Function at 0x40b820
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
or eax, 0xffffffff
lea ecx, [ebp - 0x28]
push edi
mov word [ebp - 0x10], ax
xor esi, esi
xor eax, eax
mov dword [ebp - 8], esi
push 0x64
mov word [ebp - 0xe], ax
call fcn.00407c30
mov ecx, dword [ebp + 0x10]
call fcn.00405ed0
mov ebx, dword [ebp + 0xc]
cmp word [ebx], si
je 0x40ba68
lea esp, [esp]
movzx eax, word [ebx + esi*2]
cmp eax, 0x20
je 0x40b969
cmp eax, 9
je 0x40b969
movzx eax, word [ebx + esi*2]
mov dword [ebp - 8], esi
test ax, ax
je 0x40ba68
mov edi, eax
mov word [ebp - 0xe], si
mov dword [ebp - 0xc], eax
cmp edi, 0x30
jae 0x40b901
cmp edi, 0x2e
je 0x40b906
cmp edi, 0x41
jae 0x40b96f
cmp edi, 0x61
jae 0x40ba9f
cmp edi, 0x5f
je 0x40baa8
mov eax, edi
cmp eax, 0x24
je case.0x40b8db.64
cmp eax, 0x3d
je 0x40bad8
sub eax, 0x1a
cmp eax, 0x44
ja case.0x40b8db.27
movzx eax, byte [eax + 0x40bd98]
jmp dword [eax*4 + 0x40bd4c]
push 0x4f
lea ecx, [ebp - 0x18]
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
inc esi
mov dword [ebp - 8], esi
jmp 0x40ba5d
cmp edi, 0x39
ja 0x40b894
mov eax, dword [ebp + 0x10]
mov esi, 0x40
mov ecx, dword [eax + 8]
mov dword [ebp + 0xc], ecx
test ecx, ecx
je 0x40b923
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4 - 4]
movzx esi, word [eax + 8]
push esi
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 8]
call fcn.00404e1b
add esp, 0xc
cmp al, 1
jne 0x40bcc8
cmp si, 0x4a
mov esi, dword [ebp - 8]
jne 0x40ba51
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 4]
mov ecx, dword [ebp + 0xc]
mov eax, dword [eax + ecx*4 - 4]
mov ecx, 0x49
mov word [eax + 8], cx
jmp 0x40ba51
inc esi
jmp 0x40b860
cmp edi, 0x5a
ja 0x40b8a2
jmp 0x40baa8
push dword [ebp + 0x10]
call fcn.0040b7df
test eax, eax
js 0x4503fd
xor eax, eax
lea ecx, [ebp - 0x18]
cmp word [ebp - 0xc], 0x24
sete al
add eax, 0x32
push eax
call fcn.0040bf37
inc esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], esi
call fcn.0040bfff
movzx edi, word [ebx + esi*2]
cmp di, 0x5a
jbe 0x40ba0c
cmp di, 0x61
jb 0x40ba14
cmp di, 0x7a
ja 0x40ba14
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
cmp edx, 1
jg 0x450358
xor al, al
test al, al
jne 0x45035f
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x28]
inc eax
push eax
call fcn.0040bec3
mov eax, dword [ebp - 0x28]
mov ecx, eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov word [ecx + eax*2], di
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x24], ecx
inc esi
mov word [eax + ecx*2], dx
jmp 0x40b9af
cmp di, 0x41
jae 0x40b9c5
jmp 0x40b9b9
cmp di, 0x30
jae 0x40bac9
cmp di, 0x5f
je 0x40b9c5
cmp dword [ebp - 0x24], 0
mov dword [ebp - 8], esi
je 0x40bd43
lea ecx, [ebp - 0x28]
call fcn.0040c809
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call dword [sym.imp.USER32.dll_CharUpperBuffW]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040bfaf
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
cmp word [ebx + esi*2], 0
jne 0x40b860
push 0x7f
lea ecx, [ebp - 0x18]
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
mov word [ebp - 0xe], si
call fcn.0040bddd
xor esi, esi
lea ecx, [ebp - 0x28]
call fcn.0040b276
lea ecx, [ebp - 0x18]
call fcn.0041d76a
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp edi, 0x7a
ja 0x40b8ab
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
push ebx
call fcn.00405121
cmp dword [ebp - 0x18], 0xffffffff
je 0x4503cd
mov esi, dword [ebp - 8]
jmp 0x40ba51
cmp di, 0x39
ja 0x40ba1e
jmp 0x40b9c5
inc esi
mov dword [ebp - 8], esi
cmp word [ebx + esi*2], 0x3d
je 0x45034a
mov eax, 0x41
push eax
lea ecx, [ebp - 0x18]
call fcn.0040bf37
jmp 0x40ba51
push 0x4e
lea ecx, [ebp - 0x18]
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
inc esi
mov dword [ebp - 8], esi
jmp 0x40ba5d
push 0x47
lea ecx, [ebp - 0x18]
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
inc esi
mov dword [ebp - 8], esi
jmp 0x40ba5d
push 0x48
lea ecx, [ebp - 0x18]
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
inc esi
mov dword [ebp - 8], esi
jmp 0x40ba5d
push 0x40
lea ecx, [ebp - 0x18]
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
inc esi
mov dword [ebp - 8], esi
jmp 0x40ba5d
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 8]
push eax
push ebx
push dword [ebp + 8]
call fcn.004050a9
lea ecx, [ebp - 0x18]
test eax, eax
js 0x4503e8
push 0x36
call fcn.0040bf37
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040bfaf
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
mov esi, dword [ebp - 8]
jmp 0x40ba5d
push 0x4d
lea ecx, [ebp - 0x18]
call fcn.0040bf37
inc esi
mov dword [ebp - 8], esi
cmp word [ebx + esi*2], 0x3d
jne 0x40ba51
push 0x56
jmp 0x40bbf1
push 0x49
lea ecx, [ebp - 0x18]
call fcn.0040bf37
inc esi
mov dword [ebp - 8], esi
cmp word [ebx + esi*2], 0x3d
jne 0x40ba51
push 0x52
inc esi
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], esi
call fcn.0040bf37
jmp 0x40ba51
push 0x4c
lea ecx, [ebp - 0x18]
call fcn.0040bf37
inc esi
mov dword [ebp - 8], esi
cmp word [ebx + esi*2], 0x3d
jne 0x40ba51
inc esi
lea ecx, [ebp - 0x18]
push 0x55
mov dword [ebp - 8], esi
call fcn.0040bf37
jmp 0x40ba51
push 0x4b
lea ecx, [ebp - 0x18]
call fcn.0040bf37
inc esi
mov dword [ebp - 8], esi
cmp word [ebx + esi*2], 0x3d
jne 0x40ba51
jmp 0x4502b8
push 0x4a
lea ecx, [ebp - 0x18]
call fcn.0040bf37
inc esi
mov dword [ebp - 8], esi
cmp word [ebx + esi*2], 0x3d
jne 0x40ba51
jmp 0x4502b1
inc esi
mov dword [ebp - 8], esi
cmp word [ebx + esi*2], 0x3d
je 0x40bcb2
mov eax, 0x42
push eax
lea ecx, [ebp - 0x18]
call fcn.0040bf37
jmp 0x40ba51
movzx eax, word [ebx + esi*2 + 2]
inc esi
mov dword [ebp - 8], esi
sub eax, 0x3d
je 0x40bd34
sub eax, 1
je 0x40bcbd
mov eax, 0x43
push eax
lea ecx, [ebp - 0x18]
call fcn.0040bf37
jmp 0x40ba51
inc esi
mov eax, 0x45
mov dword [ebp - 8], esi
jmp 0x40bc7a
mov eax, 0x44
inc esi
mov dword [ebp - 8], esi
jmp 0x40bca4
mov esi, dword [ebp - 8]
cmp edi, 0x2e
jne 0x40b899
inc esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], esi
call fcn.0040bfff
movzx eax, word [ebx + esi*2]
cmp ax, 0x5a
jbe 0x40bd02
cmp ax, 0x61
jb 0x40bd0a
cmp ax, 0x7a
ja 0x40bd0a
push eax
lea ecx, [ebp - 0x28]
call fcn.00405216
inc esi
jmp 0x40bce0
cmp ax, 0x41
jae 0x40bcf6
jmp 0x40bcea
cmp ax, 0x30
jae 0x40bd3b
cmp ax, 0x5f
je 0x40bcf6
cmp ax, 0x7f
ja 0x40bcf6
cmp dword [ebp - 0x24], 0
mov dword [ebp - 8], esi
je 0x40bd43
push 0x35
lea ecx, [ebp - 0x18]
call fcn.0040bf37
jmp 0x40ba45
mov eax, 0x46
jmp 0x40bcc2
cmp ax, 0x39
jbe 0x40bcf6
jmp 0x40bd10
lea eax, [esi - 1]
push eax
jmp 0x4503fe
push 0x53
jmp 0x40bbf1
push 0x54
jmp 0x40bbf1
push 0x51
lea ecx, [ebp - 0x18]
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
inc esi
mov dword [ebp - 8], esi
jmp 0x40ba5d
push 0x57
lea ecx, [ebp - 0x18]
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
inc esi
mov dword [ebp - 8], esi
jmp 0x40ba5d
push 0x58
lea ecx, [ebp - 0x18]
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
inc esi
mov dword [ebp - 8], esi
jmp 0x40ba5d
test esi, esi
jne case.0x40b8db.27
cmp word [ebx + 2], si
jne case.0x40b8db.27
mov eax, dword [ebp + 8]
cmp eax, dword [0x4d23c0]
jl case.0x40b8db.27
mov esi, 1
mov dword [ebp - 8], esi
jmp 0x40ba5d
inc esi
mov eax, 0x50
mov dword [ebp - 8], esi
jmp 0x40baec
mov al, 1
jmp 0x40b9d5
lea eax, [edx - 1]
push 4
mov dword [ecx], eax
call fcn.0041fe8b
add esp, 4
mov dword [eax], 1
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
add eax, 2
jne 0x450386
mov eax, 8
jmp 0x45038c
add eax, 7
and eax, 0xfffffff8
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041febb
mov ecx, dword [ebp - 0x24]
add esp, 4
mov dword [ebp + 0xc], eax
lea ecx, [ecx*2 + 2]
push ecx
push dword [ebp - 0x28]
push eax
call fcn.00420ed0
mov ecx, dword [ebp + 0xc]
add esp, 0xc
mov dword [ebp - 0x28], ecx
jmp 0x40b9f2
push dword [ebp - 8]
push 0x138c
jmp 0x450403
push esi
push 0x1388
push dword [ebp + 8]
call fcn.0046968d
lea ecx, [ebp - 0x18]
push 0x7f
call fcn.0040bf37
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040bddd
jmp 0x45040b
push esi
push 0x138b
push dword [ebp + 8]
call fcn.0046968d
or esi, 0xffffffff
jmp 0x40ba84