Function at 0x4018fc
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [esp + 8]
sub esp, 0x28
xor edx, edx
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x3c]
mov dword [eax], edx
mov eax, 0x5a4d
mov esi, dword [edi + 0x208]
cmp ax, word [esi]
jne 0x401b12
mov eax, dword [esi + 0x3c]
cmp dword [eax + esi], 0x4550
jne 0x401b12
cmp dword [eax + esi + 0x74], edx
jbe 0x401b12
mov ebx, dword [eax + esi + 0x78]
add ebx, esi
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x30], ecx
cmp ecx, 1
jb 0x401b12
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x401b12
add eax, esi
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x401b12
add eax, esi
mov dword [esp + 0x24], eax
lea eax, [ecx + 1]
push 4
imul eax, eax, 0x88
push 0x3000
push eax
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ebp, eax
mov dword [esp + 0x2c], ebp
test ebp, ebp
je 0x401b12
mov ecx, dword [esp + 0x24]
xor eax, eax
mov dword [esp + 0x14], ecx
xor edx, edx
lea ecx, [ebp + 8]
mov dword [esp + 0x18], eax
mov ebp, ecx
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x24]
sub dword [esp + 0x1c], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], ebp
mov edi, dword [esp + 0x1c]
mov ecx, dword [edi + ecx]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x20], ecx
test ecx, ecx
je 0x401a8f
mov eax, esi
xor ecx, ecx
cdq
add dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
adc ecx, edx
mov dword [ebp - 8], eax
mov eax, dword [esp + 0x10]
mov dword [ebp - 4], ecx
mov byte [ebp], 0
cmp eax, dword [ebx + 0x18]
jae 0x401a48
cmp dword [esp + 0x24], 0
je 0x401a48
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
test eax, eax
je 0x401a44
lea ecx, [eax + esi]
mov eax, ecx
cdq
cmp edx, dword [edi + 0x20c]
jb 0x401a44
ja 0x401a26
cmp eax, dword [edi + 0x208]
jbe 0x401a44
cmp edx, dword [edi + 0x214]
ja 0x401a44
jb 0x401a38
cmp eax, dword [edi + 0x210]
jae 0x401a44
push ecx
push 0x7f
push ebp
call fcn.0041e900
add esp, 0xc
mov eax, dword [esp + 0x10]
cmp byte [ebp], 0
jne 0x401a5f
push eax
push str.func__u
push 0x7f
push ebp
call fcn.004018bc
add esp, 0x10
mov ecx, ebp
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401a64
sub ecx, edx
mov edx, dword [esp + 0x10]
lea eax, [ecx + 5]
mov ecx, dword [esp + 0x40]
add dword [ecx], eax
mov eax, dword [esp + 0x18]
inc eax
add dword [esp + 0x28], 0x88
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x14]
inc edx
add ecx, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
cmp edx, dword [esp + 0x30]
jb 0x4019c4
mov ebp, dword [esp + 0x2c]
push 0x4018ef
push 0x88
push eax
push ebp
call fcn.00428d90
mov ebx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [edi + 0x210]
mov ecx, dword [edi + 0x214]
imul edx, ebx, 0x88
push 4
push 0x3000
mov dword [edx + ebp], eax
mov eax, dword [esp + 0x48]
mov dword [edx + ebp + 4], ecx
mov byte [edx + ebp + 8], 0
add dword [eax], 5
mov eax, dword [eax]
inc eax
push eax
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [esp + 0x40], eax
test eax, eax
jne 0x401b1e
push 0x8000
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret 8
mov esi, eax
test ebx, ebx
je 0x401b68
mov ebp, dword [esp + 0x18]
mov edi, dword [esp + 0x34]
mov eax, dword [edi - 8]
mov ebx, edi
mov dword [esi], eax
lea ecx, [ebx + 1]
mov al, byte [ebx]
inc ebx
test al, al
jne 0x401b36
sub ebx, ecx
lea eax, [esi + 5]
push ebx
push edi
push eax
mov byte [esi + 4], bl
call fcn.0041c6f0
add esi, 5
add esp, 0xc
add esi, ebx
add edi, 0x88
sub ebp, 1
jne 0x401b2c
mov edi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x2c]
xor eax, eax
push 0x8000
push eax
push ebp
mov dword [edi + 0x218], eax
mov dword [edi + 0x21c], eax
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, dword [esp + 0x40]
jmp 0x401b14