Function at 0x7d7410
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x384
mov eax, dword [0x6d7a68]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push edi
mov esi, ecx
call fcn.008e1350
xor ebx, ebx
mov ecx, edi
mov dword [esi + 0x464], ebx
mov dword [esi], 0x6ac3c0
mov dword [esi + 0x468], edi
mov dword [esi + 0x46c], ebx
mov dword [esi + 0x470], ebx
mov dword [esi + 0x480], ebx
mov dword [esi + 0x484], ebx
mov dword [esi + 0x460], 0x434f4d32
call fcn.008d4be0
test eax, eax
jne 0x7d7481
mov dword [esi + 0x46c], 6
jmp 0x7d7801
mov edi, dword [esi + 0x468]
mov eax, dword [edi + 0x1bc]
cmp eax, 0x1c
mov dword [esi + 0x47c], eax
mov dword [esi + 0xc], eax
jb 0x7d77f7
push 0x40
lea eax, [ebp - 0x2ac]
push ebx
push eax
call fcn.0067e0a0
add esp, 0xc
push 0x40
lea ecx, [ebp - 0x2ac]
push ecx
push ebx
push ebx
mov ecx, edi
call fcn.008d5400
mov edi, eax
cmp edi, 0x1c
jb 0x7d77f7
mov ecx, dword [esi + 0x468]
lea edx, [ebp - 0x104]
push edx
call fcn.007d72d0
mov eax, dword [esi + 0x468]
mov ecx, dword [eax + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
cmp eax, 0x3b
je 0x7d7636
cmp dword [esi + 0x47c], 0x100
jb 0x7d7636
cmp edi, 0x40
jne 0x7d7636
mov ax, word [ebp - 0x2ac]
cmp ax, 0x5a4d
je 0x7d764d
cmp ax, 0x4d5a
je 0x7d763d
lea ecx, [ebp - 0x104]
push 0x6aa584
push ecx
call fcn.00680882
add esp, 8
test eax, eax
jne 0x7d7636
mov eax, edi
mov ecx, 0x6ac378
lea edx, [ebp - 0x2ac]
mov edi, dword [edx]
cmp edi, dword [ecx]
jne 0x7d756e
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x7d7556
cmp eax, ebx
je 0x7d75cb
movzx edi, byte [edx]
movzx ebx, byte [ecx]
sub edi, ebx
jne 0x7d7626
sub eax, 1
xor ebx, ebx
add ecx, 1
add edx, 1
cmp eax, ebx
je 0x7d75cb
movzx edi, byte [edx]
movzx ebx, byte [ecx]
sub edi, ebx
jne 0x7d7626
sub eax, 1
xor ebx, ebx
add ecx, 1
add edx, 1
cmp eax, ebx
je 0x7d75cb
movzx edi, byte [edx]
movzx ebx, byte [ecx]
sub edi, ebx
jne 0x7d7626
sub eax, 1
xor ebx, ebx
add ecx, 1
add edx, 1
cmp eax, ebx
je 0x7d75cb
movzx edi, byte [edx]
movzx edx, byte [ecx]
sub edi, edx
jne 0x7d7628
xor eax, eax
cmp eax, ebx
jne 0x7d7636
add dword [esi + 0x47c], 0xffffff00
mov eax, dword [esi + 0x47c]
mov ecx, pe_nt_image_headers32
mov dword [esi + 0xc], eax
push 0x168
lea eax, [ebp - 0x26c]
mov dword [esi + 0x470], ecx
mov dword [esi + 0x478], ecx
mov ecx, dword [esi + 0x468]
push eax
mov dword [esi + 0x474], ebx
call fcn.00774b40
push ebx
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, esi
call fcn.008e1720
jmp 0x7d7801
xor ebx, ebx
cmp edi, ebx
mov eax, 1
jg 0x7d75cd
or eax, 0xffffffff
jmp 0x7d75cd
mov ax, word [ebp - 0x2ac]
cmp ax, 0x5a4d
je 0x7d764d
cmp ax, 0x4d5a
jne 0x7d77f7
cmp word [ebp - 0x2a6], bx
jne 0x7d77f7
mov ax, word [ebp - 0x29e]
cmp ax, bx
je 0x7d7670
cmp ax, 0xfff0
jne 0x7d77f7
mov ax, word [ebp - 0x296]
cmp ax, bx
je 0x7d7686
cmp ax, 0xfff0
jne 0x7d77f7
mov ax, word [ebp - 0x298]
cmp ax, bx
je 0x7d769c
cmp ax, 0x100
jne 0x7d77f7
mov ax, word [ebp - 0x29c]
cmp ax, bx
je 0x7d76b2
cmp ax, 0xfe00
jb 0x7d77f7
mov eax, dword [ebp - 0x2a8]
lea edx, [eax - 1]
cmp dx, 0x7f
ja 0x7d77f7
cmp word [ebp - 0x2a4], bx
jle 0x7d77f7
movzx eax, ax
shl eax, 9
cmp eax, dword [esi + 0x47c]
jae 0x7d76e9
mov dword [esi + 0x47c], eax
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0x270]
mov ecx, dword [esi + 0x468]
push ebx
push eax
call fcn.006c5ad0
mov edi, 4
cmp word [ebp - 0x2a4], di
movzx eax, ax
jb 0x7d774a
cmp ax, 0x7fe
ja 0x7d774a
mov ecx, dword [esi + 0x468]
movzx eax, ax
cdq
push edx
push eax
call fcn.006c5ad0
movzx eax, ax
cmp ax, 0x454e
je 0x7d773f
cmp ax, 0x4550
je 0x7d773f
cmp ax, 0x454c
je 0x7d773f
cmp ax, 0x584c
jne 0x7d774a
mov dword [esi + 0x46c], edi
jmp 0x7d7801
movzx ecx, word [ebp - 0x296]
movzx edx, word [ebp - 0x298]
movzx eax, word [ebp - 0x2a4]
shl ecx, 4
add ecx, edx
shl eax, 4
and ecx, 0xfffff
add ecx, eax
mov eax, dword [esi + 0x47c]
cmp ecx, eax
mov dword [esi + 0x470], ecx
ja 0x7d773f
sub eax, ecx
mov dword [esi + 0x478], ecx
push ebx
lea ecx, [ebp - 0x384]
mov dword [esi + 0x47c], eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x474], ebx
mov dword [esi + 0x484], 1
call fcn.008dc300
cmp dword [esi + 0x484], ebx
lea ecx, [ebp - 0x384]
je 0x7d77c4
push ecx
mov ecx, esi
call fcn.007d7300
jmp 0x7d77d6
mov edx, dword [esi + 0x468]
mov eax, dword [edx + 0x1b0]
push eax
call fcn.008dc1b0
push ebx
lea ecx, [ebp - 0x384]
call fcn.008dbf90
push eax
mov ecx, esi
call fcn.008e1720
lea ecx, [ebp - 0x384]
call fcn.008dc0a0
jmp 0x7d7801
mov dword [esi + 0x46c], 4
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0067de1d
mov esp, ebp
pop ebp
ret 4