Function at 0x4014d2
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
test ecx, ecx
jne 0x4014e0
xor eax, eax
leave
ret
or dword [ebp - 0x24], 0xffffffff
push ebx
xor ebx, ebx
mov dword [ebp - 0x28], 0x41dc24
push ecx
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
call fcn.00402efa
test al, al
je 0x401806
cmp dword [ebp - 0x24], 0xffffffff
push esi
push edi
je 0x4017fc
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x4017fc
mov edx, dword [ebp - 0x18]
cmp edx, 0x40
jb 0x4017fc
mov eax, 0x5a4d
cmp word [edi], ax
jne 0x4017fc
mov ecx, dword [edi + 0x3c]
lea eax, [ecx + 0xf8]
cmp edx, eax
jb 0x4017fc
cmp dword [ecx + edi], 0x4550
jne 0x4017fc
movzx eax, word [ecx + edi + 4]
mov esi, 0x8664
mov dword [ebp - 0xc], 0x14c
cmp ax, word [ebp - 0xc]
je 0x40157d
cmp ax, si
je 0x4017fc
add ecx, 0x98
add ecx, edi
mov dword [ebp - 0xc], ecx
mov eax, dword [ecx]
test eax, eax
je 0x4017fc
add eax, 0xc
cmp edx, eax
jb 0x4017fc
test ecx, ecx
je 0x4017fc
mov esi, dword [ecx]
add esi, edi
lea ecx, [esi + 8]
test ecx, ecx
je 0x4017fc
add edx, edi
lea eax, [ecx + 4]
mov dword [ebp - 4], edx
cmp eax, edx
jae 0x4017fc
cmp byte [ecx], 0x30
lea edx, [ecx + 1]
jne 0x4017fc
cmp byte [edx], 0x82
jne 0x4017fc
movzx ecx, byte [edx + 1]
movzx eax, byte [edx + 2]
shl ecx, 8
add eax, 0x13
add eax, ecx
and eax, 0xffffff8
je 0x4017fc
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], esi
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
lea ecx, [eax + esi]
mov dword [ebp - 8], ecx
cmp ecx, dword [ebp - 4]
ja 0x4017fc
cmp eax, 0xc
jl 0x4017fc
lea eax, [ecx - 0xc]
mov dword [ebp - 0xc], eax
jmp 0x40162a
cmp esi, dword [ebp - 0xc]
je 0x4017fc
inc esi
push 0xc
push esi
push str.Gact2.0Omaha
call fcn.00416c64
add esp, 0xc
test eax, eax
jne 0x401620
cmp esi, dword [ebp - 8]
jae 0x4017fc
movzx ecx, byte [esi + 0xc]
mov eax, 0x100
imul ecx, eax
movzx eax, byte [esi + 0xd]
add cx, ax
movzx eax, cx
test ax, ax
je 0x4017fc
add eax, 1
mov dword [ebp - 8], eax
je 0x4017fc
cmp eax, 0x10000
jge 0x4017fc
push eax
call fcn.00416b8b
mov dword [ebp - 0xc], eax
mov eax, 0x5a4d
pop ecx
cmp word [edi], ax
jne 0x4017f3
mov edx, dword [edi + 0x3c]
mov ecx, dword [ebp - 0x18]
lea eax, [edx + 0xf8]
cmp ecx, eax
jb 0x4017f3
cmp dword [edx + edi], 0x4550
jne 0x4017f3
movzx eax, word [edx + edi + 4]
mov esi, 0x14c
cmp ax, si
je 0x4016d3
mov esi, 0x8664
cmp ax, si
je 0x4017f3
add edx, 0x98
add edx, edi
mov eax, dword [edx]
test eax, eax
je 0x4017f3
add eax, 0xc
cmp ecx, eax
jb 0x4017f3
test edx, edx
je 0x4017f3
mov esi, dword [edx]
add esi, edi
lea ecx, [esi + 8]
test ecx, ecx
je 0x4017f3
lea eax, [ecx + 4]
cmp eax, dword [ebp - 4]
jae 0x4017f3
cmp byte [ecx], 0x30
lea edx, [ecx + 1]
jne 0x4017f3
cmp byte [edx], 0x82
jne 0x4017f3
movzx ecx, byte [edx + 1]
movzx eax, byte [edx + 2]
shl ecx, 8
add eax, 0x13
add eax, ecx
test eax, 0xffffff8
je 0x4017f3
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x10], esi
mov eax, dword [eax + edi + 0x9c]
mov dword [ebp - 0x14], eax
lea edi, [eax + esi]
cmp edi, dword [ebp - 4]
ja 0x4017f3
cmp eax, 0xc
jl 0x4017f3
push 0xc
push esi
push str.Gact2.0Omaha
call fcn.00416c64
add esp, 0xc
test eax, eax
je 0x40179e
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
lea eax, [edi - 0xc]
cmp esi, eax
je 0x4017f3
push 0xc
inc esi
push esi
push str.Gact2.0Omaha
call fcn.00416c64
add esp, 0xc
test eax, eax
jne 0x401782
cmp esi, edi
jae 0x4017f3
movzx ecx, byte [esi + 0xc]
mov eax, 0x100
imul ecx, eax
movzx eax, byte [esi + 0xd]
add cx, ax
movzx eax, cx
test ax, ax
je 0x4017f3
mov edi, eax
lea eax, [edi + 1]
cmp dword [ebp - 8], eax
jl 0x4017f3
lea eax, [esi + 0xe]
mov esi, dword [ebp - 0xc]
push edi
push eax
push esi
call fcn.004067a0
mov byte [edi + esi], bl
add esp, 0xc
mov al, byte [esi]
mov ecx, esi
jmp 0x4017e8
cmp al, 0x22
je 0x4017f0
inc ecx
mov al, byte [ecx]
test al, al
jne 0x4017e1
mov ebx, esi
jmp 0x4017fc
push esi
jmp 0x4017f6
push dword [ebp - 0xc]
call fcn.004169a1
pop ecx
lea ecx, [ebp - 0x28]
call fcn.00402f92
pop edi
pop esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x28], 0x41dc24
call fcn.00402f92
mov eax, ebx
pop ebx
leave
ret