0x54]
mov dword [ecx + 0xc], edx
mov dword [ecx], eax
mov dword [ecx + 8], 4
mov dword [ecx + 4], 4
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
sub esp, 0x10
mov dword [ebp - 0x58], 0xa4247ad9
mov dword [ebp - 0x1e4], eax
jmp 0x415d76
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x58], 0xf675ed43
jmp 0x414f11