Function at 0x4942f0
Capabilities:
Parse pe header

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0x98
mov eax, dword [0x4b600c]
xor eax, ebp
mov dword [ebp + 0x70], eax
mov eax, dword [ebp + 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x20], eax
mov ecx, 0x41
mov word [ebp - 0x10], cx
mov edx, 0x42
mov word [ebp - 0xe], dx
mov eax, 0x43
mov word [ebp - 0xc], ax
mov ecx, 0x44
mov word [ebp - 0xa], cx
mov edx, 0x45
mov word [ebp - 8], dx
mov eax, 0x46
mov word [ebp - 6], ax
mov ecx, 0x47
mov word [ebp - 4], cx
mov edx, 0x48
mov word [ebp - 2], dx
mov eax, 0x49
mov word [ebp], ax
mov ecx, 0x4a
mov word [ebp + 2], cx
mov edx, 0x4b
mov word [ebp + 4], dx
mov eax, 0x4c
mov word [ebp + 6], ax
mov ecx, 0x4d
mov word [ebp + 8], cx
mov edx, 0x4e
mov word [ebp + 0xa], dx
mov eax, 0x4f
mov word [ebp + 0xc], ax
mov ecx, 0x50
mov word [ebp + 0xe], cx
mov edx, 0x51
mov word [ebp + 0x10], dx
mov eax, 0x52
mov word [ebp + 0x12], ax
mov ecx, 0x53
mov word [ebp + 0x14], cx
mov edx, 0x54
mov word [ebp + 0x16], dx
mov eax, 0x55
mov word [ebp + 0x18], ax
mov ecx, 0x56
mov word [ebp + 0x1a], cx
mov edx, 0x57
mov word [ebp + 0x1c], dx
mov eax, 0x58
mov word [ebp + 0x1e], ax
mov ecx, 0x59
mov word [ebp + 0x20], cx
mov edx, 0x5a
mov word [ebp + 0x22], dx
mov eax, 0x61
mov word [ebp + 0x24], ax
mov ecx, 0x62
mov word [ebp + 0x26], cx
mov edx, 0x63
mov word [ebp + 0x28], dx
mov eax, 0x64
mov word [ebp + 0x2a], ax
mov ecx, 0x65
mov word [ebp + 0x2c], cx
mov edx, 0x66
mov word [ebp + 0x2e], dx
mov eax, 0x67
mov word [ebp + 0x30], ax
mov ecx, 0x68
mov word [ebp + 0x32], cx
mov edx, 0x69
mov word [ebp + 0x34], dx
mov eax, 0x6a
mov word [ebp + 0x36], ax
mov ecx, 0x6b
mov word [ebp + 0x38], cx
mov edx, 0x6c
mov word [ebp + 0x3a], dx
mov eax, 0x6d
mov word [ebp + 0x3c], ax
mov ecx, 0x6e
mov word [ebp + 0x3e], cx
mov edx, 0x6f
mov word [ebp + 0x40], dx
mov eax, 0x70
mov word [ebp + 0x42], ax
mov ecx, 0x71
mov word [ebp + 0x44], cx
mov edx, 0x72
mov word [ebp + 0x46], dx
mov eax, 0x73
mov word [ebp + 0x48], ax
mov ecx, 0x74
mov word [ebp + 0x4a], cx
mov edx, 0x75
mov word [ebp + 0x4c], dx
mov eax, 0x76
mov word [ebp + 0x4e], ax
mov ecx, 0x77
mov word [ebp + 0x50], cx
mov edx, 0x78
mov word [ebp + 0x52], dx
mov eax, 0x79
mov word [ebp + 0x54], ax
mov ecx, 0x7a
mov word [ebp + 0x56], cx
mov edx, 0x30
mov word [ebp + 0x58], dx
mov eax, 0x31
mov word [ebp + 0x5a], ax
mov ecx, 0x32
mov word [ebp + 0x5c], cx
mov edx, 0x33
mov word [ebp + 0x5e], dx
mov eax, 0x34
mov word [ebp + 0x60], ax
mov ecx, 0x35
mov word [ebp + 0x62], cx
mov edx, 0x36
mov word [ebp + 0x64], dx
mov eax, 0x37
mov word [ebp + 0x66], ax
mov ecx, 0x38
mov word [ebp + 0x68], cx
mov edx, 0x39
mov word [ebp + 0x6a], dx
mov eax, 0x2b
mov word [ebp + 0x6c], ax
mov ecx, 0x2f
mov word [ebp + 0x6e], cx
mov dword [ebp - 0x1c], 0
jmp 0x494564
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x20]
jge 0x4945bd
mov byte [ebp - 0x11], 0
mov dword [ebp - 0x24], 0x40
mov dword [ebp - 0x18], 0
jmp 0x494589
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0x24]
jae 0x4945af
mov eax, dword [ebp - 0x18]
movzx ecx, word [ebp + eax*2 - 0x10]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0x7c]
movzx edx, word [eax + edx*2]
cmp ecx, edx
jne 0x4945ad
mov byte [ebp - 0x11], 1
jmp 0x4945af
jmp 0x494580
movzx eax, byte [ebp - 0x11]
test eax, eax
jne 0x4945bb
xor al, al
jmp 0x4945bf
jmp 0x49455b
mov al, 1
mov ecx, dword [ebp + 0x70]
xor ecx, ebp
call fcn.0043ace1
add ebp, 0x74
mov esp, ebp
pop ebp
ret 4