Function at 0x385a13b0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a0
mov eax, dword [0x7076dbc]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 0xc]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ebp - 0x1a0], ecx
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x19c], eax
mov eax, dword [esi]
push ecx
push esi
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0
call dword [eax + 0x14]
add esp, 8
test eax, eax
js 0x385a170b
mov eax, dword [esi]
lea ecx, [ebp - 0x16c]
push ebx
push edi
push ecx
push 0x40
lea ecx, [ebp - 0x6c]
push ecx
push 0
push 0
push esi
call dword [eax + 0xc]
add esp, 0x18
test eax, eax
js 0x385a1704
cmp dword [ebp - 0x16c], 0x40
jne 0x385a1704
mov eax, 0x5a4d
cmp word [ebp - 0x6c], ax
jne 0x385a16ee
mov eax, dword [esi]
lea ecx, [ebp - 0x16c]
push ecx
push 0xf8
lea ecx, [ebp - 0x164]
push ecx
push 0
push dword [ebp - 0x30]
push esi
call dword [eax + 0xc]
add esp, 0x18
test eax, eax
js 0x385a1704
cmp dword [ebp - 0x16c], 0xf8
jne 0x385a1704
cmp dword [ebp - 0x164], 0x4550
jne 0x385a16ee
movzx ecx, word [ebp - 0x15e]
mov dword [ebp - 0x198], ecx
test ecx, ecx
je 0x385a16db
cmp ecx, 0x7f
ja 0x385a16ee
mov eax, dword [ebp - 0x128]
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x18c], edx
test eax, eax
je 0x385a16ee
lea ebx, [eax - 1]
mov dword [ebp - 0x190], ebx
test eax, ebx
jne 0x385a16ee
test edx, edx
je 0x385a16ee
lea eax, [edx - 1]
test edx, eax
jne 0x385a16ee
movzx eax, word [ebp - 0x150]
add eax, 0x18
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x184], 0
test ecx, ecx
je 0x385a16ee
mov edi, dword [ebp - 0x178]
mov ebx, dword [ebp - 0x17c]
jmp 0x385a1576
mov esi, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x30]
xor edx, edx
add ecx, eax
adc edx, dword [ebp - 0x174]
cmp edx, edi
jg 0x385a1704
jl 0x385a1595
cmp ecx, ebx
jae 0x385a1704
mov eax, dword [esi]
lea edi, [ebp - 0x16c]
push edi
push 0x28
lea edi, [ebp - 0x2c]
push edi
push edx
push ecx
push esi
call dword [eax + 0xc]
add esp, 0x18
test eax, eax
js 0x385a1704
cmp dword [ebp - 0x16c], 0x28
jne 0x385a1704
cmp dword [ebp - 0x20], 0
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x178]
mov ebx, dword [ebp - 0x17c]
je 0x385a1676
test ecx, ecx
je 0x385a1676
mov edx, dword [ebp - 0x1c]
test edx, edx
je 0x385a1676
cmp dword [ebp - 0x18c], 0x1000
jb 0x385a1603
and ecx, 0xfffffe00
test esi, esi
jne 0x385a1609
mov esi, edx
mov ebx, dword [ebp - 0x194]
dec edx
mov eax, dword [ebp - 0x190]
add edx, ebx
dec ebx
not eax
add esi, ebx
and edx, eax
mov ebx, dword [ebp - 0x17c]
and esi, eax
cmp edx, esi
jbe 0x385a162d
mov edx, esi
lea eax, [ecx + edx]
mov ecx, dword [ebp - 0x170]
xor edx, edx
cmp edx, ecx
jl 0x385a167c
jg 0x385a1648
mov esi, dword [ebp - 0x168]
cmp eax, esi
jbe 0x385a1682
cmp edx, edi
jl 0x385a1664
jg 0x385a1652
cmp eax, ebx
jbe 0x385a1664
mov esi, ebx
mov ecx, edi
mov dword [ebp - 0x168], esi
mov dword [ebp - 0x170], ecx
jmp 0x385a1682
mov esi, eax
mov ecx, edx
mov dword [ebp - 0x168], esi
mov dword [ebp - 0x170], ecx
jmp 0x385a1682
mov ecx, dword [ebp - 0x170]
mov esi, dword [ebp - 0x168]
mov eax, dword [ebp - 0x180]
mov edx, dword [ebp - 0x184]
add eax, 0x28
mov dword [ebp - 0x180], eax
adc dword [ebp - 0x174], 0
inc edx
mov dword [ebp - 0x184], edx
cmp edx, dword [ebp - 0x198]
jb 0x385a1570
mov eax, esi
or eax, ecx
je 0x385a16ee
cmp ecx, edi
jg 0x385a16ee
jl 0x385a16c1
cmp esi, ebx
ja 0x385a16ee
mov eax, dword [ebp - 0x19c]
sub ebx, esi
sbb edi, ecx
mov dword [eax], esi
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1a0]
mov dword [eax], ebx
mov dword [eax + 4], edi
pop edi
pop ebx
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call 0x37ac2614
mov esp, ebp
pop ebp
ret
pop edi
pop ebx
mov eax, 0x800000d8
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call 0x37ac2614
mov esp, ebp
pop ebp
ret
pop edi
mov eax, 0x800000ca
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call 0x37ac2614
mov esp, ebp
pop ebp
ret