Function at 0x40b53d
Capabilities:
Parse pe header

Disassembly:
push ebp
push edi
push ebx
push esi
mov ebp, esp
sub esp, 0x120
push 1
push 0x421b79
push 0x421b7a
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [0x41df34]
cmp word [eax], 0x5a4d
je 0x40b589
push 0
push 0x421b85
push 0x421b8d
push dword [ebp + 0x14]
call fcn.0040b4c4
xor eax, eax
dec eax
mov esp, ebp
pop esi
pop ebx
pop edi
pop ebp
ret 4
mov dword [ebp - 0x120], 0x5a4d
push 0
push 0x421b9c
push 0x421b9f
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [0x41df34]
mov edi, dword [eax + 0x3c]
add edi, dword [0x41df34]
cmp dword [edi], 0x4550
je 0x40b5dd
push 0
push 0x421bae
push 0x421bb6
push dword [ebp + 0x14]
call fcn.0040b4c4
xor eax, eax
dec eax
mov esp, ebp
pop esi
pop ebx
pop edi
pop ebp
ret 4
push 0
push 0x421bc0
push 0x421bc3
push dword [ebp + 0x14]
call fcn.0040b4c4
push 0
push 0x421bcd
push 0x421bce
push dword [ebp + 0x14]
call fcn.0040b4c4
push 1
push 0x421bcf
push 0x421bd0
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ax, word [edi + 4]
and eax, 0xffff
cmp eax, 0x14c
jne 0x40b630
mov eax, 0x41ad5c
jmp 0x40b652
cmp eax, 0x200
jne 0x40b63e
mov eax, 0x41ad60
jmp 0x40b652
cmp eax, 0x8664
jne 0x40b64c
mov eax, 0x41ad6a
jmp 0x40b652
push 0x421be2
pop eax
push 0
push eax
push 0x421bea
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ax, word [edi + 6]
and eax, 0xffff
push eax
push 0x421bf7
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x421bfa
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 8]
push ebp
add dword [esp], 0xfffffff0
push eax
call fcn.0040c097
push ebp
add dword [esp], 0xffffffe0
push ebp
add dword [esp], 0xfffffff0
call sub.KERNEL32.dll_FileTimeToSystemTime
push 0x100
push ebp
add dword [esp], 0xfffffee0
push 0x421c0d
push ebp
add dword [esp], 0xffffffe0
push 0
push 0x800
call sub.KERNEL32.dll_GetDateFormatA
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x421c1b
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x10]
push eax
push 0x421c26
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x421c29
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x14]
and eax, 0xffff
push eax
push 0x421c3b
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x421c3e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x16]
and eax, 0xffff
mov ebx, eax
test ebx, 1
je 0x40b781
push 0
push 0x421c56
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 2
je 0x40b7a4
push 0
push 0x421c88
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 4
je 0x40b7c7
push 0
push 0x421ccd
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 8
je 0x40b7ea
push 0
push 0x421cf6
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x10
je 0x40b80d
push 0
push 0x421d1c
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x20
je 0x40b830
push 0
push 0x421d3f
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x80
je 0x40b853
push 0
push 0x421d76
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x100
je 0x40b876
push 0
push 0x421d96
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x200
je 0x40b899
push 0
push 0x421db6
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x400
je 0x40b8bc
push 0
push 0x421df1
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x800
je 0x40b8df
push 0
push 0x421e35
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x1000
je 0x40b902
push 0
push 0x421e76
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x2000
je 0x40b925
push 0
push 0x421e82
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x4000
je 0x40b948
push 0
push 0x421e8b
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0
test ebx, 0x8000
je 0x40b964
push 0
push 0x421ebf
push 0x41ad2e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov byte [0x41ad2e], 0x43
push 0
push 0x421eda
push 0x421edb
push dword [ebp + 0x14]
call fcn.0040b4c4
push 1
push 0x421edc
push 0x421edd
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ax, word [edi + 0x18]
and eax, 0xffff
cmp eax, 0x10b
jne 0x40b9be
mov esi, 0
push 0
push 0x421ef3
push 0x421f1a
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40ba02
cmp eax, 0x20b
jne 0x40b9e0
mov esi, 4
push 0
push 0x421f20
push 0x421f47
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40ba02
cmp eax, 0x107
jne 0x40ba02
mov esi, 0
push 0
push 0x421f4d
push 0x421f66
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40ba02
mov al, byte [edi + 0x1a]
and eax, 0xff
push eax
push eax
push 0x421f6c
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0x10
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x421f79
push dword [ebp + 0x14]
call fcn.0040b4c4
mov al, byte [edi + 0x1b]
and eax, 0xff
push eax
push eax
push 0x421f8e
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0x10
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x421f9b
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x1c]
push eax
push 0x421fb0
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x421fb9
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x20]
push eax
push 0x421fc6
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x421fcf
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x24]
push eax
push 0x421fe8
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x421ff1
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x2c]
push eax
push 0x42200c
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x422014
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x30]
push eax
push 0x422021
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x422029
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x34]
push eax
push 0x422036
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x42203e
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x38]
push eax
push 0x422049
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x422051
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x3c]
push eax
push 0x422063
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x42206b
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ax, word [edi + 0x40]
and eax, 0xffff
push eax
push 0x42207a
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x42207d
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ax, word [edi + 0x42]
and eax, 0xffff
push eax
push 0x42208e
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x422091
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ax, word [edi + 0x48]
and eax, 0xffff
push eax
push 0x4220a2
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x4220a5
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ax, word [edi + 0x4a]
and eax, 0xffff
push eax
push 0x4220bd
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x4220c0
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x4c]
push eax
push 0x4220d8
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x4220db
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x50]
push eax
push 0x4220ef
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x4220f2
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x54]
push eax
push 0x422100
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x422103
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x58]
push eax
push 0x422113
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x42211b
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ax, word [edi + 0x5c]
and eax, 0xff
cmp eax, 1
jne 0x40bdad
push 0
push 0x422124
push 0x41ad52
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40be69
cmp eax, 3
jne 0x40bdcb
push 0
push 0x42213b
push 0x41ad52
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40be69
cmp eax, 2
jne 0x40bde9
push 0
push 0x422172
push 0x41ad52
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40be69
cmp eax, 5
jne 0x40be04
push 0
push 0x4221a4
push 0x41ad52
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40be69
cmp eax, 7
jne 0x40be1f
push 0
push 0x4221b8
push 0x41ad52
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40be69
cmp eax, 9
jne 0x40be3a
push 0
push 0x4221cd
push 0x41ad52
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40be69
cmp eax, 0xe
jne 0x40be55
push 0
push 0x4221df
push 0x41ad52
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40be69
push 0
push 0x4221eb
push 0x41ad52
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ax, word [edi + 0x5e]
cmp ax, 0x2000
jne 0x40be89
push 0
push 0x4221fe
push 0x41ad3e
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40beb9
cmp ax, 0
je 0x40bea5
push 0
push 0x42220c
push 0x41ad3e
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40beb9
push 0
push 0x422215
push 0x41ad3e
push dword [ebp + 0x14]
call fcn.0040b4c4
cmp esi, 0
jne 0x40bf87
mov eax, dword [edi + 0x60]
push eax
push 0x422223
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x422231
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x64]
push eax
push 0x42223f
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x42224d
push dword [ebp + 0x14]
call fcn.0040b4c4
mov eax, dword [edi + 0x68]
push eax
push 0x42225a
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x422268
push dword [ebp + 0x14]
call fcn.0040b4c4
mov ecx, dword [edi + 0x6c]
push eax
push 0x422275
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x422283
push dword [ebp + 0x14]
call fcn.0040b4c4
jmp 0x40c06b
mov eax, dword [esi + edi + 0x60]
mov ecx, dword [esi + edi + 0x64]
push eax
push ecx
push 0x42228f
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0x10
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x4222a2
push dword [ebp + 0x14]
call fcn.0040b4c4
add esi, 4
mov eax, dword [esi + edi + 0x64]
mov ecx, dword [esi + edi + 0x68]
push eax
push ecx
push 0x4222b0
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0x10
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x4222c3
push dword [ebp + 0x14]
call fcn.0040b4c4
add esi, 4
mov eax, dword [esi + edi + 0x68]
mov ecx, dword [esi + edi + 0x6c]
push eax
push ecx
push 0x4222d0
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0x10
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x4222e3
push dword [ebp + 0x14]
call fcn.0040b4c4
add esi, 4
mov eax, dword [esi + edi + 0x6c]
mov ecx, dword [esi + edi + 0x70]
push eax
push ecx
push 0x4222f0
push ebp
add dword [esp], 0xfffffee0
call sub.USER32.dll_wsprintfA
add esp, 0x10
push 0
push ebp
add dword [esp], 0xfffffee0
push 0x422303
push dword [ebp + 0x14]
call fcn.0040b4c4
add esi, 4
push dword [0x41df34]
call sub.KERNEL32.dll_UnmapViewOfFile
push dword [0x41df30]
call sub.KERNEL32.dll_CloseHandle
push dword [0x41df2c]
call sub.KERNEL32.dll_CloseHandle
xor eax, eax
mov esp, ebp
pop esi
pop ebx
pop edi
pop ebp
ret 4