Function at 0x40b1ae
Capabilities:
Parse pe header

Disassembly:
jmp 0x536b50
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5cb555
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1200
call fcn.004010a5
mov eax, dword [0x639704]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x113c], ecx
mov dword [ebp - 0x115c], 0
mov ecx, 0x6447c9
call fcn.00407621
push 0x30
push 0
lea eax, [ebp - 0x10d0]
push eax
call sub.VCRUNTIME140D.dll_memset
add esp, 0xc
xorps xmm0, xmm0
movlpd qword [ebp - 0x1168], xmm0
push 0x10
lea ecx, [ebp - 0x10e0]
call fcn.0040690b
lea ecx, [ebp - 0x10e0]
call fcn.00402dab
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x113c]
call fcn.00403bca
mov dword [ebp - 0x1150], eax
mov dword [ebp - 0x114c], edx
jmp 0x536c27
mov ecx, dword [ebp - 0x10d0]
add ecx, dword [ebp - 0x10b8]
mov edx, dword [ebp - 0x10cc]
adc edx, dword [ebp - 0x10b4]
mov dword [ebp - 0x1150], ecx
mov dword [ebp - 0x114c], edx
mov ecx, dword [ebp - 0x113c]
call fcn.00408242
mov dword [ebp - 0x11a0], eax
mov dword [ebp - 0x119c], edx
mov eax, dword [ebp - 0x114c]
cmp eax, dword [ebp - 0x119c]
ja 0x5370a5
jb 0x536c64
mov ecx, dword [ebp - 0x1150]
cmp ecx, dword [ebp - 0x11a0]
jae 0x5370a5
mov edx, dword [ebp - 0x113c]
mov eax, dword [edx]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x116c], ecx
lea edx, [ebp - 0x10d0]
push edx
mov eax, dword [ebp - 0x114c]
push eax
mov ecx, dword [ebp - 0x1150]
push ecx
mov ecx, dword [ebp - 0x113c]
call dword [ebp - 0x116c]
mov dword [ebp - 0x1144], eax
cmp dword [ebp - 0x1144], 0xc000000d
je 0x536cc0
cmp dword [ebp - 0x1144], 0xc0000022
je 0x536cc0
cmp dword [ebp - 0x1144], 0xc000010a
jne 0x536cc7
jmp 0x5370a5
cmp dword [ebp - 0x1144], 0
je 0x536cd5
jmp 0x536c03
cmp dword [ebp - 0x10b0], 0x1000
jne 0x536d14
cmp dword [ebp - 0x10c0], 1
je 0x536d14
mov edx, dword [ebp - 0x10c0]
and edx, 0x100
jne 0x536d14
mov eax, dword [ebp - 0x1168]
cmp eax, dword [ebp - 0x10c8]
jne 0x536d19
mov ecx, dword [ebp - 0x1164]
cmp ecx, dword [ebp - 0x10c4]
jne 0x536d19
jmp 0x536c03
lea ecx, [ebp - 0x1138]
call fcn.00407f31
mov byte [ebp - 4], 1
lea edx, [ebp - 0x1098]
mov dword [ebp - 0x1154], edx
mov dword [ebp - 0x1140], 0
mov dword [ebp - 0x1158], 0
mov eax, dword [ebp - 0x113c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x1170], edx
push 0
push 0x1000
lea eax, [ebp - 0x1098]
push eax
mov ecx, dword [ebp - 0x10c4]
push ecx
mov edx, dword [ebp - 0x10c8]
push edx
mov ecx, dword [ebp - 0x113c]
call dword [ebp - 0x1170]
test eax, eax
je 0x536d99
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1138]
call fcn.0040424b
jmp 0x536c03
mov eax, dword [ebp - 0x1154]
mov ecx, dword [eax + 0x3c]
lea edx, [ebp + ecx - 0x1098]
mov dword [ebp - 0x1140], edx
mov eax, dword [ebp - 0x1140]
mov dword [ebp - 0x1158], eax
mov ecx, dword [ebp - 0x1154]
movzx edx, word [ecx]
cmp edx, 0x5a4d
jne 0x536dda
mov eax, dword [ebp - 0x1140]
cmp dword [eax], 0x4550
je 0x536dee
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1138]
call fcn.0040424b
jmp 0x536c03
mov ecx, dword [ebp - 0x1140]
movzx edx, word [ecx + 0x18]
cmp edx, 0x10b
jne 0x536e1b
mov eax, dword [ebp - 0x1140]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x10f8], ecx
mov dword [ebp - 0x10f4], 0
jmp 0x536e45
mov edx, dword [ebp - 0x1140]
movzx eax, word [edx + 0x18]
cmp eax, 0x20b
jne 0x536e45
mov ecx, dword [ebp - 0x1158]
mov edx, dword [ecx + 0x50]
mov dword [ebp - 0x10f8], edx
mov dword [ebp - 0x10f4], 1
mov eax, dword [ebp - 0x10c8]
mov dword [ebp - 0x1138], eax
mov ecx, dword [ebp - 0x10c4]
mov dword [ebp - 0x1134], ecx
xorps xmm0, xmm0
movlpd qword [ebp - 0x10f0], xmm0
mov byte [ebp - 0x10e8], 0
lea edx, [ebp - 0x1098]
mov dword [ebp - 0x1148], edx
mov eax, dword [ebp - 0x113c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x14]
mov dword [ebp - 0x1174], edx
push 0x1000
mov eax, dword [ebp - 0x1148]
push eax
push 2
mov ecx, dword [ebp - 0x10c4]
push ecx
mov edx, dword [ebp - 0x10c8]
push edx
mov ecx, dword [ebp - 0x113c]
call dword [ebp - 0x1174]
mov dword [ebp - 0x1144], eax
cmp dword [ebp - 0x1144], 0
jne 0x536fcf
mov eax, dword [ebp - 0x113c]
movzx ecx, byte [eax + 0xe]
cmp ecx, 1
jne 0x536f3c
mov edx, dword [ebp - 0x1148]
mov dword [ebp - 0x1178], edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x11a4], esp
mov eax, dword [ebp - 0x1178]
mov edx, dword [eax + 4]
push edx
call fcn.004023fb
lea eax, [ebp - 0x11cc]
push eax
call fcn.004082e2
add esp, 0x20
mov dword [ebp - 0x117c], eax
mov ecx, dword [ebp - 0x117c]
mov dword [ebp - 0x1180], ecx
mov edx, dword [ebp - 0x1180]
push edx
lea ecx, [ebp - 0x1114]
call fcn.0040a9c0
lea ecx, [ebp - 0x11cc]
call fcn.00409881
jmp 0x536f94
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x11a8], esp
mov eax, dword [ebp - 0x1148]
mov edx, dword [eax + 8]
push edx
call fcn.004023fb
lea eax, [ebp - 0x11e8]
push eax
call fcn.004082e2
add esp, 0x20
mov dword [ebp - 0x1184], eax
mov ecx, dword [ebp - 0x1184]
mov dword [ebp - 0x1188], ecx
mov edx, dword [ebp - 0x1188]
push edx
lea ecx, [ebp - 0x1114]
call fcn.0040a9c0
lea ecx, [ebp - 0x11e8]
call fcn.00409881
lea eax, [ebp - 0x1114]
push eax
lea ecx, [ebp - 0x1204]
push ecx
call fcn.0040b5f0
add esp, 8
mov dword [ebp - 0x118c], eax
mov edx, dword [ebp - 0x118c]
push edx
lea ecx, [ebp - 0x1130]
call fcn.0040a9c0
lea ecx, [ebp - 0x1204]
call fcn.00409881
jmp 0x53702c
push 0x80
push 0
lea eax, [ebp - 0x98]
push eax
call sub.VCRUNTIME140D.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x1134]
push ecx
mov edx, dword [ebp - 0x1138]
push edx
push 0x5f8a80
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x98]
push ecx
lea ecx, [ebp - 0x1114]
call fcn.00408611
lea edx, [ebp - 0x1114]
push edx
lea ecx, [ebp - 0x1130]
call fcn.00404e2b
lea eax, [ebp - 0x1138]
push eax
lea ecx, [ebp - 0x11b0]
push ecx
call fcn.00401f91
add esp, 8
mov dword [ebp - 0x1190], eax
mov edx, dword [ebp - 0x1190]
mov dword [ebp - 0x1194], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x1194]
push eax
lea ecx, [ebp - 0x10e0]
call fcn.00408deb
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11b0]
call fcn.00401aaa
mov ecx, dword [ebp - 0x10c8]
mov dword [ebp - 0x1168], ecx
mov edx, dword [ebp - 0x10c4]
mov dword [ebp - 0x1164], edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1138]
call fcn.0040424b
jmp 0x536c03
lea eax, [ebp - 0x10e0]
push eax
mov ecx, dword [ebx + 8]
call fcn.00402aef
mov ecx, dword [ebp - 0x115c]
or ecx, 1
mov dword [ebp - 0x115c], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10e0]
call fcn.00403f4e
mov eax, dword [ebx + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00406c44
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4