Function at 0x4017d0
Capabilities:
Parse pe header

Disassembly:
call fcn.00401ff5
test eax, eax
sete al
test al, al
jne 0x402071
jmp 0x402008
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [ebp + 8]
mov dword [ebp - 0x24], eax
jmp 0x401dfc
ret
mov edx, dword [ebp - 0x1c]
jmp 0x401eaf
mov eax, dword [eax + 0x3c]
jmp 0x40226d
call sub.KERNEL32.dll_GetProcessHeap
mov dword [esp + 8], 0x14
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.KERNEL32.dll_HeapAlloc
jmp 0x402639
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3c]
mov edx, eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x54]
lea eax, [edx + eax]
jmp 0x401d13
mov dword [esp + 8], 0x2000
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualAlloc
sub esp, 0x10
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x401f2e
jmp 0x401ce4
call sub.KERNEL32.dll_VirtualAlloc
jmp 0x401c6e
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call fcn.00401d3c
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
jmp 0x40179f
mov eax, dword [ebp - 0x24]
jmp 0x40181d
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x401984
mov eax, dword [ebp - 0x14]
jmp 0x401975
mov eax, dword [ebp - 0x20]
mov edx, dword [eax + 0x50]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], 4
jmp 0x4018ea
mov eax, dword [eax + 0x50]
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x1000
jmp 0x401c07
mov dword [esp + 8], 0x1000
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualAlloc
jmp 0x401c66
mov eax, dword [ebp - 0x28]
mov dword [eax + 0xc], 0
mov eax, dword [ebp - 0x28]
mov dword [eax + 8], 0
mov eax, dword [ebp - 0x28]
jmp 0x402462
mov eax, dword [ebp - 0x1c]
jmp 0x401c95
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualAlloc
sub esp, 0x10
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x54]
mov dword [esp + 0xc], 4
jmp 0x401a25
mov dword [esp], 0
jmp 0x40195c
sub esp, 0x10
jmp 0x401858
sub esp, 0x10
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x401f2e
mov eax, 0
jmp 0x401edb
mov eax, dword [ebp - 0x24]
jmp 0x401d95
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], eax
mov eax, dword [ebp - 0x10]
call eax
sub esp, 0xc
mov dword [ebp - 0xc], eax
jmp 0x401fbd
mov eax, dword [ebp - 0x20]
jmp 0x4019f6
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x50]
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x2000
mov dword [esp + 4], eax
jmp 0x401c3f
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x24]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [ebp - 0x18]
jmp 0x40198f
call fcn.00401663
jmp 0x4020c0
mov eax, dword [eax + 0x3c]
lea eax, [edx + eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
jmp 0x4021d2
mov eax, dword [ebp - 0x24]
jmp 0x40255f
mov dword [eax + 0x34], edx
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x28]
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x20]
mov dword [esp + 4], edx
mov dword [esp], eax
jmp 0x401d31
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call fcn.00402135
mov eax, 0
leave
jmp 0x401809
jmp 0x401836
cmp dword [ebp - 0xc], 0
je 0x4022eb
mov eax, dword [ebp - 0x28]
jmp 0x402062
mov eax, dword [ebp - 0x28]
mov dword [eax], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
jmp 0x401815
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call fcn.00401d83
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
jmp 0x402373
jmp 0x401ecb
mov dword [eax + 0x10], 1
mov eax, dword [ebp - 0x28]
jmp 0x401edb
nop
jmp 0x40201d
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x34]
neg eax
add eax, dword [ebp - 0x1c]
jmp 0x401997
mov eax, dword [eax]
cmp eax, 0x4550
je 0x4019dd
mov eax, 0
jmp 0x401edb
add edx, eax
jmp 0x401fe4
nop
jmp 0x401ecb
nop
jmp 0x401ecb
mov eax, dword [eax + 0x28]
test eax, eax
je 0x402069
mov edx, dword [ebp - 0x1c]
jmp 0x402419
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
lea eax, [edx + eax]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x4022e5
jmp 0x401bc7
mov dword [eax + 0x10], 0
jmp 0x401cb8
movzx eax, word [eax]
cmp ax, 0x5a4d
je 0x402572
mov eax, 0
jmp 0x401edb
mov edx, dword [ebp + 8]
jmp 0x401c8d
sub esp, 0xc
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x1c]
mov dword [eax + 4], edx
jmp 0x401a48