Function at 0x413311
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push 0xc
call fcn.00456a38
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x6485d0
push ebx
add ebx, 4
push ebx
push 8
call fcn.00456a38
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.00456a38
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x5000a4
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00410048
pop ebx
mov dword [ebp - 8], 0
mov ebx, dword [0x677858]
call fcn.00403510
push ebx
push ecx
mov eax, dword [ebp + 0xc]
dec eax
jns 0x4133bd
push 4
call fcn.00456a44
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4133d0
push 1
call fcn.00456a44
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov ebx, dword [eax]
call dword [ebx + 4]
push eax
mov ebx, dword [ebp - 4]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00456a3e
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov ebx, dword [0x677858]
call fcn.00403510
push ebx
push ecx
mov eax, dword [ebp + 0xc]
dec eax
jns 0x413419
push 4
call fcn.00456a44
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41342c
push 1
call fcn.00456a44
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [ebp - 8], eax
push 0x50011f
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413477
push 0x31
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x500121
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4134ad
push 0x32
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x500123
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4134e3
push 0x33
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x500125
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413519
push 0x34
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x500127
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x41354f
push 0x35
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x500129
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413585
push 0x36
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x50012b
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4135bb
push 0x37
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x50012d
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4135f1
push 0x38
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x50012f
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413627
push 0x39
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x50011d
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x41365d
push 0x30
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push str.abcdefghijklmnopqrstuvwxyz._
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413693
push 0x41
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e38
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4136c9
push 0x42
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e3a
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4136ff
push 0x43
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e3c
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413735
push 0x44
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e3e
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x41376b
push 0x45
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e40
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4137a1
push 0x46
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e42
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4137d7
push 0x47
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e44
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x41380d
push 0x48
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e46
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413843
push 0x49
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e48
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413879
push 0x4a
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e4a
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4138af
push 0x4b
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e4c
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4138e5
push 0x4c
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e4e
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x41391b
push 0x4d
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e50
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413951
push 0x4e
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e52
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413987
push 0x4f
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e54
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4139bd
push 0x50
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e56
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x4139f3
push 0x51
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e58
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413a29
push 0x52
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e5a
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413a5f
push 0x53
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e5c
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413a95
push 0x54
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e5e
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413acb
push 0x55
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e60
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413b01
push 0x56
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e62
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413b37
push 0x57
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e64
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413b6d
push 0x58
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e66
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413ba3
push 0x59
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e68
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413bd9
push 0x5a
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e6a
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413c0f
push 0xbe
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa0]
jmp 0x413c6f
push 0x648e6c
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.0040395d
add esp, 8
cmp eax, 0
jne 0x413c6f
push 1
push dword [ebp - 8]
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x248]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 0x10
push 0x32
call fcn.00413c85
jmp 0x413c6f
mov ebx, dword [ebp - 4]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00456a3e
add esp, 4
mov esp, ebp
pop ebp
ret 8