Function at 0x43b3fc
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18c
mov eax, dword [0x46a004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x44]
push esi
push edi
xor esi, esi
push 0x40
push esi
push eax
mov dword [ebp - 0x168], esi
mov dword [ebp - 0x184], esi
mov dword [ebp - 0x180], esi
call 0x45f851
push 0xf8
lea eax, [ebp - 0x13c]
push esi
push eax
call 0x45f851
add esp, 0x18
mov dword [ebp - 0x174], esi
xor eax, eax
mov dword [ebp - 0x178], esi
lea edi, [ebp - 0x164]
mov dword [ebp - 0x16c], esi
push 0xa
pop ecx
rep stosd dword es:[edi], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebx], ecx
cmp ecx, 0xffffffff
jne 0x43b4a9
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b48a
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b491
mov esi, 0x80004005
push esi
push 0x3a
push 0x44ee0c
call fcn.00433792
push 0x44ee18
push esi
jmp 0x43bb62
mov eax, dword [ebp + 0x10]
cmp eax, 0xffffffff
jne 0x43b4b3
mov eax, ecx
mov edi, dword [0x44b200]
push esi
push esi
push esi
push esi
push ecx
mov dword [ebx + 4], eax
call edi
test eax, eax
jne 0x43b4f9
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b4de
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b4e5
mov esi, 0x80004005
push esi
push 0x43
push 0x44ee0c
call fcn.00433792
push 0x44ee48
jmp 0x43b4a3
push esi
mov esi, dword [0x44b1fc]
lea eax, [ebp - 0x168]
push eax
push 0x40
lea eax, [ebp - 0x44]
push eax
push dword [ebx]
call esi
test eax, eax
jne 0x43b54a
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b52c
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b533
mov esi, 0x80004005
push esi
push 0x49
push 0x44ee0c
call fcn.00433792
push 0x44ee6c
jmp 0x43b4a3
cmp dword [ebp - 0x168], 0x40
jb 0x43bb48
mov eax, 0x5a4d
cmp ax, word [ebp - 0x44]
jne 0x43bb48
mov eax, dword [ebp - 8]
push 0
push 0
cdq
push edx
push eax
push dword [ebx]
call edi
test eax, eax
jne 0x43b5ad
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b58f
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b596
mov esi, 0x80004005
push esi
push 0x59
push 0x44ee0c
call fcn.00433792
push 0x44eebc
jmp 0x43b4a3
push 0
lea eax, [ebp - 0x168]
push eax
push 0x18
lea eax, [ebp - 0x13c]
push eax
push dword [ebx]
call esi
test eax, eax
jne 0x43b5fc
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b5de
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b5e5
mov esi, 0x80004005
push esi
push 0x5f
push 0x44ee0c
call fcn.00433792
push 0x44eedc
jmp 0x43b4a3
cmp dword [ebp - 0x168], 0x18
jb 0x43bb2d
cmp dword [ebp - 0x13c], 0x4550
jne 0x43bb2d
mov eax, dword [ebp - 8]
lea ecx, [eax + 0x58]
add eax, 0x98
mov dword [ebp - 0x188], ecx
xor ecx, ecx
push ecx
push ecx
push ecx
push eax
push dword [ebx]
mov dword [ebp - 0x18c], eax
call edi
test eax, eax
jne 0x43b673
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b655
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b65c
mov esi, 0x80004005
push esi
push 0x6f
push 0x44ee0c
call fcn.00433792
push 0x44ef28
jmp 0x43b4a3
push 0
lea eax, [ebp - 0x168]
push eax
push 4
lea eax, [ebp - 0x174]
push eax
push dword [ebx]
call esi
test eax, eax
jne 0x43b6c2
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b6a4
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b6ab
mov esi, 0x80004005
push esi
push 0x74
push 0x44ee0c
call fcn.00433792
push 0x44ef48
jmp 0x43b4a3
push 0
lea eax, [ebp - 0x168]
push eax
push 4
lea eax, [ebp - 0x178]
push eax
push dword [ebx]
call esi
test eax, eax
jne 0x43b711
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b6f3
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b6fa
mov esi, 0x80004005
push esi
push 0x79
push 0x44ee0c
call fcn.00433792
push 0x44ef6c
jmp 0x43b4a3
movzx ecx, word [ebp - 0x128]
mov eax, dword [ebp - 8]
add ecx, 0x18
add eax, ecx
xor ecx, ecx
push ecx
push ecx
push ecx
push eax
push dword [ebx]
call edi
test eax, eax
jne 0x43b766
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b745
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b74c
mov esi, 0x80004005
push esi
push 0x84
push 0x44ee0c
call fcn.00433792
push 0x44ef8c
jmp 0x43b4a3
xor edi, edi
lea eax, [ebp - 0x168]
push edi
push eax
push 0x28
lea eax, [ebp - 0x164]
mov dword [ebp - 0x17c], edi
push eax
push dword [ebx]
call esi
test eax, eax
je 0x43baee
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x168], 0x28
jb 0x43bac9
lea eax, [ebp - 0x164]
cmp dword [eax], 0x7869772e
jne 0x43b7b2
cmp dword [eax + 4], 0x6e727562
je 0x43b7f5
movzx eax, word [ebp - 0x136]
cmp ecx, eax
jae 0x43ba8c
push 0
lea eax, [ebp - 0x168]
inc edi
push eax
push 0x28
lea eax, [ebp - 0x164]
mov dword [ebp - 0x17c], edi
push eax
push dword [ebx]
inc ecx
mov dword [ebp - 0x170], ecx
call esi
test eax, eax
je 0x43baee
mov ecx, dword [ebp - 0x170]
jmp 0x43b78e
cmp dword [ebp - 0x154], 0x34
jae 0x43b825
mov edi, 0x8007000d
push edi
push 0xac
push 0x44ee0c
mov esi, edi
call fcn.00433792
push dword [ebp - 0x154]
push 0x44f048
jmp 0x43baeb
push 1
push dword [ebp - 0x154]
call fcn.004338c0
mov edi, eax
mov dword [ebp - 0x16c], edi
test edi, edi
jne 0x43b860
mov ebx, 0x8007000e
push ebx
push 0xb1
push 0x44ee0c
mov esi, ebx
call fcn.00433792
push 0x44f078
push ebx
jmp 0x43bb62
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x150]
push dword [ebx]
call dword [0x44b200]
test eax, eax
jne 0x43b8b5
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b88e
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b895
mov esi, 0x80004005
push esi
push 0xb7
push 0x44ee0c
call fcn.00433792
push 0x44ef28
push esi
call 0x4701a8
jmp 0x43bab4
mov eax, dword [ebp - 0x150]
add eax, 0x1c
push 0
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x168]
push eax
push dword [ebp - 0x154]
push edi
push dword [ebx]
call esi
test eax, eax
jne 0x43b911
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43b8f3
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43b8fa
mov esi, 0x80004005
push esi
push 0xc0
push 0x44ee0c
call fcn.00433792
push 0x44f0a4
jmp 0x43b8aa
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x168]
jbe 0x43b940
mov edi, 0x8007000d
push edi
push 0xc5
push 0x44ee0c
mov esi, edi
call fcn.00433792
push 0x44f0c4
jmp 0x43baa8
cmp dword [edi + 4], 2
je 0x43b97f
mov edi, 0x8007000d
push edi
push 0xcc
push 0x44ee0c
mov esi, edi
call fcn.00433792
mov eax, dword [ebp - 0x16c]
push dword [eax + 4]
push 0x44f0ec
push edi
call 0x4701a8
mov edi, dword [ebp - 0x16c]
add esp, 0xc
jmp 0x43bab6
lea eax, [ebp - 0x184]
push eax
push dword [ebx + 4]
call 0x474976
mov esi, eax
test esi, esi
jns 0x43b99e
push 0x44f124
jmp 0x43b8aa
mov edx, dword [edi + 0x18]
mov dword [ebx + 8], edx
cmp dword [edi + 0x20], 0
je 0x43b9b2
mov eax, dword [edi + 0x24]
add eax, dword [edi + 0x20]
jmp 0x43b9cb
mov ecx, dword [ebp - 0x174]
test ecx, ecx
je 0x43b9c6
mov eax, dword [ebp - 0x178]
add eax, ecx
jmp 0x43b9cb
mov eax, dword [edi + 0x30]
add eax, edx
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x184]
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x180]
mov dword [ebx + 0x14], eax
mov eax, dword [ebp - 0x188]
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp - 0x170]
mov dword [ebx + 0x20], eax
mov eax, dword [edi + 0x1c]
mov dword [ebx + 0x24], eax
mov eax, dword [edi + 0x20]
mov dword [ebx + 0x28], eax
mov eax, dword [edi + 0x24]
mov dword [ebx + 0x2c], eax
mov eax, dword [edi + 0x28]
mov dword [ebx + 0x30], eax
mov eax, dword [edi + 0x2c]
mov dword [ebx + 0x34], eax
push 1
shl eax, 2
push eax
call fcn.004338c0
mov ecx, eax
mov dword [ebx + 0x38], ecx
test ecx, ecx
jne 0x43ba4f
mov ebx, 0x8007000e
push ebx
push 0xef
push 0x44ee0c
mov esi, ebx
call fcn.00433792
push 0x44f148
push ebx
jmp 0x43b8ab
mov eax, dword [ebx + 0x34]
shl eax, 2
push eax
lea eax, [edi + 0x30]
push eax
push ecx
call 0x45f2d1
add esp, 0xc
lea eax, [edi + 8]
push eax
call fcn.0043b179
mov esi, eax
test esi, esi
jns 0x43bab6
push esi
push 0xf5
push 0x44ee0c
call fcn.00433792
push 0x44f178
jmp 0x43b8aa
mov edi, 0x8007000d
push edi
push 0xa0
push 0x44ee0c
mov esi, edi
call fcn.00433792
push 0x44f028
push edi
call 0x4701a8
mov edi, dword [ebp - 0x16c]
pop ecx
pop ecx
test edi, edi
je 0x43bb69
push edi
call fcn.00433987
jmp 0x43bb69
mov edi, 0x8007000d
push edi
push 0x92
push 0x44ee0c
mov esi, edi
call fcn.00433792
push dword [ebp - 0x17c]
push 0x44efe4
push edi
jmp 0x43bb23
call dword [0x44b0f4]
mov esi, eax
test esi, esi
jle 0x43bb05
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x43bb0c
mov esi, 0x80004005
push esi
push 0x8d
push 0x44ee0c
call fcn.00433792
push edi
push 0x44efb4
push esi
call 0x4701a8
add esp, 0xc
jmp 0x43bb69
mov edi, 0x8007000d
push edi
push 0x64
push 0x44ee0c
mov esi, edi
call fcn.00433792
push 0x44eef8
jmp 0x43bb61
mov edi, 0x8007000d
push edi
push 0x4e
push 0x44ee0c
mov esi, edi
call fcn.00433792
push 0x44ee88
push edi
call 0x4701a8
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call 0x45dfe0
mov esp, ebp
pop ebp
ret 0xc