Function at 0x415c20
Capabilities:
Parse pe header

Disassembly:
mov edi, edi
push ebp
lea ebp, [esp - 0x110]
sub esp, 0x190
mov eax, dword [0x44f9f8]
xor eax, ebp
mov dword [ebp + 0x10c], eax
push ebx
push esi
mov esi, dword [ebp + 0x118]
push edi
xor ebx, ebx
push 0x40
lea eax, [ebp + 0xcc]
push ebx
push eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
call fcn.004103a0
push 0xf8
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.004103a0
xor eax, eax
add esp, 0x18
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 8
pop ecx
xor eax, eax
lea edi, [ebp - 0x4c]
rep stosd dword es:[edi], eax
push ebx
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
xor edi, edi
call fcn.004381aa
mov ebx, eax
test ebx, ebx
jns 0x415cb0
push 0x43ca1e
push ebx
call fcn.0043913a
pop ecx
pop ecx
jmp 0x4160b9
push 0
push 0x8000080
push 3
push 0
push 1
push 0x80000000
push dword [ebp - 0x64]
call dword [0x4012a0]
mov dword [ebp - 0x58], eax
cmp eax, 0xffffffff
jne 0x415d15
call dword [0x4011d8]
test eax, eax
jle 0x415ce7
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x415cf2
mov ebx, 0x80004005
push ebx
push 0x44
push 0x43c9e6
call fcn.0043914e
push dword [ebp - 0x64]
push 0x43c9ba
push ebx
call fcn.0043913a
add esp, 0xc
jmp 0x4160b9
mov ebx, dword [0x401284]
push 0
lea eax, [ebp - 0x5c]
push eax
push 0x40
lea eax, [ebp + 0xcc]
push eax
push dword [ebp - 0x58]
call ebx
test eax, eax
jne 0x415d71
call dword [0x4011d8]
test eax, eax
jle 0x415d47
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x415d52
mov ebx, 0x80004005
push ebx
push 0x49
push 0x43c9e6
call fcn.0043914e
push 0x43c99e
push ebx
call fcn.0043913a
pop ecx
pop ecx
jmp 0x4160b0
cmp dword [ebp - 0x5c], 0x40
jb 0x415d85
mov eax, 0x5a4d
cmp ax, word [ebp + 0xcc]
je 0x415da1
mov esi, 0x8007000d
push esi
push 0x4e
push 0x43c9e6
mov ebx, esi
call fcn.0043914e
push 0x43c96c
push esi
jmp 0x415d65
mov eax, dword [ebp + 0x108]
push 0
cdq
push 0
push edx
push eax
push dword [ebp - 0x58]
call dword [0x4012a4]
test eax, eax
jne 0x415df1
call dword [0x4011d8]
test eax, eax
jle 0x415dcf
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x415dda
mov ebx, 0x80004005
push ebx
push 0x59
push 0x43c9e6
call fcn.0043914e
push str.P_fE
jmp 0x415d64
push 0
lea eax, [ebp - 0x5c]
push eax
push 0x18
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x58]
call ebx
test eax, eax
jne 0x415e3c
call dword [0x4011d8]
test eax, eax
jle 0x415e1a
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x415e25
mov ebx, 0x80004005
push ebx
push 0x5f
push 0x43c9e6
call fcn.0043914e
push 0x43c934
jmp 0x415d64
cmp dword [ebp - 0x5c], 0x18
jb 0x415e4b
cmp dword [ebp - 0x2c], 0x4550
je 0x415e69
mov esi, 0x8007000d
push esi
push 0x64
push 0x43c9e6
mov ebx, esi
call fcn.0043914e
push 0x43c904
jmp 0x415d9e
mov eax, dword [ebp + 0x108]
lea ecx, [eax + 0x58]
mov dword [ebp - 0x7c], ecx
xor ecx, ecx
push ecx
push ecx
add eax, 0x98
push ecx
push eax
push dword [ebp - 0x58]
mov dword [ebp - 0x80], eax
call dword [0x4012a4]
test eax, eax
jne 0x415ec6
call dword [0x4011d8]
test eax, eax
jle 0x415ea4
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x415eaf
mov ebx, 0x80004005
push ebx
push 0x6f
push 0x43c9e6
call fcn.0043914e
push 0x43c8e4
jmp 0x415d64
push 0
lea eax, [ebp - 0x5c]
push eax
push 4
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x58]
call ebx
test eax, eax
jne 0x415f11
call dword [0x4011d8]
test eax, eax
jle 0x415eef
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x415efa
mov ebx, 0x80004005
push ebx
push 0x74
push 0x43c9e6
call fcn.0043914e
push 0x43c8c2
jmp 0x415d64
push 0
lea eax, [ebp - 0x5c]
push eax
push 4
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x58]
call ebx
test eax, eax
jne 0x415f5c
call dword [0x4011d8]
test eax, eax
jle 0x415f3a
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x415f45
mov ebx, 0x80004005
push ebx
push 0x79
push 0x43c9e6
call fcn.0043914e
push 0x43c8a2
jmp 0x415d64
movzx eax, word [ebp - 0x18]
mov ecx, dword [ebp + 0x108]
lea eax, [eax + ecx + 0x18]
xor ecx, ecx
push ecx
push ecx
push ecx
push eax
push dword [ebp - 0x58]
call dword [0x4012a4]
test eax, eax
jne 0x415fb6
call dword [0x4011d8]
test eax, eax
jle 0x415f91
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x415f9c
mov ebx, 0x80004005
push ebx
push 0x84
push 0x43c9e6
call fcn.0043914e
push 0x43c87c
jmp 0x415d64
and dword [ebp - 0x68], edi
push 0
lea eax, [ebp - 0x5c]
push eax
push 0x28
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
call ebx
test eax, eax
je 0x41601e
mov dword [ebp - 0x60], 1
cmp dword [ebp - 0x5c], 0x28
jb 0x416060
push 8
lea eax, [ebp - 0x54]
push 0x43c872
push eax
call fcn.00410ea8
add esp, 0xc
test eax, eax
je 0x4160e3
movzx eax, word [ebp - 0x26]
cmp dword [ebp - 0x60], eax
jae 0x416082
inc dword [ebp - 0x68]
inc dword [ebp - 0x60]
push 0
lea eax, [ebp - 0x5c]
push eax
push 0x28
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
call ebx
test eax, eax
jne 0x415fd5
call dword [0x4011d8]
test eax, eax
jle 0x416032
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x41603d
mov ebx, 0x80004005
push ebx
push 0x8d
push 0x43c9e6
call fcn.0043914e
push dword [ebp - 0x68]
push 0x43c842
push ebx
call fcn.0043913a
add esp, 0xc
jmp 0x4160b0
mov esi, 0x8007000d
push esi
push 0x92
push 0x43c9e6
mov ebx, esi
call fcn.0043914e
push dword [ebp - 0x68]
push 0x43c80a
push esi
jmp 0x416056
mov esi, 0x8007000d
push esi
push 0xa0
push 0x43c9e6
mov ebx, esi
call fcn.0043914e
push 0x43c7ec
push esi
call fcn.0043913a
pop ecx
pop ecx
test edi, edi
je 0x4160b0
push edi
call fcn.004394b8
push dword [ebp - 0x58]
call dword [fcn.00401270]
cmp dword [ebp - 0x64], 0
je 0x4160c7
push dword [ebp - 0x64]
call fcn.00436758
mov ecx, dword [ebp + 0x10c]
pop edi
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.00410118
add ebp, 0x110
leave
ret 4
cmp dword [ebp - 0x44], 0x34
jae 0x41610d
mov esi, 0x8007000d
push esi
push 0xac
push 0x43c9e6
mov ebx, esi
call fcn.0043914e
push dword [ebp - 0x44]
push 0x43c7bc
jmp 0x41607f
push 1
push dword [ebp - 0x44]
call fcn.004392fc
mov edi, eax
test edi, edi
jne 0x41613c
mov ebx, 0x8007000e
push ebx
push 0xb1
push 0x43c9e6
call fcn.0043914e
push 0x43c790
jmp 0x415d64
mov eax, dword [ebp - 0x40]
xor ecx, ecx
push ecx
push ecx
push ecx
push eax
push dword [ebp - 0x58]
call dword [0x4012a4]
test eax, eax
jne 0x41618c
call dword [0x4011d8]
test eax, eax
jle 0x416166
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x416171
mov ebx, 0x80004005
push ebx
push 0xb7
push 0x43c9e6
call fcn.0043914e
push 0x43c8e4
push ebx
jmp 0x41609f
mov eax, dword [ebp - 0x40]
add eax, 0x1c
push 0
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x44]
push edi
push dword [ebp - 0x58]
call ebx
test eax, eax
jne 0x4161de
call dword [0x4011d8]
test eax, eax
jle 0x4161bc
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
test ebx, ebx
js 0x4161c7
mov ebx, 0x80004005
push ebx
push 0xc0
push 0x43c9e6
call fcn.0043914e
push 0x43c772
jmp 0x416186
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x5c]
jbe 0x416207
mov esi, 0x8007000d
push esi
push 0xc5
push 0x43c9e6
mov ebx, esi
call fcn.0043914e
push 0x43c74c
jmp 0x41609e
cmp dword [edi + 4], 2
je 0x416237
mov esi, 0x8007000d
push esi
push 0xcc
push 0x43c9e6
mov ebx, esi
call fcn.0043914e
push dword [edi + 4]
push 0x43c714
push esi
call fcn.0043913a
jmp 0x4162fb
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x58]
call 0x43cf38
mov ebx, eax
test ebx, ebx
jns 0x416253
push 0x43c6f0
jmp 0x416186
mov eax, dword [edi + 0x18]
mov dword [esi], eax
mov ecx, dword [edi + 0x20]
test ecx, ecx
je 0x416264
mov eax, dword [edi + 0x24]
jmp 0x41626e
mov ecx, dword [ebp - 0x70]
test ecx, ecx
je 0x416275
mov eax, dword [ebp - 0x6c]
add eax, ecx
mov dword [esi + 4], eax
jmp 0x41627d
mov ecx, dword [edi + 0x30]
add ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [ebp - 0x78]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x74]
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0x7c]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x60]
mov dword [esi + 0x18], eax
mov eax, dword [edi + 0x1c]
mov dword [esi + 0x1c], eax
mov eax, dword [edi + 0x20]
mov dword [esi + 0x20], eax
mov eax, dword [edi + 0x24]
mov dword [esi + 0x24], eax
mov eax, dword [edi + 0x28]
mov dword [esi + 0x28], eax
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x2c], eax
push 1
shl eax, 2
push eax
call fcn.004392fc
mov dword [esi + 0x30], eax
test eax, eax
jne 0x4162ea
mov ebx, 0x8007000e
push ebx
push 0xef
push 0x43c9e6
call fcn.0043914e
push 0x43c6c0
jmp 0x416186
mov ecx, dword [esi + 0x2c]
shl ecx, 2
push ecx
lea ecx, [edi + 0x30]
push ecx
push eax
call fcn.0040e860
add esp, 0xc
jmp 0x4160a6