Function at 0x429690
Capabilities:
Parse pe header

Disassembly:
sub esp, 0xc
mov eax, dword [esp + 0x10]
push ebx
push ebp
xor ebp, ebp
push ebp
push 0x80
push 3
push ebp
push 1
push closesocket
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
mov dword [esp + 0x10], ebx
cmp ebx, 0xffffffff
jne 0x4296c5
pop ebp
xor eax, eax
pop ebx
add esp, 0xc
ret
push edi
push 0
push 0
push 0
push 2
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov edi, eax
mov dword [esp + 0x10], edi
test edi, edi
je 0x429956
push esi
push 0
push 0
push 0
push 0
push 4
push edi
call dword [sym.imp.KERNEL32.dll_MapViewOfFileEx]
mov esi, eax
mov dword [esp + 0x10], esi
test esi, esi
je 0x42994e
mov ecx, 0x5a4d
cmp word [esi], cx
jne 0x42993f
mov edi, dword [esi + 0x3c]
add edi, esi
cmp dword [edi], 0x4550
jne 0x42993f
mov ebx, dword [edi + 0x28]
push ebx
push edi
call fcn.00429640
add esp, 8
test eax, eax
je 0x42993f
cmp byte [eax + esi + 4], 0xe8
lea ecx, [eax + esi]
jne 0x429765
cmp byte [ecx + 0xb], 0xc3
jne 0x429765
mov edx, dword [ecx + 5]
lea ebx, [ebx + edx + 9]
push ebx
push edi
call fcn.00429640
add esp, 8
test eax, eax
je 0x42993f
lea ecx, [eax + esi]
xor eax, eax
cmp dword [eax + ecx], 0x800b9
jne 0x429786
cmp dword [eax + ecx + 4], 0x2e9c100
jne 0x429786
mov edx, 0xa5f3
cmp word [eax + ecx + 8], dx
je 0x4297bc
cmp byte [eax + ecx], 0xe8
jne 0x4297af
cmp byte [eax + ecx + 5], 0x6a
jne 0x4297af
cmp dword [eax + ecx - 0x10], 0x28b966
jne 0x4297af
cmp byte [eax + ecx - 0xc], 0xf
jne 0x4297af
cmp byte [eax + ecx - 0xa], 0xd9
je 0x429843
inc eax
cmp eax, 0x400
jl 0x429767
jmp 0x42993f
mov eax, dword [eax + ecx - 4]
sub eax, dword [edi + 0x34]
push eax
push edi
call fcn.00429640
mov ecx, dword [edi + 0x34]
mov ebp, dword [eax + esi + 8]
mov edx, dword [eax + esi + 0x10]
mov ebx, dword [esp + 0x34]
add eax, esi
sub ebp, ecx
sub edx, ecx
sub edx, ebp
push ebp
push edi
mov dword [ebx], edx
call fcn.00429640
add esp, 0x10
add eax, esi
cmp dword [ebx], 0x200
jbe 0x4297fd
mov dword [ebx], 0x200
mov ecx, dword [ebx]
mov esi, dword [esp + 0x28]
push ecx
push eax
push esi
call fcn.004b6e40
xor eax, eax
add esp, 0xc
cmp dword [ebx], eax
jbe 0x42993b
mov ecx, dword [esp + 0x24]
lea esp, [esp]
cmp dword [eax + esi], 0x81684d8b
jne 0x429839
cmp byte [eax + esi + 4], 0xf9
jne 0x429839
mov edx, ecx
sub edx, dword [edi + 0x34]
add dword [eax + esi + 5], edx
inc eax
cmp eax, dword [ebx]
jb 0x429820
jmp 0x42993b
mov ecx, dword [eax + ecx + 1]
add ecx, eax
lea edx, [ecx + ebx + 5]
push edx
push edi
call fcn.00429640
add esp, 8
test eax, eax
je 0x42993f
lea ecx, [eax + esi]
xor eax, eax
mov bl, 0x74
cmp dword [ecx + eax + 5], 0x7402ff83
jne 0x429889
cmp byte [eax + ecx + 8], bl
jne 0x429889
mov dl, byte [eax + ecx + 9]
cmp dl, 0x3f
je 0x429896
cmp dl, 0x47
je 0x429896
cmp dl, 0x4a
je 0x429896
inc eax
cmp eax, 0x400
jl 0x429866
jmp 0x42993f
xor edx, edx
cmp byte [eax + ecx + 9], 0x3f
setne dl
lea edx, [edx*8 + 0x1d]
add edx, eax
mov eax, dword [edx + ecx]
sub eax, dword [edi + 0x34]
push eax
push edi
call fcn.00429640
mov ecx, dword [edi + 0x34]
mov ebp, dword [eax + esi + 8]
mov edx, dword [eax + esi + 0x10]
mov ebx, dword [esp + 0x34]
add eax, esi
sub ebp, ecx
sub edx, ecx
sub edx, ebp
push ebp
push edi
mov dword [ebx], edx
call fcn.00429640
add esp, 0x10
add eax, esi
cmp dword [ebx], 0x200
jbe 0x4298e9
mov dword [ebx], 0x200
mov ecx, dword [ebx]
mov esi, dword [esp + 0x28]
push ecx
push eax
push esi
call fcn.004b6e40
xor eax, eax
add esp, 0xc
cmp dword [ebx], eax
jbe 0x42993b
mov ecx, dword [esp + 0x24]
cmp dword [eax + esi], 0x81684d8b
jne 0x42991d
cmp byte [eax + esi + 4], 0xf9
jne 0x42991d
mov edx, ecx
sub edx, dword [edi + 0x34]
add dword [eax + esi + 5], edx
cmp dword [eax + esi], 0x45c71375
jne 0x429936
cmp byte [eax + esi + 4], 0x68
jne 0x429936
mov edx, ecx
sub edx, dword [edi + 0x34]
add dword [eax + esi + 5], edx
inc eax
cmp eax, dword [ebx]
jb 0x429904
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop esi
pop edi
test ebx, ebx
je 0x429962
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebp
pop ebp
pop ebx
add esp, 0xc
ret