Function at 0x204d032
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
pop ebp
jmp 0x204d6cb
sub esp, 0x10
push ebx
mov ebx, dword [esp + 0x18]
test ebx, ebx
jne 0x204d6e0
xor eax, eax
pop ebx
add esp, 0x10
ret 0x10
push esi
mov esi, dword [esp + 0x20]
cmp esi, 0x40
jb 0x204d701
mov eax, 0x5a4d
cmp word [ebx], ax
jne 0x204d701
mov ecx, dword [ebx + 0x3c]
lea eax, [ecx + 0xf8]
cmp esi, eax
jae 0x204d70b
pop esi
xor eax, eax
pop ebx
add esp, 0x10
ret 0x10
cmp dword [ecx + ebx], reloc.kernel32.dll_DeleteCriticalSection
push ebp
lea ebp, [ecx + ebx]
mov dword [esp + 0x18], ebp
jne 0x204d73b
mov eax, 0x14c
cmp word [ebp + 4], ax
jne 0x204d73b
test byte [ebp + 0x16], 2
je 0x204d73b
movzx eax, word [ebp + 0x14]
mov edx, 0xe0
cmp ax, dx
jae 0x204d746
pop ebp
pop esi
xor eax, eax
pop ebx
add esp, 0x10
ret 0x10
add eax, 0xffffff20
movzx eax, ax
push edi
movzx edi, word [ebp + 6]
mov dword [esp + 0x28], eax
add eax, ecx
lea ecx, [ebx + 0xf8]
add ecx, eax
xor edx, edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], edi
test edi, edi
jle 0x204d7a2
xor eax, eax
jmp 0x204d77b
mov ebx, dword [esp + 0x10]
lea eax, [eax + eax*4]
mov ecx, dword [ecx + eax*8 + 0x14]
add ecx, dword [ebx + eax*8 + 0x10]
mov ebx, dword [esp + 0x24]
cmp ecx, esi
ja 0x204d90c
mov ecx, dword [esp + 0x10]
inc edx
movzx eax, dx
cmp eax, edi
jl 0x204d77b
mov edx, dword [ebp + 0x50]
xor esi, esi
test edi, edi
jle 0x204d831
mov ecx, dword [ebp + 0x38]
xor eax, eax
mov dword [esp + 0x10], ecx
mov ebp, edx
nop
mov ecx, dword [ebx + 0x3c]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
add ecx, dword [esp + 0x28]
mov edx, dword [ecx + ebx + reloc.kernel32.dll_DeleteCriticalSection]
mov edi, dword [ecx + ebx + 0x100]
mov ecx, dword [ecx + ebx + reloc.kernel32.dll_DeleteCriticalSection]
cmp edx, edi
mov eax, edi
cmova eax, edx
add eax, ecx
dec eax
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x24], edx
add eax, ecx
xor edx, edx
div ecx
imul eax, ecx
cmp ebp, eax
ja 0x204d81b
cmp dword [esp + 0x24], edi
mov eax, dword [esp + 0x14]
cmova edi, dword [esp + 0x24]
dec eax
add eax, edi
add eax, ecx
xor edx, edx
div ecx
mov ebp, eax
imul ebp, ecx
inc esi
movzx eax, si
cmp eax, dword [esp + 0x18]
jl 0x204d7bb
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
test edx, edx
je 0x204d90c
mov ecx, dword [ebp + 0x34]
call fcn.0204d26b
mov edi, eax
test edi, edi
je 0x204d90c
movzx eax, word [ebp + 6]
mov edx, ebx
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x3c]
lea eax, [eax + ecx*8]
mov ecx, dword [esp + 0x28]
add ecx, 0xf8
add eax, ecx
push eax
mov ecx, edi
call fcn.0204d03b
xor eax, eax
add esp, 4
xor esi, esi
cmp ax, word [ebp + 6]
jae 0x204d8bc
movzx eax, si
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x3c]
lea eax, [eax + ecx*8]
add eax, dword [esp + 0x28]
mov edx, dword [eax + ebx + reloc.kernel32.dll_DeleteCriticalSection]
test edx, edx
je 0x204d8b5
mov ecx, dword [eax + ebx + reloc.kernel32.dll_DeleteCriticalSection]
test ecx, ecx
je 0x204d8b5
push edx
mov edx, dword [eax + ebx + reloc.kernel32.dll_DeleteCriticalSection]
add edx, ebx
add ecx, edi
call fcn.0204d03b
add esp, 4
inc esi
cmp si, word [ebp + 6]
jb 0x204d87b
mov ecx, edi
call fcn.0204d32b
push dword [esp + 0x30]
mov edx, dword [esp + 0x30]
mov ecx, edi
call fcn.0204d3cb
add esp, 4
test eax, eax
je 0x204d905
mov eax, 0x2000
test word [ebp + 0x16], ax
je 0x204d918
mov eax, dword [ebp + 0x28]
test eax, eax
je 0x204d918
push 0
push 1
lea esi, [eax + edi]
push edi
call esi
test eax, eax
jne 0x204d918
push eax
push eax
push edi
call esi
mov ecx, edi
call fcn.0204d5fb
mov ecx, edi
call fcn.0204d2db
pop edi
pop ebp
pop esi
xor eax, eax
pop ebx
add esp, 0x10
ret 0x10
mov eax, edi
pop edi
pop ebp
pop esi
pop ebx
add esp, 0x10
ret 0x10