Function at 0x4063a0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
or eax, 0xffffffff
lea ecx, [ebp - 0x28]
push edi
mov word [ebp - 0x10], ax
xor edi, edi
xor eax, eax
mov dword [ebp - 8], edi
push 0x64
mov word [ebp - 0xe], ax
call fcn.00407b76
mov ecx, dword [ebp + 0x10]
call fcn.004075e0
mov ebx, dword [ebp + 0xc]
cmp word [ebx], di
je 0x4065ca
lea esp, [esp]
movzx eax, word [ebx + edi*2]
cmp eax, 0x20
je 0x4064df
cmp eax, 9
je 0x4064df
movzx eax, word [ebx + edi*2]
mov dword [ebp - 8], edi
test ax, ax
je 0x4065ca
mov esi, eax
mov word [ebp - 0xe], di
cmp esi, 0x30
jae 0x40647e
cmp esi, 0x2e
je 0x406483
cmp esi, 0x41
jae 0x4064e5
cmp esi, 0x61
jae 0x406601
cmp esi, 0x5f
je 0x40660a
mov eax, esi
cmp eax, 0x24
je case.0x406458.64
cmp eax, 0x3d
je 0x406646
sub eax, 0x1a
cmp eax, 0x44
ja case.0x406458.27
movzx eax, byte [eax + 0x406954]
jmp dword [eax*4 + 0x406908]
push 0x4f
lea ecx, [ebp - 0x18]
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
inc edi
mov dword [ebp - 8], edi
jmp 0x4065bf
cmp esi, 0x39
ja 0x406411
mov edi, dword [ebp + 0x10]
mov eax, pe_nt_image_headers32
mov dword [ebp + 0xc], eax
mov ecx, dword [edi + 8]
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x4064a6
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4 - 4]
movzx eax, word [eax + 8]
mov dword [ebp + 0xc], eax
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
push ebx
call fcn.004060cc
cmp al, 1
jne 0x406881
cmp word [ebp + 0xc], 0x4a
je 0x40682b
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
call fcn.0040766f
mov edi, dword [ebp - 8]
jmp 0x4065bf
inc edi
jmp 0x4063e0
cmp esi, 0x5a
ja 0x40641f
jmp 0x40660a
push dword [ebp + 0x10]
call fcn.00405fa0
test eax, eax
js 0x406902
cmp esi, 0x24
jne 0x4067c5
mov eax, 0x33
push eax
lea ecx, [ebp - 0x18]
call fcn.00405f12
inc edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], edi
call fcn.00407eec
movzx esi, word [ebx + edi*2]
cmp si, 0x5a
jbe 0x40656e
cmp si, 0x61
jb 0x406576
cmp si, 0x7a
ja 0x406576
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx]
cmp eax, 1
jg 0x43e3bb
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x28]
inc eax
push eax
call fcn.00407cb3
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov word [ecx + eax*2], si
inc eax
mov dword [ebp - 0x24], eax
inc edi
mov word [ecx + eax*2], dx
jmp 0x406526
cmp si, 0x41
jae 0x40653c
jmp 0x406530
cmp si, 0x30
jae 0x406637
cmp si, 0x5f
je 0x40653c
cmp dword [ebp - 0x24], 0
mov dword [ebp - 8], edi
je 0x4068f9
lea ecx, [ebp - 0x28]
call fcn.00407faf
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call dword [sym.imp.USER32.dll_CharUpperBuffW]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.00405ea1
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
cmp word [ebx + edi*2], 0
jne 0x4063e0
push 0x7f
lea ecx, [ebp - 0x18]
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
mov word [ebp - 0xe], di
call fcn.0040766f
xor esi, esi
lea ecx, [ebp - 0x28]
call fcn.00405a64
lea ecx, [ebp - 0x18]
call fcn.00405efb
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x7a
ja 0x406428
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
push ebx
call fcn.00405fd2
cmp dword [ebp - 0x18], 0xffffffff
je 0x43e415
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
mov edi, dword [ebp - 8]
jmp 0x4065bf
cmp si, 0x39
ja 0x406580
jmp 0x40653c
inc edi
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
je 0x43e3ab
push 0x41
call fcn.00405f12
jmp 0x4065b3
push 0x4e
lea ecx, [ebp - 0x18]
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
inc edi
mov dword [ebp - 8], edi
jmp 0x4065bf
push 0x47
lea ecx, [ebp - 0x18]
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
inc edi
mov dword [ebp - 8], edi
jmp 0x4065bf
push 0x48
lea ecx, [ebp - 0x18]
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
inc edi
mov dword [ebp - 8], edi
jmp 0x4065bf
push pe_nt_image_headers32
lea ecx, [ebp - 0x18]
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
inc edi
mov dword [ebp - 8], edi
jmp 0x4065bf
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 8]
push eax
push ebx
push dword [ebp + 8]
call fcn.0040631f
lea ecx, [ebp - 0x18]
test eax, eax
js 0x43e430
push 0x36
call fcn.00405f12
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.00405ea1
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
mov edi, dword [ebp - 8]
jmp 0x4065bf
push 0x4d
lea ecx, [ebp - 0x18]
call fcn.00405f12
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x4065b3
inc edi
lea ecx, [ebp - 0x18]
push 0x56
mov dword [ebp - 8], edi
call fcn.00405f12
jmp 0x4065b3
push 0x49
lea ecx, [ebp - 0x18]
call fcn.00405f12
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x4065b3
inc edi
lea ecx, [ebp - 0x18]
push 0x52
mov dword [ebp - 8], edi
call fcn.00405f12
jmp 0x4065b3
push 0x4c
lea ecx, [ebp - 0x18]
call fcn.00405f12
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x4065b3
inc edi
lea ecx, [ebp - 0x18]
push 0x55
mov dword [ebp - 8], edi
call fcn.00405f12
jmp 0x4065b3
push 0x4b
lea ecx, [ebp - 0x18]
call fcn.00405f12
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x4065b3
jmp 0x43e30d
mov eax, 0x32
jmp 0x406511
push 0x4a
lea ecx, [ebp - 0x18]
call fcn.00405f12
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x4065b3
jmp 0x43e2fa
inc edi
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
je 0x406861
push 0x42
call fcn.00405f12
jmp 0x4065b3
movzx eax, word [ebx + edi*2 + 2]
lea ecx, [ebp - 0x18]
inc edi
mov dword [ebp - 8], edi
sub eax, 0x3d
je 0x4068ed
dec eax
je 0x406871
push 0x43
call fcn.00405f12
jmp 0x4065b3
cmp word [ebp - 0x10], 5
jne 0x4064cc
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
neg ecx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0xc]
adc eax, 0
neg eax
mov dword [ebp - 0x14], eax
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4 - 4]
mov ecx, 0x49
mov word [eax + 8], cx
jmp 0x4064cc
push 0x45
call fcn.00405f12
inc edi
mov dword [ebp - 8], edi
jmp 0x4065b3
push 0x44
call fcn.00405f12
inc edi
mov dword [ebp - 8], edi
jmp 0x4065b3
mov edi, dword [ebp - 8]
cmp esi, 0x2e
jne 0x406416
inc edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], edi
call fcn.00407eec
movzx eax, word [ebx + edi*2]
cmp ax, 0x5a
jbe 0x4068bb
cmp ax, 0x61
jb 0x4068c3
cmp ax, 0x7a
ja 0x4068c3
push eax
lea ecx, [ebp - 0x28]
call fcn.00407a84
inc edi
jmp 0x406899
cmp ax, 0x41
jae 0x4068af
jmp 0x4068a3
cmp ax, 0x30
jae 0x4068f1
cmp ax, 0x5f
je 0x4068af
cmp ax, 0x7f
ja 0x4068af
cmp dword [ebp - 0x24], 0
mov dword [ebp - 8], edi
je 0x4068f9
push 0x35
lea ecx, [ebp - 0x18]
call fcn.00405f12
jmp 0x4065a7
push 0x46
jmp 0x406873
cmp ax, 0x39
jbe 0x4068af
jmp 0x4068c9
lea eax, [edi - 1]
push eax
jmp 0x43e445
push edi
jmp 0x43e445
inc edi
lea ecx, [ebp - 0x18]
push 0x53
mov dword [ebp - 8], edi
call fcn.00405f12
jmp 0x4065b3
inc edi
lea ecx, [ebp - 0x18]
push 0x54
mov dword [ebp - 8], edi
call fcn.00405f12
jmp 0x4065b3
push 0x51
lea ecx, [ebp - 0x18]
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
inc edi
mov dword [ebp - 8], edi
jmp 0x4065bf
push 0x57
lea ecx, [ebp - 0x18]
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
inc edi
mov dword [ebp - 8], edi
jmp 0x4065bf
push 0x58
lea ecx, [ebp - 0x18]
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
inc edi
mov dword [ebp - 8], edi
jmp 0x4065bf
test edi, edi
jne case.0x406458.27
cmp word [ebx + 2], di
jne case.0x406458.27
mov eax, dword [ebp + 8]
cmp eax, dword [0x4c72a0]
jl case.0x406458.27
mov edi, 1
mov dword [ebp - 8], edi
jmp 0x4065bf
push 0x50
call fcn.00405f12
inc edi
mov dword [ebp - 8], edi
jmp 0x4065b3
dec eax
mov dword [ecx], eax
lea ecx, [ebp - 0x28]
call fcn.00408189
mov eax, dword [ebp - 0x24]
add eax, 2
push eax
call fcn.00408170
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00420ff6
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
mov dword [ebp + 0xc], edx
lea ecx, [eax*2 + 2]
push ecx
push dword [ebp - 0x28]
push edx
call fcn.00421080
mov ecx, dword [ebp + 0xc]
add esp, 0xc
mov dword [ebp - 0x28], ecx
jmp 0x40655a
push dword [ebp - 8]
push 0x138c
jmp 0x43e44a
push edi
push 0x1388
push dword [ebp + 8]
call fcn.0045fdba
lea ecx, [ebp - 0x18]
push 0x7f
call fcn.00405f12
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040766f
jmp 0x43e452
push 0x138b
push dword [ebp + 8]
call fcn.0045fdba
or esi, 0xffffffff
jmp 0x4065e6