Function at 0x41d094
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
test dl, dl
je 0x41d0a7
add esp, 0xfffffff0
call fcn.00403da8
mov esi, ecx
mov byte [ebp - 1], dl
mov ebx, eax
xor edx, edx
mov eax, ebx
call fcn.00403b30
mov byte [ebx + 4], 0
mov eax, esi
call fcn.0042b898
cmp edx, 0
jne 0x41d0d2
cmp eax, 0x40
jb 0x41d2f0
jmp 0x41d0d8
jl 0x41d2f0
lea eax, [ebx + 0xc]
mov edx, 0x40
call fcn.00406e88
push 0
push 0
push 0
push 0x40
lea edx, [ebx + 0xc]
mov eax, esi
call fcn.0042ba4c
cmp word [ebx + 0xc], 0x5a4d
jne 0x41d2f0
mov eax, dword [ebx + 0x48]
test eax, eax
jle 0x41d2f0
cmp eax, 0x10000
jge 0x41d2f0
mov eax, esi
call fcn.0042b898
push edx
push eax
mov eax, dword [ebx + 0x48]
add eax, 4
add eax, 0x14
cdq
cmp edx, dword [esp + 4]
jne 0x41d13f
cmp eax, dword [esp]
pop edx
pop eax
ja 0x41d2f0
jmp 0x41d147
pop edx
pop eax
jg 0x41d2f0
lea eax, [ebx + 0x4c]
mov edx, 4
call fcn.00406e88
mov eax, dword [ebx + 0x48]
cdq
push edx
push eax
push 0
push 4
lea edx, [ebx + 0x4c]
mov eax, esi
call fcn.0042ba4c
cmp dword [ebx + 0x4c], 0x4550
jne 0x41d2f0
lea eax, [ebx + 0x50]
mov edx, 0x14
call fcn.00406e88
mov eax, dword [ebx + 0x48]
add eax, 4
cdq
push edx
push eax
push 0
push 0x14
lea edx, [ebx + 0x50]
mov eax, esi
call fcn.0042ba4c
mov ax, word [ebx + 0x50]
cmp ax, 0x8664
jne 0x41d20c
mov eax, esi
call fcn.0042b898
push edx
push eax
mov eax, dword [ebx + 0x48]
add eax, 4
add eax, 0x14
add eax, 0xf0
cdq
cmp edx, dword [esp + 4]
jne 0x41d1ce
cmp eax, dword [esp]
pop edx
pop eax
ja 0x41d26b
jmp 0x41d1d6
pop edx
pop eax
jg 0x41d26b
lea eax, [ebx + 0x144]
mov edx, 0xf0
call fcn.00406e88
mov eax, dword [ebx + 0x48]
add eax, 4
add eax, 0x14
cdq
push edx
push eax
push 0
push 0xf0
lea edx, [ebx + 0x144]
mov eax, esi
call fcn.0042ba4c
mov byte [ebx + 4], 1
jmp 0x41d26b
cmp ax, 0x14c
jne 0x41d26b
mov eax, esi
call fcn.0042b898
push edx
push eax
mov eax, dword [ebx + 0x48]
add eax, 4
add eax, 0x14
add eax, 0xe0
cdq
cmp edx, dword [esp + 4]
jne 0x41d239
cmp eax, dword [esp]
pop edx
pop eax
ja 0x41d26b
jmp 0x41d23d
pop edx
pop eax
jg 0x41d26b
lea eax, [ebx + 0x64]
mov edx, 0xe0
call fcn.00406e88
mov eax, dword [ebx + 0x48]
add eax, 4
add eax, 0x14
cdq
push edx
push eax
push 0
push 0xe0
lea edx, [ebx + 0x64]
mov eax, esi
call fcn.0042ba4c
mov byte [ebx + 4], 1
cmp byte [ebx + 4], 0
je 0x41d2f0
mov eax, esi
call fcn.0042b898
push edx
push eax
mov eax, dword [ebx + 0x48]
add eax, 4
add eax, 0x14
movzx edx, word [ebx + 0x60]
add eax, edx
mov di, word [ebx + 0x52]
movzx edx, di
shl edx, 3
lea edx, [edx + edx*4]
add eax, edx
cdq
cmp edx, dword [esp + 4]
jne 0x41d2a8
cmp eax, dword [esp]
pop edx
pop eax
ja 0x41d2f0
jmp 0x41d2ac
pop edx
pop eax
jg 0x41d2f0
movzx eax, di
push eax
lea eax, [ebx + 8]
mov ecx, 1
mov edx, dword [0xa181c8]
call fcn.00405b74
add esp, 4
mov eax, dword [ebx + 0x48]
add eax, 4
add eax, 0x14
movzx edx, word [ebx + 0x60]
add eax, edx
cdq
push edx
push eax
movzx eax, word [ebx + 0x52]
shl eax, 3
lea eax, [eax + eax*4]
xor edx, edx
push edx
push eax
mov edx, dword [ebx + 8]
mov eax, esi
call fcn.0042ba4c
mov eax, ebx
cmp byte [ebp - 1], 0
je 0x41d307
call fcn.00403e00
pop dword fs:[0]
add esp, 0xc
mov eax, ebx
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret