Function at 0x4363b0
Capabilities:
Parse pe header

Disassembly:
mov edi, dword [esp]
add esp, 4
push 0xcb867d4
add edx, dword [esp]
add esp, 4
push esp
sub edx, 0xff75a7bc
sub edx, 0x8a5844
sub edx, 0xcb867d4
mov dword [esp], edx
push ebx
push edi
pop edi
push ecx
pop ecx
push ebx
push ebx
add esp, 4
add esp, 4
mov dword [esp], edi
add eax, 0x52401488
push esp
sub eax, 0x52401488
mov dword [esp], eax
add esp, 4
mov edx, esp
mov edx, dword [edx]
add esp, 4
push esi
mov dword [esp], ebx
push esi
mov dword [esp], edx
mov ebx, esp
mov ebx, dword [ebx]
add esp, 4
push ebx
mov ebx, 0x883016
sub ebx, 0x882ffe
sub dword [esp], ebx
pop ebx
push ebx
xor edx, ebx
pop edx
push edi
mov ebx, dword [esp + 4]
add esp, 8
push esi
pop esi
push ecx
push ecx
add esp, 4
mov edi, esp
mov dword [edi], edx
mov edi, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp - 4]
sub ebx, 0x11e92ec6
add ebx, 0x11e92ec6
mov dword [esp - 4], ebx
push ebx
mov dword [esp], edi
jmp 0x435ec4
mov esi, dword [esp]
add esp, 4
push 7
add esp, 4
mov esi, dword [esp - 4]
mov dword [edi], esi
add esp, 4
mov edi, dword [esp - 4]
push esp
jmp 0x435ee2
mov esi, dword [esp]
add esp, 4
add esp, 4
mov esi, dword [esp - 4]
push esi
push 0x4f697f8d
pop esi
sub dword [esp], esi
pop esi
push ebx
push esi
pop ebx
add ebx, 0x4f697f8d
mov esi, ebx
pop ebx
mov dword [esp - 4], esi
push ecx
push ecx
add esp, 4
mov dword [esp], esi
add esp, 4
mov esi, dword [esp - 4]
push esi
push esi
add esp, 4
mov dword [esp], edx
push edi
push edi
add esp, 4
mov dword [esp], ecx
mov ecx, esp
mov ecx, dword [ecx]
add esp, 4
sub ebx, 0x65a14b4a
add ebx, 0x65a14b4a
mov dword [esp - 4], ebx
push ebx
mov ebx, esp
mov ebx, dword [ebx]
add esp, 4
push edx
push ecx
xor ecx, edx
pop ecx
sub edx, 0x6c79357f
add edx, 0x6c79357f
mov dword [esp - 4], edx
push edx
add esp, 4
add esp, 4
add esi, 0x48068cd
push esp
sub esi, 0x48068cd
mov dword [esp], esi
push edi
mov edi, 0x54240
sub edi, 0xff52ea2a
mov esi, edi
pop edi
push edi
mov edi, 0x2c2a7014
add edi, 0x32e389c5
add esi, edi
pop edi
push esi
mov esi, ebx
pop esi
add eax, esi
push ebx
push ebx
mov esi, dword [esp + 8]
add esp, 0xc
push esp
sub eax, 0xf7cdd7ba
sub eax, 0x8322846
sub eax, 0xf34dcfb0
push esi
push eax
pop esi
sub esi, 0xcb23050
mov eax, esi
pop esi
push esi
push eax
pop esi
sub esi, 0x5fc051ef
mov eax, esi
pop esi
mov dword [esp], eax
mov eax, esp
add eax, 8
mov eax, dword [eax]
add ecx, 0x66b86465
push esp
sub ecx, 0x66b86465
mov dword [esp], ecx
add esi, 0x57f0741c
push esp
sub esi, 0x57f0741c
mov dword [esp], esi
jmp 0x435ff8
mov esi, dword [esp]
add esp, 4
lea ecx, [eax]
push edx
push ebx
sub ebx, edx
pop ebx
mov edx, esi
push 0xcba1002
pop edx
add edx, 0xd765e7b0
add edx, 0x289a1850
add edx, 0xf345f006
not edx
not edx
add ecx, edx
push ebx
add esp, 4
pop edx
xchg ecx, eax
add esp, 4
mov ecx, dword [esp - 4]
and edx, 0x22000244
push 0x44eb1417
mov edx, dword [esp]
add esp, 4
jmp 0x436049
jmp 0x43604b
sub dword [eax], edx
pushal
sub esi, 0xafb4948
xor edi, 0x20615fca
popal
call 0x436060
jmp 0x436062
mov eax, dword [esp]
add esp, 4
push ecx
push edi
sub edi, ecx
pop edi
mov dword [esp], eax
inc eax
dec eax
not eax
push 0x28300040
mov eax, dword [esp]
add esp, 4
push eax
push ebx
pop ebx
not eax
push 0x28906812
mov eax, dword [esp]
add esp, 4
push eax
push 0x6067ed
pop eax
sub dword [esp], eax
pop eax
sub dword [esp], eax
push esp
pop eax
pop eax
sub dword [esp], eax
sub esi, 0x6be94938
add esi, 0x6be94938
mov dword [esp - 4], esi
push esi
mov eax, dword [esp + 4]
add esp, 8
push edx
push edi
pop edi
adc edx, 0x41921c12
push edx
inc dword [esp]
pop edx
add esp, 4
mov edx, dword [esp - 4]
push esi
push edx
pop esi
inc esi
push esi
pop edx
pop esi
push esi
push ecx
add esp, 4
push edx
push ecx
add esp, 4
add esp, 4
mov esi, dword [esp - 4]
push esi
dec dword [esp]
pop esi
push edx
mov dword [esp], esi
push esp
pop edx
pop edx
push edi
push edi
mov esi, dword [esp + 8]
add esp, 0xc
push 0x30217a23
sub edx, dword [esp]
add esp, 4
push edx
push 0x30217a23
pop edx
add dword [esp], edx
pop edx
mov dword [esp - 4], edx
push esi
pop esi
push edx
push edx
add esp, 4
sub edx, ebx
add edx, ebx
not edx
push 0x44310
mov edx, dword [esp]
add esp, 4
push edx
push eax
pop eax
inc edx
dec edx
push edx
mov edx, 0x22344158
xor edx, 0xa342948
add esp, 4
sub edx, 0xf3d5dfba
sub edx, 0xc2a2046
sub edx, 0x27fc24fc
xor dword [esp], edx
push ebx
add esp, 4
pop edx
add esp, 4
mov dword [eax], edx
sub eax, 0x2f110737
add eax, 0x2f110737
mov dword [esp - 4], eax
push eax
mov dword [esp], ebx
push esi
mov dword [esp], edx
add esp, 4
mov edx, dword [esp - 4]
push edx
pop edx
push ebx
push ebx
add esp, 4
push ebx
push edx
add esp, 4
add esp, 4
mov eax, dword [esp + 8]
add esp, 0xc
push edi
push edx
mov edx, edi
pop edx
push edi
push edi
add esp, 4
mov dword [esp], esi
mov esi, dword [esp]
add esp, 4
add esp, 4
push edi
push ebx
pop ebx
push edx
pop edx
push edi
push edi
add esp, 4
mov edx, dword [esp + 8]
add esp, 0xc
pushal
call 0x4361c4
pop ebx
mov eax, 0x50031494
sub eax, 0x50031202
add eax, ebx
xor dword [eax], 0x78c9aed2
call 0x4363b0
jmp 0x436314
call fcn.004361e1
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add byte [ecx - 0x17], ah
cmpsb byte [esi], byte es:[edi]
add byte [eax], al
add byte [ebp - 0x75], dl
in al, dx
mov ebx, 0x77000000
add ebx, 0x10000
cmp ebx, 0x80000000
jne 0x4363cb
mov ebx, 0xbff00000
call fcn.0043640f
cmp eax, 0
je 0x4363b8
cmp word [ebx], 0x5a4d
jne 0x4363b8
mov eax, dword [ebx + 0x3c]
add eax, ebx
cmp word [eax], 0x4550
jne 0x4363b8
test byte [eax + 0x17], 0x20
je 0x4363b8
mov eax, dword [eax + 0x78]
add eax, ebx
mov edx, dword [eax + 0xc]
add edx, ebx
cmp dword [edx], 0x4e52454b
jne 0x4363b8
cmp dword [edx + 4], 0x32334c45
jne 0x4363b8
mov eax, ebx
mov esp, ebp
pop ebp
ret