Function at 0x448ec4
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
cmp dword [0x450ac4], 0
jne 0x448ed8
call fcn.00448cb0
cmp dword [ebp + 8], 0
jne 0x448ee5
xor eax, eax
jmp 0x449690
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
push 0x40
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
cmp eax, 1
je 0x448f0b
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov ax, word [edx]
cmp eax, 0x5a4d
je 0x448f12
xor eax, eax
jmp 0x449690
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x18], edx
push pe_nt_image_headers32
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
cmp eax, 1
je 0x448f3d
mov ecx, dword [ebp - 0x18]
cmp dword [ecx], 0x4550
je 0x448f44
xor eax, eax
jmp 0x449690
mov edx, dword [ebp - 0x18]
xor eax, eax
mov ax, word [edx + 0x14]
cmp eax, 0xe0
jne 0x448f65
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dx, word [ecx + 0x18]
cmp edx, 0x10b
je 0x448f6f
mov eax, 4
jmp 0x449690
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov cx, word [eax + 6]
cmp ecx, 1
jge 0x448f84
xor eax, eax
jmp 0x449690
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx + 0x80]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x448fb3
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
jmp 0x448fbd
mov eax, 8
jmp 0x449690
mov edx, 1
test edx, edx
je 0x44968b
mov eax, dword [ebp - 4]
cmp dword [eax + 4], 0
jne 0x448fe1
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc], 0
jne 0x448fe1
jmp 0x44968b
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push 0x441a38
mov edx, dword [ebp - 0xc]
push edx
call fcn.0044a770
add esp, 0xc
test eax, eax
jne 0x44901b
mov dword [ebp - 8], 1
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push 0x441a48
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.0044a770
add esp, 0xc
test eax, eax
jne 0x449042
mov dword [ebp - 8], 2
xor edx, edx
test edx, edx
je 0x449055
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
jmp 0x449061
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x24]
cmp dword [eax], 0
je 0x44967d
mov dword [ebp - 0x28], 0x80000000
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
and edx, dword [ebp - 0x28]
test edx, edx
je 0x449091
jmp 0x44965c
xor eax, eax
test eax, eax
je 0x4493f0
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], edx
cmp dword [ebp - 8], 1
jne 0x4493eb
push 0x441a54
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x4490d1
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450774]
mov dword [ecx], edx
push 0x441a64
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x4490f2
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450770]
mov dword [ecx], edx
push 0x441a74
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x449113
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x45077c]
mov dword [ecx], edx
push 0x441a80
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x449134
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450778]
mov dword [ecx], edx
push 0x441a8c
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x449155
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450768]
mov dword [ecx], edx
push 0x441a94
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x449176
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450754]
mov dword [ecx], edx
push 0x441aa0
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x449197
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450758]
mov dword [ecx], edx
push 0x441aa8
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x4491b8
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450728]
mov dword [ecx], edx
push 0x441ab8
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x4491d9
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450724]
mov dword [ecx], edx
push 0x441ac8
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x4491fa
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450740]
mov dword [ecx], edx
mov eax, dword [ebp + 0xc]
and eax, 0xff
cmp eax, 1
jge 0x4493eb
push 0x441ae4
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x44922b
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450764]
mov dword [edx], eax
push 0x441aec
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x44924b
mov edx, dword [ebp - 0x20]
mov eax, dword [0x45075c]
mov dword [edx], eax
push 0x441af4
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x44926b
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450760]
mov dword [edx], eax
push 0x441afc
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x44928b
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450798]
mov dword [edx], eax
push 0x441b08
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4492ab
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450780]
mov dword [edx], eax
push 0x441b1c
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4492cb
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450784]
mov dword [edx], eax
push 0x441b2c
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4492eb
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450794]
mov dword [edx], eax
push 0x441b38
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x44930b
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450790]
mov dword [edx], eax
push 0x441b44
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x44932b
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450788]
mov dword [edx], eax
push 0x441b54
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x44934b
mov edx, dword [ebp - 0x20]
mov eax, dword [0x45078c]
mov dword [edx], eax
push 0x441b60
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x44936b
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450750]
mov dword [edx], eax
push 0x441b74
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x44938b
mov edx, dword [ebp - 0x20]
mov eax, dword [0x45074c]
mov dword [edx], eax
push 0x441b88
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x4493ab
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450748]
mov dword [edx], eax
push 0x441b98
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x4493cb
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450744]
mov dword [edx], eax
push 0x441ba8
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x4493eb
mov edx, dword [ebp - 0x20]
mov eax, dword [0x45073c]
mov dword [edx], eax
jmp 0x44965c
cmp dword [ebp - 8], 1
jne 0x44965c
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
cmp edx, dword [0x450ad0]
jne 0x449412
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x450774]
mov dword [eax], ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
cmp eax, dword [0x450acc]
jne 0x44942a
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450770]
mov dword [ecx], edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
cmp ecx, dword [0x450b28]
jne 0x449441
mov edx, dword [ebp - 0x20]
mov eax, dword [0x45077c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
cmp edx, dword [0x450b24]
jne 0x449459
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x450778]
mov dword [eax], ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
cmp eax, dword [0x450b20]
jne 0x449471
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450768]
mov dword [ecx], edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
cmp ecx, dword [0x450af4]
jne 0x449488
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450754]
mov dword [edx], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
cmp edx, dword [0x450af0]
jne 0x4494a0
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x450758]
mov dword [eax], ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
cmp eax, dword [0x450ad8]
jne 0x4494b8
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450728]
mov dword [ecx], edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
cmp ecx, dword [0x450ad4]
jne 0x4494cf
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450724]
mov dword [edx], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
cmp edx, dword [0x450adc]
jne 0x4494e7
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x450740]
mov dword [eax], ecx
mov edx, dword [ebp + 0xc]
and edx, 0xff
cmp edx, 1
jge 0x44965c
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
cmp ecx, dword [0x450b1c]
jne 0x449510
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450764]
mov dword [edx], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
cmp edx, dword [0x450b18]
jne 0x449528
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x45075c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
cmp eax, dword [0x450b14]
jne 0x449540
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450760]
mov dword [ecx], edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
cmp ecx, dword [0x450b10]
jne 0x449557
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450798]
mov dword [edx], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
cmp edx, dword [0x450b0c]
jne 0x44956f
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x450780]
mov dword [eax], ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
cmp eax, dword [0x450b08]
jne 0x449587
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450784]
mov dword [ecx], edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
cmp ecx, dword [0x450b04]
jne 0x44959e
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450794]
mov dword [edx], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
cmp edx, dword [0x450b00]
jne 0x4495b6
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x450790]
mov dword [eax], ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
cmp eax, dword [0x450afc]
jne 0x4495ce
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x450788]
mov dword [ecx], edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
cmp ecx, dword [0x450af8]
jne 0x4495e5
mov edx, dword [ebp - 0x20]
mov eax, dword [0x45078c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
cmp edx, dword [0x450aec]
jne 0x4495fd
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x450750]
mov dword [eax], ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
cmp eax, dword [0x450ae8]
jne 0x449615
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x45074c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
cmp ecx, dword [0x450ae4]
jne 0x44962c
mov edx, dword [ebp - 0x20]
mov eax, dword [0x450748]
mov dword [edx], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
cmp edx, dword [0x450ae0]
jne 0x449644
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x450744]
mov dword [eax], ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
cmp eax, dword [0x450ac8]
jne 0x44965c
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x45073c]
mov dword [ecx], edx
cmp dword [ebp - 0x20], 0
jne 0x449666
xor eax, eax
jmp 0x449690
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x24]
add ecx, 4
mov dword [ebp - 0x24], ecx
jmp 0x44906d
mov edx, dword [ebp - 4]
add edx, 0x14
mov dword [ebp - 4], edx
jmp 0x448fbd
mov eax, 1
mov esp, ebp
pop ebp
ret