Function at 0x477ad0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa4
mov eax, dword [0x54d104]
xor eax, esp
mov dword [esp + 0xa0], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, ecx
mov dword [esp + 0x2c], eax
push edi
push 2
mov dword [esp + 0x30], edx
mov eax, dword [esi + 0x44]
mov edi, dword [esi + 0x40]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x44]
push eax
push 0
push 0
mov dword [esp + 0x2c], esi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], edi
call fcn.00482d80
test al, al
je 0x477c82
mov eax, 0x5a4d
cmp word [esp + 0x40], ax
jne 0x477c82
push 4
lea eax, [esp + 0x3c]
mov ecx, esi
push eax
push 0
push 0x3c
call fcn.00482d80
test al, al
je 0x477c82
push 4
lea eax, [esp + 0x48]
mov ecx, esi
push eax
push 0
push dword [esp + 0x44]
call fcn.00482d80
test al, al
je 0x477c82
cmp dword [esp + 0x44], 0x4550
jne 0x477c82
lea eax, [esp + 0x3c]
mov dword [esp + 0x3c], 0x14
push eax
lea eax, [esp + 0x4c]
mov ecx, esi
push eax
call fcn.00482a50
test al, al
je 0x477c82
cmp dword [esp + 0x3c], 0x14
je 0x477bbb
mov dword [esi + 0x60], 0x1e
jmp 0x477c82
mov ecx, dword [esp + 0x38]
mov edx, 0x8664
mov ax, word [esp + 0x48]
add ecx, 0x98
cmp ax, dx
je 0x477bf2
mov edx, 0x200
cmp ax, dx
je 0x477bf2
mov edx, 0x284
cmp ax, dx
je 0x477bf2
mov edx, 0xaa64
cmp ax, dx
jne 0x477bf5
add ecx, 0x10
push 4
lea eax, [esp + 0x40]
push eax
push 0
push ecx
mov ecx, esi
call fcn.00482d80
test al, al
je 0x477c82
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x477c82
mov edi, eax
xor eax, eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x10], eax
cmp edi, 7
jbe 0x477c7e
mov ebx, dword [esp + 0x10]
mov eax, 7
nop dword [eax]
dec eax
lea edx, [esp + 0x37]
mov dword [esp + 0x24], eax
mov ecx, edi
sub ecx, 1
mov eax, ebx
push 1
sbb eax, 0
mov dword [esp + 0x24], ecx
push edx
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x20], eax
call fcn.00482d80
test al, al
je 0x477c6a
cmp byte [esp + 0x37], 0
jne 0x477c6a
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x477c30
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jl 0x477d36
jg 0x477c99
cmp edi, 0x48
jb 0x477d36
mov esi, edi
lea eax, [esp + 0x5c]
push 8
sub esi, 8
mov edi, ecx
mov ecx, dword [esp + 0x20]
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x477ce9
lea eax, [esp + 0x5c]
cmp dword [eax], 0x53575341
jne 0x477ce9
cmp dword [eax + 4], 0x42336769
jne 0x477ce9
mov dword [esp + 0x10], 0x40
test ebx, ebx
je 0x47801e
mov dword [ebx], 7
jmp 0x47801e
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
jne 0x477cff
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x10], edx
je 0x477d3a
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x64]
push 8
sub esi, 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x477d36
lea eax, [esp + 0x64]
cmp dword [eax], 0x53575341
jne 0x477d36
cmp dword [eax + 4], 0x42336769
je 0x477cce
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test eax, eax
jl 0x477ea7
jg 0x477d54
cmp ecx, 0xc0
jb 0x477de3
mov esi, ecx
mov edi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x6c]
push 8
sub esi, 0x80
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x477d90
lea eax, [esp + 0x6c]
cmp dword [eax], 0x53575341
jne 0x477d90
cmp dword [eax + 4], 0x42336769
je 0x477cce
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x14]
jne 0x477da4
mov esi, dword [esp + 0x18]
cmp dword [esp + 0x10], esi
je 0x477df6
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x74]
push 8
sub esi, 0x80
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x477df6
lea eax, [esp + 0x74]
cmp dword [eax], 0x53575341
jne 0x477df6
cmp dword [eax + 4], 0x42336769
jne 0x477df6
jmp 0x477cce
test eax, eax
jl 0x477ea7
jg 0x477df6
cmp ecx, 0x48
jb 0x477ea7
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x7c]
mov edi, dword [esp + 0x18]
sub esi, 8
mov ecx, dword [esp + 0x1c]
push 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x477e4a
lea eax, [esp + 0x7c]
cmp dword [eax], 0x53575341
jne 0x477e4a
cmp dword [eax + 4], 0x42326769
jne 0x477e4a
mov dword [esp + 0x10], 0x40
test ebx, ebx
je 0x47801e
mov dword [ebx], 5
jmp 0x47801e
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
jne 0x477e60
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x10], edx
je 0x477ead
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x84]
push 8
sub esi, 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x477e9d
lea eax, [esp + 0x84]
cmp dword [eax], 0x53575341
jne 0x477e9d
cmp dword [eax + 4], 0x42326769
je 0x477e2f
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
jmp 0x477eaf
mov ecx, dword [esp + 0x14]
jmp 0x477eaf
mov eax, edx
test eax, eax
jl 0x478093
jg 0x477ec2
cmp ecx, 0x78
jb 0x477f59
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x8c]
mov esi, ecx
mov ecx, dword [esp + 0x1c]
push 8
sub esi, 0x38
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x477f03
lea eax, [esp + 0x8c]
cmp dword [eax], 0x53575341
jne 0x477f03
cmp dword [eax + 4], 0x42326769
je 0x477e2f
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x14]
jne 0x477f17
mov esi, dword [esp + 0x18]
cmp dword [esp + 0x10], esi
je 0x477f6c
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x94]
push 8
sub esi, 0x38
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x477f6c
lea eax, [esp + 0x94]
cmp dword [eax], 0x53575341
jne 0x477f6c
cmp dword [eax + 4], 0x42326769
jne 0x477f6c
jmp 0x477e2f
test eax, eax
jl 0x478093
jg 0x477f6c
cmp ecx, 0x30
jb 0x478093
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x9c]
mov edi, dword [esp + 0x18]
sub esi, 8
mov ecx, dword [esp + 0x1c]
push 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x477fab
lea eax, [esp + 0x9c]
cmp dword [eax], 0x53575341
jne 0x477fab
cmp dword [eax + 4], 0x646e6769
je 0x47800c
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x14]
jne 0x477fc3
mov ecx, dword [esp + 0x18]
cmp dword [esp + 0x10], ecx
je 0x478093
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0xa4]
push 8
sub esi, 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00482d80
test al, al
je 0x478093
lea eax, [esp + 0xa4]
cmp dword [eax], 0x53575341
jne 0x478093
cmp dword [eax + 4], 0x646e6769
jne 0x478093
mov dword [esp + 0x10], 0x28
test ebx, ebx
je 0x47801e
mov dword [ebx], 1
mov ebx, dword [esp + 0x10]
sub esi, ebx
push ecx
mov ecx, dword [esp + 0x20]
sbb edi, 0
push edi
push esi
call fcn.004829b0
mov ecx, dword [esp + 0x2c]
mov al, 1
mov byte [esp + 0x37], al
test ecx, ecx
je 0x478071
lea eax, [esp + 0x38]
mov dword [esp + 0x38], ebx
push eax
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00482a50
test al, al
je 0x478069
cmp dword [esp + 0x38], ebx
je 0x47806d
mov eax, dword [esp + 0x1c]
mov dword [eax + 0x60], 0x1e
xor al, al
jmp 0x478071
mov al, byte [esp + 0x37]
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x478095
mov dword [ecx], esi
mov dword [ecx + 4], edi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.004af3ab
mov esp, ebp
pop ebp
ret
xor al, al
mov ecx, dword [esp + 0xac]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004af3ab
mov esp, ebp
pop ebp
ret