Function at 0x40281a
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
pushfd
push esi
add esi, 0x278b
or esi, esi
pop esi
jmp 0x40294c
popfd
mov ecx, dword [ebp - 0xc]
pushfd
push ecx
push ebx
mov ebx, ecx
not ecx
or ebx, ecx
pop ebx
pop ecx
jne 0x40285f
inc edi
dec edi
inc esp
dec esp
popfd
mov edx, dword [ebp - 0x10]
cmp dword [edx], 0x4550
pushfd
push edx
push esi
mov esi, edx
not edx
and esi, edx
pop esi
pop edx
je 0x402a47
push eax
pop eax
popfd
movzx edx, word [ecx]
cmp edx, 0x5a4d
pushfd
push esi
push eax
push ebp
mov ebp, esi
or ebp, eax
not ebp
not esi
not eax
and esi, eax
cmp esi, ebp
pop ebp
pop eax
pop esi
je 0x402adc
mov edx, edx
inc edx
dec edx
inc ebx
dec ebx
popfd
pushfd
je 0x402af2
push ebx
push eax
push edx
mov edx, ebx
and ebx, eax
and eax, edx
cmp ebx, eax
pop edx
pop eax
pop ebx
je 0x4028f1
mov ebp, ebp
mov edi, edi
jmp 0x40282d
popfd
ret
popfd
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x10], ecx
pushfd
jmp 0x402842
popfd
cmp dword [ebp + 0x14], 0
pushfd
jmp 0x4029b6
popfd
pushfd
je 0x402a0c
popfd
xor eax, eax
pushfd
push ebx
push ecx
push eax
mov eax, ecx
or eax, edx
and eax, ebx
and ecx, ebx
and ebx, edx
or ebx, ecx
cmp ebx, eax
pop eax
pop ecx
pop ebx
je 0x40296d
add ebx, esi
sub ebx, esi
mov ecx, ecx
popfd
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x10]
mov dword [edx], eax
pushfd
push edx
push ebp
mov ebp, edx
not edx
or ebp, edx
pop ebp
pop edx
jne 0x402af2
push edx
pop edx
push edi
pop edi
popfd
pushfd
jmp 0x402a6c
popfd
pushfd
jmp 0x402a6c
popfd
sub esp, 0x10
pushfd
push ecx
push ebx
mov ecx, ebx
or ecx, ebp
or ecx, esi
or ebx, ebp
or ebx, esi
cmp ebx, ecx
pop ebx
pop ecx
je 0x402ab4
inc eax
dec eax
add ecx, edx
sub ecx, edx
popfd
pushfd
jmp 0x402a6c
popfd
pushfd
je 0x4028ba
popfd
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 8]
mov dword [ecx], edx
pushfd
push ebp
push eax
push ecx
mov ecx, ebp
and ecx, eax
not ebp
not eax
or ebp, eax
not ebp
cmp ebp, ecx
pop ecx
pop eax
pop ebp
je 0x4028ba
push eax
pop eax
mov ebp, ebp
popfd
pushfd
je 0x402a63
popfd
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 4]
mov dword [eax], ecx
pushfd
push edi
push eax
mov eax, edi
not edi
or eax, edi
pop eax
pop edi
jne 0x402a63
mov ebx, ebx
popfd
pushfd
jmp 0x402a6c
popfd
mov eax, dword [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x10], eax
pushfd
jmp 0x402a8a
popfd
mov ecx, dword [ebp - 8]
add ecx, 0xe0
mov dword [ebp - 4], ecx
cmp dword [ebp + 0xc], 0
pushfd
jmp 0x40288a
popfd
pushfd
jne 0x4028a6
popfd
xor eax, eax
pushfd
push esi
push ebp
push ecx
mov ecx, ebp
and ecx, eax
or ecx, esi
or ebp, esi
or esi, eax
and esi, ebp
cmp esi, ecx
pop ecx
pop ebp
pop esi
je 0x4029da
mov edi, edi
popfd
pushfd
je 0x4029ff
popfd
xor eax, eax
pushfd
push esi
or esi, ebx
and esi, ebx
cmp esi, ebx
pop esi
je 0x40290f
mov ecx, ecx
add esi, edi
sub esi, edi
popfd
mov eax, 1
pushfd
jmp 0x402a6c
jmp 0x402afd
popfd
pushfd
je 0x4028aa
push ecx
mov ecx, esi
or ecx, 0
cmp ecx, esi
pop ecx
je 0x402ad3
add eax, ecx
sub eax, ecx
inc ecx
dec ecx
popfd
mov ecx, dword [ebp - 0x10]
add ecx, 0x14
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
movzx eax, word [edx]
cmp eax, 0x10b
pushfd
push eax
push esi
mov esi, eax
not eax
and esi, eax
pop esi
pop eax
je 0x4028c5
add ecx, edx
sub ecx, edx
popfd
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
cmp dword [ebp + 8], 0
pushfd
push eax
mov eax, ecx
or eax, 0
cmp eax, ecx
pop eax
je 0x402a23
mov ebx, ebx
inc ecx
dec ecx
popfd
xor eax, eax
pushfd
jmp 0x402929
popfd
pushfd
jne 0x402ad3
popfd
mov eax, dword [ebp - 0xc]
pushfd
push edi
mov edi, ebp
or edi, 0
cmp edi, ebp
pop edi
je 0x402b14
mov edx, edx
popfd
cmp dword [ebp + 0x10], 0
pushfd
jmp 0x402986
popfd
mov esp, ebp
pop ebp
pushfd
push eax
push edi
mov edi, eax
not eax
and edi, eax
pop edi
pop eax
je 0x4028a8
inc ecx
dec ecx
popfd
mov ecx, dword [eax + 0x3c]
mov edx, dword [ebp + 8]
cmp dword [ecx + edx], 0x4550
pushfd
push eax
lea eax, [eax]
nop dword [eax]
nop dword [eax + eax]
mov eax, edx
and eax, 0
nop
rol esp, 0x20
lea ecx, [ecx]
cmp eax, 0
xchg esi, esi
nop word [eax + eax]
pop eax
je 0x402a71
mov esp, esp