Function at 0x402be0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x44
mov eax, dword [ebp + 8]
mov byte [ebp - 0x39], 0x30
mov word [ebp - 0x1a], 0x2624
mov word [ebp - 0x32], 0x7950
mov dword [ebp - 0x30], 0xfffff000
mov ecx, dword [ebp - 0x30]
mov word [ebp - 0x18], 0x5115
mov dword [ebp - 0x20], 0x1000
mov dword [ebp - 0x38], 0
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x28], 0x4550
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x24], 0x5a4d
mov edi, dword [ebp - 0x24]
mov word [ebp - 0x16], 0x571a
mov word [ebp - 0x1c], 0x73b3
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x50], esi
jne 0x402c72
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x2c], 0
mov cx, word [ebp - 0x1a]
mov dx, ax
and cx, dx
mov word [ebp - 0x1c], cx
jmp 0x402dec
mov ax, 0x1001
mov cx, 0
mov dx, word [ebp - 0x18]
sub cx, word [ebp - 0x1c]
sub ax, dx
mov word [ebp - 0x1c], cx
mov word [ebp - 0x16], ax
mov word [ebp - 0x18], 0x397d
mov ax, 0x52e6
mov cx, 0
mov edx, dword [ebp - 0x10]
mov si, word [ebp - 0x18]
or si, 0x1774
mov word [ebp - 0x18], si
mov si, word [edx]
mov di, word [ebp - 0x16]
sub cx, word [ebp - 0x1a]
sub ax, di
movzx edx, si
mov word [ebp - 0x1a], cx
mov word [ebp - 0x32], ax
mov ebx, dword [ebp - 0x44]
cmp edx, ebx
jne 0x402d5b
mov al, 0
mov cx, 0x5636
mov dx, 0
mov esi, dword [ebp - 0x10]
sub dx, word [ebp - 0x16]
mov esi, dword [esi + 0x3c]
mov edi, dword [ebp - 0x10]
mov esi, dword [edi + esi]
mov bx, word [ebp - 0x1a]
mov word [ebp - 0x16], dx
sub cx, bx
sub al, byte [ebp - 0x39]
mov word [ebp - 0x1a], cx
mov byte [ebp - 0x39], al
mov edi, dword [ebp - 0x50]
cmp esi, edi
jne 0x402d38
lea eax, [ebp - 0x1c]
mov cx, 0
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], edx
mov si, cx
sub si, word [ebp - 0x18]
sub cx, word [ebp - 0x1c]
mov word [ebp - 0x18], si
mov si, word [ebp - 0x16]
mov di, ax
mov word [ebp - 0x1c], cx
sub di, si
mov word [ebp - 0x16], di
jmp 0x402dec
mov ax, 0
mov cx, ax
sub cx, word [ebp - 0x1a]
mov dx, word [ebp - 0x1c]
mov bl, byte [ebp - 0x39]
xor bl, 0xd3
mov byte [ebp - 0x39], bl
sub ax, dx
mov word [ebp - 0x1a], cx
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x16]
mov cx, word [ebp - 0x16]
xor cx, 0x6f0f
mov word [ebp - 0x16], cx
mov cx, word [ebp - 0x16]
mov dx, ax
xor cx, dx
mov word [ebp - 0x16], cx
mov eax, dword [ebp - 0x10]
mov cx, word [ebp - 0x18]
and cx, 0x264c
mov word [ebp - 0x1a], cx
mov esi, dword [ebp - 0x4c]
sub eax, esi
mov edi, dword [ebp - 0x48]
and eax, edi
mov dword [ebp - 0x10], eax
mov al, 1
mov cx, 0x26e7
mov dx, 0
mov si, word [ebp - 0x16]
mov di, word [ebp - 0x1c]
or di, 0x7f32
mov word [ebp - 0x16], di
sub dx, si
sub cx, word [ebp - 0x16]
mov word [ebp - 0x16], dx
mov word [ebp - 0x16], cx
test al, 1
jne 0x402c93
mov dword [ebp - 0x2c], 0
mov ax, word [ebp - 0x18]
mov cx, word [ebp - 0x18]
xor cx, 0x215e
mov word [ebp - 0x18], cx
and ax, 0x44e9
mov byte [ebp - 0x39], 0xcd
mov word [ebp - 0x32], ax
mov al, 0x16
mov cx, 0
mov edx, dword [ebp - 0x2c]
sub cx, word [ebp - 0x18]
mov word [ebp - 0x18], cx
mov esi, dword [ebp - 0x38]
sub al, byte [ebp - 0x39]
add esi, 0
mov byte [ebp - 0x39], al
mov dword [ebp - 0x38], esi
mov eax, edx
add esp, 0x44
pop esi
pop edi
pop ebx
pop ebp
ret