Function at 0x49d79c37
Capabilities:
Parse pe header

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x244
mov eax, dword [0x49d940ac]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp + 0x28]
push ebx
mov dword [ebp - 0x220], eax
mov eax, dword [ebp + 0x2c]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x244], eax
mov eax, 0x800
push edi
xor ebx, ebx
push eax
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x214], ebx
mov dword [ebp - 0x240], ebx
mov dword [0x49d94120], ebx
call fcn.49d7190d
mov ecx, dword [esi + 0xc]
mov edi, eax
xor eax, eax
inc eax
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x2c], ebx
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x230], ecx
cmp dword [esi + 8], eax
jb 0x49d79dae
cmp dword [0x49d941ac], ebx
jne 0x49d7bf66
mov eax, dword [ebp - 0x230]
push dword [eax]
lea eax, [ebp - 0x210]
push dword [esi + 4]
push 0x106
push eax
call fcn.49d7a25b
test eax, eax
jne 0x49d7bf6e
cmp dword [ebp - 0x23c], ebx
jne 0x49d7d7af
push dword [ebp + 0x18]
lea ecx, [ebp - 0x22c]
push ecx
lea eax, [edi + 4]
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.49d7a235
test al, al
je 0x49d7bf16
cmp dword [0x49d941ac], ebx
jne 0x49d8b8af
mov eax, dword [edi + 4]
mov ecx, dword [ebp + 0x10]
and eax, dword [ebp + 0x10]
and ecx, dword [ebp + 0x14]
cmp eax, ecx
je 0x49d79de5
push dword [ebp - 0x22c]
lea eax, [edi + 4]
push eax
call fcn.49d79eb2
test al, al
jne 0x49d79d3a
push dword [ebp - 0x22c]
call fcn.49d72e7b
mov eax, dword [0x49d94120]
cmp eax, ebx
je 0x49d79d8a
cmp eax, 0x12
jne 0x49d7bf43
mov eax, dword [ebp - 0x230]
mov eax, dword [eax + 0xc]
inc dword [ebp - 0x228]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x228]
cmp eax, dword [esi + 8]
jbe 0x49d79cdc
cmp dword [ebp - 0x220], ebx
je 0x49d7bedb
xor eax, eax
cmp dword [ebp - 0x244], ebx
jne 0x49d7d86e
cmp dword [ebp - 0x240], ebx
je 0x49d7dc1f
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.49d7139d
leave
ret 0x28
lea ecx, [edi + 0x30]
mov eax, ecx
lea edx, [eax + 2]
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x234], edx
mov dx, word [eax]
inc eax
inc eax
cmp dx, bx
jne 0x49d79dfd
sub eax, dword [ebp - 0x234]
sar eax, 1
lea eax, [ecx + eax*2 + 2]
mov ebx, eax
sub ebx, edi
lea ecx, [edi + 0x238]
push ecx
sub ebx, 0x30
sar ebx, 1
mov ecx, 0x112
sub ecx, ebx
push ecx
push eax
mov dword [ebp - 0x234], eax
call fcn.49d717fb
mov ecx, dword [ebp - 0x234]
cmp word [ecx], 0
jne 0x49d7ab03
xor eax, eax
mov word [edi + 2], ax
mov eax, ecx
lea ebx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x49d79e52
sub eax, ebx
sar eax, 1
add eax, eax
sub eax, edi
lea eax, [eax + ecx + 5]
and eax, 0xfffc
test byte [edi + 4], 0x10
mov word [edi], ax
jne 0x49d7a2d2
inc dword [esi + 0x20]
cmp dword [ebp - 0x220], 0
je 0x49d7bc3e
push dword [ebp - 0x218]
push dword [ebp - 0x224]
push edi
push esi
call dword [ebp - 0x220]
test eax, eax
jne 0x49d8b87e
xor ebx, ebx
jmp 0x49d79d5a
inc dword [esi + 0x24]
jmp 0x49d79e7d
mov word [edi + 2], bx
jmp 0x49d79e4d
inc dword [esi + 0x14]
movzx eax, word [edi]
add dword [ebp - 0x214], eax
add edi, eax
mov eax, dword [ebp - 0x214]
add eax, 0x254
cmp eax, dword [ebp - 0x21c]
jb 0x49d79ea6
jmp 0x49d8b882
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x49d79dba
shl eax, 2
push eax
call fcn.49d7190d
xor ecx, ecx
mov dword [esi + 0x1c], eax
mov eax, dword [esi + 0x18]
cmp dword [esi + 0x14], ebx
jbe 0x49d79dba
mov edx, dword [esi + 0x1c]
mov dword [edx + ecx*4], eax
movzx edx, word [eax]
add eax, edx
inc ecx
cmp ecx, dword [esi + 0x14]
jb 0x49d7bf00
jmp 0x49d79dba
mov eax, dword [0x49d94120]
cmp eax, ebx
je 0x49d79d8a
cmp eax, 0x12
je 0x49d7bf52
cmp eax, 5
je 0x49d7bf52
cmp eax, 2
jne 0x49d7bf5c
cmp dword [ebp - 0x238], ebx
je 0x49d79d7d
jmp 0x49d8b865
cmp dword [esi + 8], 1
jbe 0x49d79dd4
jmp 0x49d79d8a
push 2
pop eax
mov dword [0x49d94120], eax
jmp 0x49d7bf2d
cmp eax, 3
je 0x49d7bf32
jmp 0x49d79d7d
xor eax, eax
inc eax
jmp 0x49d79dd4
push 0x6f
jmp 0x49d7dc21
push dword [ebp - 0x218]
push dword [ebp - 0x224]
push esi
call dword [ebp - 0x23c]
cmp eax, ebx
je 0x49d79d18
jmp 0x49d79dd4
push dword [ebp - 0x218]
push dword [ebp - 0x224]
push esi
call dword [ebp - 0x244]
cmp eax, ebx
je 0x49d79dc8
jmp 0x49d79dd4
push 2
pop eax
jmp 0x49d79dd4