Function at 0x402a10
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
or eax, 0xffffffff
lea ecx, [ebp - 0x2c]
push edi
mov word [ebp - 0x14], ax
xor edi, edi
xor eax, eax
mov dword [ebp - 8], edi
push 0x64
mov word [ebp - 0x12], ax
call fcn.00404293
mov ecx, dword [ebp + 0x10]
call fcn.00403d90
mov ebx, dword [ebp + 0xc]
cmp word [ebx], di
je 0x402c52
lea esp, [esp]
movzx eax, word [ebx + edi*2]
cmp eax, 0x20
je 0x402b51
cmp eax, 9
je 0x402b51
movzx eax, word [ebx + edi*2]
mov dword [ebp - 8], edi
test ax, ax
je 0x402c52
mov esi, eax
mov word [ebp - 0x12], di
mov dword [ebp - 0x10], eax
cmp esi, 0x30
jae 0x402af1
cmp esi, 0x2e
je 0x402af6
cmp esi, 0x41
jae 0x402b57
cmp esi, 0x61
jae 0x402c89
cmp esi, 0x5f
je 0x402c92
mov eax, esi
cmp eax, 0x24
je case.0x402acb.64
cmp eax, 0x3d
je 0x402cce
sub eax, 0x1a
cmp eax, 0x44
ja case.0x402acb.27
movzx eax, byte [eax + 0x403040]
jmp dword [eax*4 + 0x402ff4]
push 0x4f
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
inc edi
mov dword [ebp - 8], edi
jmp 0x402c47
cmp esi, 0x39
ja 0x402a84
mov eax, dword [ebp + 0x10]
mov edi, 0x40
mov ecx, dword [eax + 8]
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x402b13
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4 - 4]
movzx edi, word [eax + 8]
push edi
lea eax, [ebp - 0x2c]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 8]
call fcn.004024c0
add esp, 0xc
cmp al, 1
jne 0x402f3f
mov edx, dword [ebp + 0x10]
cmp di, 0x4a
je 0x402ec7
lea eax, [ebp - 0x1c]
mov ecx, edx
push eax
call fcn.00403e23
mov edi, dword [ebp - 8]
jmp 0x402c47
inc edi
jmp 0x402a50
cmp esi, 0x5a
ja 0x402a92
jmp 0x402c92
push dword [ebp + 0x10]
call fcn.00402861
test eax, eax
js 0x442ba8
xor eax, eax
lea ecx, [ebp - 0x1c]
cmp word [ebp - 0x10], 0x24
sete al
add eax, 0x32
push eax
call fcn.004027e7
inc edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 8], edi
call fcn.004045bc
movzx ebx, word [ebx + edi*2]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
cmp bx, 0x5a
jbe 0x402bf5
cmp bx, 0x61
jb 0x402bfd
cmp bx, 0x7a
ja 0x402bfd
mov edx, dword [esi]
cmp edx, 1
jg 0x442aff
xor al, al
test al, al
jne 0x442b06
lea eax, [ecx + 1]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00404375
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov word [eax + ecx*2], bx
inc ecx
inc edi
mov dword [ebp - 0x28], ecx
mov word [eax + ecx*2], dx
mov eax, dword [ebp + 0xc]
movzx ebx, word [eax + edi*2]
jmp 0x402ba1
cmp bx, 0x41
jae 0x402bb3
jmp 0x402ba7
cmp bx, 0x30
jae 0x402cbf
cmp bx, 0x5f
je 0x402bb3
mov dword [ebp - 8], edi
test ecx, ecx
je 0x402fe8
lea ecx, [ebp - 0x2c]
call fcn.00404663
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call dword [sym.imp.USER32.dll_CharUpperBuffW]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402784
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
mov ebx, dword [ebp + 0xc]
cmp word [ebx + edi*2], 0
jne 0x402a50
push 0x7f
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
mov word [ebp - 0x12], di
call fcn.00403e23
xor esi, esi
lea ecx, [ebp - 0x2c]
call fcn.004020f8
lea ecx, [ebp - 0x1c]
call fcn.004027d4
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x7a
ja 0x402a9b
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 8]
push eax
push ebx
call fcn.004028a0
cmp dword [ebp - 0x1c], 0xffffffff
je 0x442b78
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
mov edi, dword [ebp - 8]
jmp 0x402c47
cmp bx, 0x39
ja 0x402c07
jmp 0x402bb3
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
je 0x442af5
mov eax, 0x41
push eax
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
jmp 0x402c47
push 0x4e
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
inc edi
mov dword [ebp - 8], edi
jmp 0x402c47
push 0x47
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
inc edi
mov dword [ebp - 8], edi
jmp 0x402c47
push 0x48
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
inc edi
mov dword [ebp - 8], edi
jmp 0x402c47
push 0x40
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
inc edi
mov dword [ebp - 8], edi
jmp 0x402c47
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 8]
push eax
push ebx
push dword [ebp + 8]
call fcn.00402995
lea ecx, [ebp - 0x1c]
test eax, eax
js 0x442b93
push 0x36
call fcn.004027e7
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402784
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
mov edi, dword [ebp - 8]
jmp 0x402c47
push 0x4d
lea ecx, [ebp - 0x1c]
call fcn.004027e7
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
je 0x402f10
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
jmp 0x402c47
push 0x49
lea ecx, [ebp - 0x1c]
call fcn.004027e7
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
je 0x402efd
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
jmp 0x402c47
push 0x4c
lea ecx, [ebp - 0x1c]
call fcn.004027e7
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
je 0x402fc7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
jmp 0x402c47
push 0x4b
lea ecx, [ebp - 0x1c]
call fcn.004027e7
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
je 0x442a57
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
jmp 0x402c47
push 0x4a
lea ecx, [ebp - 0x1c]
call fcn.004027e7
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
je 0x442a44
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
jmp 0x402c47
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
je 0x402f23
mov eax, 0x42
jmp 0x402ce2
movzx eax, word [ebx + edi*2 + 2]
inc edi
mov dword [ebp - 8], edi
sub eax, 0x3d
je 0x402fda
sub eax, 1
je 0x402f31
mov eax, 0x43
jmp 0x402ce2
cmp word [ebp - 0x14], 5
jne 0x402b3e
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
neg ecx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0xc]
adc eax, 0
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [edx + 4]
mov eax, dword [eax + ecx*4 - 4]
mov ecx, 0x49
mov word [eax + 8], cx
jmp 0x402b3e
inc edi
lea ecx, [ebp - 0x1c]
push 0x52
mov dword [ebp - 8], edi
call fcn.004027e7
jmp 0x402dfe
inc edi
lea ecx, [ebp - 0x1c]
push 0x56
mov dword [ebp - 8], edi
call fcn.004027e7
jmp 0x402dd4
mov eax, 0x45
inc edi
mov dword [ebp - 8], edi
jmp 0x402ce2
inc edi
mov eax, 0x44
mov dword [ebp - 8], edi
jmp 0x402ce2
mov edi, dword [ebp - 8]
cmp esi, 0x2e
jne 0x402a89
inc edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 8], edi
call fcn.004045bc
movzx eax, word [ebx + edi*2]
cmp ax, 0x5a
jbe 0x402f79
cmp ax, 0x61
jb 0x402f81
cmp ax, 0x7a
ja 0x402f81
push eax
lea ecx, [ebp - 0x2c]
call fcn.00404196
inc edi
jmp 0x402f57
cmp ax, 0x41
jae 0x402f6d
jmp 0x402f61
cmp ax, 0x30
jae 0x442a35
cmp ax, 0x5f
je 0x402f6d
cmp ax, 0x7f
ja 0x402f6d
cmp dword [ebp - 0x28], 0
mov dword [ebp - 8], edi
je 0x402fe8
push 0x35
lea ecx, [ebp - 0x1c]
call fcn.004027e7
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402784
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
jmp 0x402c47
inc edi
lea ecx, [ebp - 0x1c]
push 0x55
mov dword [ebp - 8], edi
call fcn.004027e7
jmp 0x402e28
inc edi
mov eax, 0x46
mov dword [ebp - 8], edi
jmp 0x402ce2
lea eax, [edi - 1]
push eax
jmp 0x442ba9
cmp ax, 0x39
jbe 0x402f6d
jmp 0x402f8b
inc edi
lea ecx, [ebp - 0x1c]
push 0x53
mov dword [ebp - 8], edi
call fcn.004027e7
jmp 0x402e7c
inc edi
lea ecx, [ebp - 0x1c]
push 0x54
mov dword [ebp - 8], edi
call fcn.004027e7
jmp 0x402e52
push 0x51
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
inc edi
mov dword [ebp - 8], edi
jmp 0x402c47
push 0x57
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
inc edi
mov dword [ebp - 8], edi
jmp 0x402c47
push 0x58
lea ecx, [ebp - 0x1c]
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
inc edi
mov dword [ebp - 8], edi
jmp 0x402c47
test edi, edi
jne case.0x402acb.27
cmp word [ebx + 2], di
jne case.0x402acb.27
mov eax, dword [ebp + 8]
cmp eax, dword [0x4d2380]
jl case.0x402acb.27
mov edi, 1
mov dword [ebp - 8], edi
jmp 0x402c47
mov eax, 0x50
jmp 0x402f28
mov al, 1
jmp 0x402bc0
lea eax, [edx - 1]
push 4
mov dword [esi], eax
call fcn.0042017b
mov dword [ebp - 0x10], eax
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [eax], 1
mov eax, dword [ebp - 0x28]
add eax, 2
jne 0x442b30
mov eax, 8
jmp 0x442b36
add eax, 7
and eax, 0xfffffff8
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004201ab
mov esi, eax
add esp, 4
mov eax, dword [ebp - 0x28]
lea ecx, [eax*2 + 2]
push ecx
push dword [ebp - 0x2c]
push esi
call fcn.004211a0
mov eax, esi
add esp, 0xc
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
jmp 0x402bda
push dword [ebp - 8]
push 0x138c
jmp 0x442bae
push edi
push 0x1388
push dword [ebp + 8]
call fcn.00469b49
lea ecx, [ebp - 0x1c]
push 0x7f
call fcn.004027e7
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
call fcn.00403e23
jmp 0x442bb6
push edi
push 0x138b
push dword [ebp + 8]
call fcn.00469b49
or esi, 0xffffffff
jmp 0x402c6e