Function at 0x4049c0
Capabilities:
Parse pe header

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x1c
mov edx, dword [eax + 0xc]
movzx eax, byte [edx]
cmp al, 0x4c
je 0x404cf0
cmp al, 0x54
je 0x404d00
cmp al, 0x73
je 0x404a38
cmp al, 0x66
je 0x404a98
lea ecx, [eax - 0x30]
cmp cl, 9
jbe 0x404a07
cmp al, 0x6f
jne 0x404b30
cmp byte [edx + 1], 0x6e
jne 0x404a4c
add edx, 2
mov dword [ebx + 0xc], edx
xor ecx, ecx
xor edx, edx
mov eax, ebx
call fcn.00404370
mov esi, eax
test eax, eax
je 0x404ce0
mov eax, dword [ebx + 0xc]
cmp byte [eax], 0x49
je 0x404c40
add esp, 0x1c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
movzx eax, byte [edx + 1]
cmp al, 0x72
je 0x404bf0
cmp al, 0x70
je 0x404ea8
mov eax, ebx
call fcn.004041a0
mov esi, eax
test eax, eax
je 0x404ce0
mov eax, dword [eax]
cmp eax, 0x33
je 0x404b90
cmp eax, 0x34
je 0x404d50
cmp eax, 0x35
jne 0x404ce0
mov eax, dword [ebx + 0xc]
cmp byte [eax], 0x5f
je 0x404e40
mov eax, ebx
call fcn.004049c0
jmp 0x404bd0
cmp byte [edx + 1], 0x70
jne 0x404a4c
lea eax, [edx + 2]
mov dword [ebx + 0xc], eax
movzx eax, byte [edx + 2]
cmp al, 0x54
je 0x404e98
cmp al, 0x5f
je 0x404e30
cmp al, 0x6e
je 0x404ce0
mov eax, ebx
call fcn.00402840
mov ecx, eax
add ecx, 1
js 0x404ce0
mov edx, dword [ebx + 0xc]
cmp byte [edx], 0x5f
jne 0x404ce0
add edx, 1
mov dword [ebx + 0xc], edx
cmp ecx, 0x7fffffff
je 0x404ce0
lea edx, [eax + 2]
mov eax, dword [ebx + 0x14]
cmp eax, dword [ebx + 0x18]
jge 0x404ce0
mov ecx, dword [ebx + 0x10]
lea esi, [eax + eax*4]
add eax, 1
lea esi, [ecx + esi*4]
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [ebx + 0x14], eax
mov dword [esi], 6
mov dword [esi + 0xc], edx
jmp 0x404a28
cmp al, 0x69
je 0x404b3c
cmp al, 0x74
jne 0x404d10
cmp byte [edx + 1], 0x6c
jne 0x404a4c
add edx, 2
xor esi, esi
mov dword [ebx + 0xc], edx
cmp al, 0x74
je 0x404f58
cmp byte [edx], 0
je 0x404ce0
cmp byte [edx + 1], 0
je 0x404ce0
mov edx, 0x45
mov eax, ebx
call fcn.00405170
mov ecx, esi
mov edx, 0x32
mov dword [esp], eax
mov eax, ebx
call fcn.004026c0
mov esi, eax
jmp 0x404a28
mov edx, dword [esi + 0xc]
mov edi, dword [edx]
mov eax, dword [edx + 8]
sub eax, 2
add dword [ebx + 0x2c], eax
movzx eax, byte [edi]
cmp eax, 0x73
jne 0x404c68
cmp byte [edi + 1], 0x74
jne 0x404c68
cmp byte [edi + 2], 0
jne 0x404c68
mov eax, ebx
call fcn.004034c0
lea esi, cs:[esi]
lea esi, [esi]
mov dword [esp], eax
mov ecx, esi
mov edx, 0x38
mov eax, ebx
call fcn.004026c0
mov esi, eax
jmp 0x404a28
lea eax, [edx + 2]
mov dword [ebx + 0xc], eax
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x404c1c
movzx eax, byte [edx + 2]
cmp al, 0x55
jg 0x4050f8
cmp al, 0x42
jg 0x405079
sub eax, 0x30
cmp al, 9
jbe 0x40508a
mov eax, ebx
call fcn.004034c0
mov edx, eax
xor ecx, ecx
mov eax, ebx
call fcn.00404370
mov esi, eax
mov eax, dword [ebx + 0xc]
cmp byte [eax], 0x49
jne 0x404a28
lea esi, [esi]
add eax, 1
mov dword [ebx + 0xc], eax
mov eax, ebx
call fcn.00405410
mov ecx, esi
mov edx, 4
mov dword [esp], eax
mov eax, ebx
call fcn.004026c0
mov esi, eax
jmp 0x404a28
mov ebp, dword [edx + 0xc]
cmp ebp, 2
je 0x404d90
jg 0x404ed8
test ebp, ebp
je 0x404d6d
cmp ebp, 1
jne 0x404ce0
movzx edx, byte [edi]
cmp dl, 0x6d
je 0x404e60
cmp dl, 0x70
je 0x404e60
xor ebp, ebp
cmp eax, 0x73
jne 0x404e88
cmp byte [edi + 1], 0x50
jne 0x404e88
cmp byte [edi + 2], 0
jne 0x404e88
mov eax, ebx
call fcn.00405410
test ebp, ebp
je 0x404bd0
mov dword [esp], eax
mov ecx, eax
mov edx, 0x3a
mov eax, ebx
call fcn.004026c0
jmp 0x404bd0
xor esi, esi
jmp 0x404a28
add esp, 0x1c
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.00406340
add esp, 0x1c
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.00402f70
cmp al, 0x75
jne 0x404a4c
add edx, 1
mov eax, ebx
mov dword [ebx + 0xc], edx
call fcn.004030d0
mov esi, eax
mov eax, ebx
call fcn.00405410
mov ecx, esi
mov edx, 0x40
mov dword [esp], eax
mov eax, ebx
call fcn.004026c0
mov esi, eax
jmp 0x404a28
mov eax, dword [esi + 0xc]
cmp eax, 1
je 0x404a86
cmp eax, 3
je 0x404ce0
test eax, eax
jne 0x404ce0
mov dword [esp], 0
mov ecx, esi
mov edx, 0x37
mov eax, ebx
call fcn.004026c0
mov esi, eax
jmp 0x404a28
cmp byte [edi + 1], 0x63
movzx edx, byte [edi]
je 0x4050b3
cmp dl, 0x66
je 0x40511f
cmp eax, 0x64
jne 0x405105
cmp byte [edi + 1], 0x69
jne 0x405105
cmp byte [edi + 2], 0
jne 0x405105
xor ecx, ecx
xor edx, edx
mov eax, ebx
call fcn.00404370
mov ebp, eax
movzx eax, byte [edi]
cmp eax, 0x63
jne 0x405000
cmp byte [edi + 1], 0x6c
jne 0x405000
cmp byte [edi + 2], 0
jne 0x405000
mov edx, 0x45
mov eax, ebx
call fcn.00405170
mov edi, eax
mov dword [esp], edi
mov ecx, ebp
mov edx, 0x3a
mov eax, ebx
call fcn.004026c0
mov ecx, esi
mov edx, 0x39
mov dword [esp], eax
mov eax, ebx
call fcn.004026c0
mov esi, eax
jmp 0x404a28
add edx, 3
mov dword [ebx + 0xc], edx
mov edx, 1
jmp 0x404af3
add eax, 1
mov edx, 0x45
mov dword [ebx + 0xc], eax
mov eax, ebx
call fcn.00405170
jmp 0x404bd0
cmp byte [edi + 1], dl
jne 0x404c9c
mov edx, dword [ebx + 0xc]
cmp byte [edx], 0x5f
jne 0x404c9e
add edx, 1
mov dword [ebx + 0xc], edx
movzx eax, byte [edi]
jmp 0x404c9c
mov eax, ebx
call fcn.004049c0
jmp 0x404cc2
add edx, 3
mov dword [ebx + 0xc], edx
xor edx, edx
jmp 0x404af3
add edx, 2
mov eax, ebx
mov dword [ebx + 0xc], edx
call fcn.004049c0
mov dword [esp], 0
mov edx, 0x4d
mov ecx, eax
mov eax, ebx
call fcn.004026c0
mov esi, eax
jmp 0x404a28
cmp ebp, 3
jne 0x404ce0
cmp eax, 0x71
jne 0x404f70
cmp byte [edi + 1], 0x75
jne 0x404f70
cmp byte [edi + 2], 0
jne 0x404f70
mov eax, ebx
call fcn.004049c0
mov edi, eax
mov eax, ebx
call fcn.004049c0
mov ebp, eax
mov eax, ebx
call fcn.004049c0
test eax, eax
je 0x404ce0
mov dword [esp], eax
mov ecx, ebp
mov edx, 0x3d
mov eax, ebx
call fcn.004026c0
mov ecx, edi
mov edx, 0x3c
mov dword [esp], eax
mov eax, ebx
call fcn.004026c0
mov ecx, esi
mov edx, 0x3b
mov dword [esp], eax
mov eax, ebx
call fcn.004026c0
mov esi, eax
jmp 0x404a28
mov eax, ebx
call fcn.004034c0
mov edx, dword [ebx + 0xc]
mov esi, eax
jmp 0x404b56
cmp eax, 0x64
jne 0x404f85
cmp byte [edi + 1], 0x58
jne 0x404f85
cmp byte [edi + 2], 0
je 0x404efa
movzx eax, byte [edi]
cmp al, 0x66
je 0x40512d
cmp al, 0x6e
jne 0x404ce0
movzx eax, byte [edi + 1]
cmp al, 0x77
je 0x404fa8
cmp al, 0x61
jne 0x404ce0
mov edx, 0x5f
mov eax, ebx
call fcn.00405170
mov edi, eax
mov eax, ebx
call fcn.004034c0
mov ebp, eax
mov eax, dword [ebx + 0xc]
movzx edx, byte [eax]
cmp dl, 0x45
je 0x40515a
cmp dl, 0x70
je 0x405139
cmp dl, 0x69
jne 0x404ce0
cmp byte [eax + 1], 0x6c
jne 0x404ce0
mov eax, ebx
call fcn.004049c0
jmp 0x404f1b
cmp eax, 0x64
jne 0x4050d5
cmp byte [edi + 1], 0x74
jne 0x4050d5
cmp byte [edi + 2], 0
jne 0x4050d5
mov eax, dword [ebx + 0xc]
movzx edx, byte [eax]
cmp dl, 0x67
je 0x405113
cmp dl, 0x73
jne 0x40503b
cmp byte [eax + 1], 0x72
je 0x4050ea
xor ecx, ecx
xor edx, edx
mov eax, ebx
call fcn.00404370
mov edi, eax
mov eax, dword [ebx + 0xc]
cmp byte [eax], 0x49
jne 0x404dfe
add eax, 1
mov dword [ebx + 0xc], eax
mov eax, ebx
call fcn.00405410
mov ecx, edi
mov edx, 4
mov dword [esp], eax
mov eax, ebx
call fcn.004026c0
mov edi, eax
jmp 0x404dfe
sub eax, 0x43
mov edx, 0x40201
bt edx, eax
jae 0x404c1c
mov dword [ebx + 0x38], 0xffffffff
xor edx, edx
mov eax, ebx
call fcn.00405510
mov edx, eax
mov eax, dword [ebx + 0xc]
cmp byte [eax], 0x45
jne 0x404c25
add eax, 1
mov dword [ebx + 0xc], eax
jmp 0x404c25
lea ecx, [edx - 0x72]
cmp cl, 1
jbe 0x4050c7
lea ecx, [edx - 0x63]
cmp cl, 1
ja 0x404d9d
mov eax, ebx
call fcn.004034c0
mov ebp, eax
jmp 0x404dd0
cmp eax, 0x70
jne 0x4050ea
cmp byte [edi + 1], 0x74
jne 0x4050ea
cmp byte [edi + 2], 0
je 0x40501d
mov eax, ebx
call fcn.004049c0
mov edi, eax
jmp 0x404dfe
sub eax, 0x61
cmp al, 0x19
ja 0x404c1c
jmp 0x40508a
mov eax, ebx
call fcn.004049c0
mov ebp, eax
jmp 0x404dd0
cmp byte [eax + 1], 0x73
jne 0x40503b
jmp 0x4050ea
mov eax, ebx
call fcn.004041a0
mov ebp, eax
jmp 0x404dd0
mov eax, ebx
call fcn.004041a0
jmp 0x404f01
cmp byte [eax + 1], 0x69
jne 0x404ce0
add eax, 2
mov edx, 0x45
mov dword [ebx + 0xc], eax
mov eax, ebx
call fcn.00405170
jmp 0x404f1b
add eax, 1
mov dword [ebx + 0xc], eax
xor eax, eax
jmp 0x404f1b