Function at 0x41195c
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18c
mov eax, dword [0x46c004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x44]
push esi
push edi
xor esi, esi
push 0x40
push esi
push eax
mov dword [ebp - 0x168], esi
mov dword [ebp - 0x184], esi
mov dword [ebp - 0x180], esi
call fcn.00435d90
push 0xf8
lea eax, [ebp - 0x13c]
push esi
push eax
call fcn.00435d90
add esp, 0x18
mov dword [ebp - 0x174], esi
xor eax, eax
mov dword [ebp - 0x178], esi
lea edi, [ebp - 0x164]
mov dword [ebp - 0x16c], esi
push 0xa
pop ecx
rep stosd dword es:[edi], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebx], ecx
cmp ecx, 0xffffffff
jne 0x411a09
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x4119ea
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x4119f1
mov esi, 0x80004005
push esi
push 0x3a
push 0x44ff44
call fcn.00409cba
push 0x44ff74
push esi
jmp 0x4120c2
mov eax, dword [ebp + 0x10]
cmp eax, 0xffffffff
jne 0x411a13
mov eax, ecx
mov edi, dword [0x44c200]
push esi
push esi
push esi
push esi
push ecx
mov dword [ebx + 4], eax
call edi
test eax, eax
jne 0x411a59
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411a3e
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411a45
mov esi, 0x80004005
push esi
push 0x43
push 0x44ff44
call fcn.00409cba
push 0x44ffa4
jmp 0x411a03
push esi
mov esi, dword [0x44c1fc]
lea eax, [ebp - 0x168]
push eax
push 0x40
lea eax, [ebp - 0x44]
push eax
push dword [ebx]
call esi
test eax, eax
jne 0x411aaa
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411a8c
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411a93
mov esi, 0x80004005
push esi
push 0x49
push 0x44ff44
call fcn.00409cba
push 0x44ffc8
jmp 0x411a03
cmp dword [ebp - 0x168], 0x40
jb 0x4120a8
mov eax, 0x5a4d
cmp ax, word [ebp - 0x44]
jne 0x4120a8
mov eax, dword [ebp - 8]
push 0
push 0
cdq
push edx
push eax
push dword [ebx]
call edi
test eax, eax
jne 0x411b0d
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411aef
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411af6
mov esi, 0x80004005
push esi
push 0x59
push 0x44ff44
call fcn.00409cba
push 0x450018
jmp 0x411a03
push 0
lea eax, [ebp - 0x168]
push eax
push 0x18
lea eax, [ebp - 0x13c]
push eax
push dword [ebx]
call esi
test eax, eax
jne 0x411b5c
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411b3e
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411b45
mov esi, 0x80004005
push esi
push 0x5f
push 0x44ff44
call fcn.00409cba
push 0x450038
jmp 0x411a03
cmp dword [ebp - 0x168], 0x18
jb 0x41208d
cmp dword [ebp - 0x13c], 0x4550
jne 0x41208d
mov eax, dword [ebp - 8]
lea ecx, [eax + 0x58]
add eax, 0x98
mov dword [ebp - 0x188], ecx
xor ecx, ecx
push ecx
push ecx
push ecx
push eax
push dword [ebx]
mov dword [ebp - 0x18c], eax
call edi
test eax, eax
jne 0x411bd3
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411bb5
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411bbc
mov esi, 0x80004005
push esi
push 0x6f
push 0x44ff44
call fcn.00409cba
push 0x450084
jmp 0x411a03
push 0
lea eax, [ebp - 0x168]
push eax
push 4
lea eax, [ebp - 0x174]
push eax
push dword [ebx]
call esi
test eax, eax
jne 0x411c22
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411c04
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411c0b
mov esi, 0x80004005
push esi
push 0x74
push 0x44ff44
call fcn.00409cba
push 0x4500a4
jmp 0x411a03
push 0
lea eax, [ebp - 0x168]
push eax
push 4
lea eax, [ebp - 0x178]
push eax
push dword [ebx]
call esi
test eax, eax
jne 0x411c71
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411c53
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411c5a
mov esi, 0x80004005
push esi
push 0x79
push 0x44ff44
call fcn.00409cba
push 0x4500c8
jmp 0x411a03
movzx ecx, word [ebp - 0x128]
mov eax, dword [ebp - 8]
add ecx, 0x18
add eax, ecx
xor ecx, ecx
push ecx
push ecx
push ecx
push eax
push dword [ebx]
call edi
test eax, eax
jne 0x411cc6
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411ca5
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411cac
mov esi, 0x80004005
push esi
push 0x84
push 0x44ff44
call fcn.00409cba
push 0x4500e8
jmp 0x411a03
xor edi, edi
lea eax, [ebp - 0x168]
push edi
push eax
push 0x28
lea eax, [ebp - 0x164]
mov dword [ebp - 0x17c], edi
push eax
push dword [ebx]
call esi
test eax, eax
je 0x41204e
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x168], 0x28
jb 0x412029
lea eax, [ebp - 0x164]
cmp dword [eax], 0x7869772e
jne 0x411d12
cmp dword [eax + 4], 0x6e727562
je 0x411d55
movzx eax, word [ebp - 0x136]
cmp ecx, eax
jae 0x411fec
push 0
lea eax, [ebp - 0x168]
inc edi
push eax
push 0x28
lea eax, [ebp - 0x164]
mov dword [ebp - 0x17c], edi
push eax
push dword [ebx]
inc ecx
mov dword [ebp - 0x170], ecx
call esi
test eax, eax
je 0x41204e
mov ecx, dword [ebp - 0x170]
jmp 0x411cee
cmp dword [ebp - 0x154], 0x34
jae 0x411d85
mov edi, 0x8007000d
push edi
push 0xac
push 0x44ff44
mov esi, edi
call fcn.00409cba
push dword [ebp - 0x154]
push 0x4501a4
jmp 0x41204b
push 1
push dword [ebp - 0x154]
call fcn.00409de1
mov edi, eax
mov dword [ebp - 0x16c], edi
test edi, edi
jne 0x411dc0
mov ebx, 0x8007000e
push ebx
push 0xb1
push 0x44ff44
mov esi, ebx
call fcn.00409cba
push 0x4501d4
push ebx
jmp 0x4120c2
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x150]
push dword [ebx]
call dword [0x44c200]
test eax, eax
jne 0x411e15
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411dee
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411df5
mov esi, 0x80004005
push esi
push 0xb7
push 0x44ff44
call fcn.00409cba
push 0x450084
push esi
call 0x446f1d
jmp 0x412014
mov eax, dword [ebp - 0x150]
add eax, 0x1c
push 0
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x168]
push eax
push dword [ebp - 0x154]
push edi
push dword [ebx]
call esi
test eax, eax
jne 0x411e71
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x411e53
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x411e5a
mov esi, 0x80004005
push esi
push 0xc0
push 0x44ff44
call fcn.00409cba
push 0x450200
jmp 0x411e0a
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x168]
jbe 0x411ea0
mov edi, 0x8007000d
push edi
push 0xc5
push 0x44ff44
mov esi, edi
call fcn.00409cba
push 0x450220
jmp 0x412008
cmp dword [edi + 4], 2
je 0x411edf
mov edi, 0x8007000d
push edi
push 0xcc
push 0x44ff44
mov esi, edi
call fcn.00409cba
mov eax, dword [ebp - 0x16c]
push dword [eax + 4]
push 0x450248
push edi
call 0x446f1d
mov edi, dword [ebp - 0x16c]
add esp, 0xc
jmp 0x412016
lea eax, [ebp - 0x184]
push eax
push dword [ebx + 4]
call 0x44b69d
mov esi, eax
test esi, esi
jns 0x411efe
push 0x450280
jmp 0x411e0a
mov edx, dword [edi + 0x18]
mov dword [ebx + 8], edx
cmp dword [edi + 0x20], 0
je 0x411f12
mov eax, dword [edi + 0x24]
add eax, dword [edi + 0x20]
jmp 0x411f2b
mov ecx, dword [ebp - 0x174]
test ecx, ecx
je 0x411f26
mov eax, dword [ebp - 0x178]
add eax, ecx
jmp 0x411f2b
mov eax, dword [edi + 0x30]
add eax, edx
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x184]
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x180]
mov dword [ebx + 0x14], eax
mov eax, dword [ebp - 0x188]
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp - 0x170]
mov dword [ebx + 0x20], eax
mov eax, dword [edi + 0x1c]
mov dword [ebx + 0x24], eax
mov eax, dword [edi + 0x20]
mov dword [ebx + 0x28], eax
mov eax, dword [edi + 0x24]
mov dword [ebx + 0x2c], eax
mov eax, dword [edi + 0x28]
mov dword [ebx + 0x30], eax
mov eax, dword [edi + 0x2c]
mov dword [ebx + 0x34], eax
push 1
shl eax, 2
push eax
call fcn.00409de1
mov ecx, eax
mov dword [ebx + 0x38], ecx
test ecx, ecx
jne 0x411faf
mov ebx, 0x8007000e
push ebx
push 0xef
push 0x44ff44
mov esi, ebx
call fcn.00409cba
push 0x4502a4
push ebx
jmp 0x411e0b
mov eax, dword [ebx + 0x34]
shl eax, 2
push eax
lea eax, [edi + 0x30]
push eax
push ecx
call fcn.00435810
add esp, 0xc
lea eax, [edi + 8]
push eax
call fcn.004116d9
mov esi, eax
test esi, esi
jns 0x412016
push esi
push 0xf5
push 0x44ff44
call fcn.00409cba
push 0x4502d4
jmp 0x411e0a
mov edi, 0x8007000d
push edi
push 0xa0
push 0x44ff44
mov esi, edi
call fcn.00409cba
push 0x450184
push edi
call 0x446f1d
mov edi, dword [ebp - 0x16c]
pop ecx
pop ecx
test edi, edi
je 0x4120c9
push edi
call fcn.00409ec6
jmp 0x4120c9
mov edi, 0x8007000d
push edi
push 0x92
push 0x44ff44
mov esi, edi
call fcn.00409cba
push dword [ebp - 0x17c]
push 0x450140
push edi
jmp 0x412083
call dword [0x44c0f4]
mov esi, eax
test esi, esi
jle 0x412065
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x41206c
mov esi, 0x80004005
push esi
push 0x8d
push 0x44ff44
call fcn.00409cba
push edi
push 0x450110
push esi
call 0x446f1d
add esp, 0xc
jmp 0x4120c9
mov edi, 0x8007000d
push edi
push 0x64
push 0x44ff44
mov esi, edi
call fcn.00409cba
push 0x450054
jmp 0x4120c1
mov edi, 0x8007000d
push edi
push 0x4e
push 0x44ff44
mov esi, edi
call fcn.00409cba
push 0x44ffe4
push edi
call 0x446f1d
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004344be
mov esp, ebp
pop ebp
ret 0xc