Function at 0x4bf5e4
Capabilities:
Parse pe header

Disassembly:
push 0x10
mov eax, 0x571161
call fcn.00513cec
mov ebx, ecx
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x1c]
lea ecx, [ebx + 0x74]
push eax
call fcn.004be7dd
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebx + 0x78]
je 0x4bf67f
mov edi, dword [eax + 0xc]
mov eax, dword [edi]
mov esi, dword [eax + 8]
lea eax, [ebp - 0x18]
push eax
mov ecx, esi
call dword [0x581450]
mov ecx, edi
call esi
mov edi, dword [ebp - 0x18]
lea esi, [ebp + 0xc]
and dword [ebp - 4], 0
lea ecx, [ebx + 0x68]
lea edi, [edi + 4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
and dword [ebp - 0x18], 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 1
push eax
call fcn.004bd852
cmp dword [ebp - 0x14], 0
je 0x4bf65d
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14]
call fcn.00452cb8
mov esi, dword [ebp - 0x18]
test esi, esi
je 0x4bffce
mov eax, dword [esi]
push 1
mov edi, dword [eax]
mov ecx, edi
call dword [0x581450]
mov ecx, esi
call edi
jmp 0x4bffce
mov eax, dword [ebp + 8]
movsx eax, al
cmp eax, 0x59
jg 0x4bfb37
je 0x4bfb10
cmp eax, 0x46
jg 0x4bf964
je 0x4bf93d
push 0x40
pop edi
cmp eax, edi
jg 0x4bf820
je 0x4bf7f9
sub eax, 0x21
je 0x4bf7d2
dec eax
sub eax, 1
je 0x4bf7ab
sub eax, 1
je 0x4bf788
sub eax, 1
je 0x4bf734
sub eax, 6
jne case.0x4bfb43.95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004c1d4f
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 2
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bf71d
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x4bfdea
push 1
call fcn.004c55a0
jmp 0x4bfdea
lea eax, [ebp - 0xd]
mov byte [ebp - 0xd], 0x25
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1c68
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x4d
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bf777
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bffce
push 0x14
jmp 0x4bfb95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1cfa
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x41
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c18c1
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x48
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x49
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1817
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x4a
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x4b
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c196b
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x42
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x43
jmp 0x4bfb6c
sub eax, 0x41
je 0x4bf8e4
sub eax, 1
je 0x4bf8c0
sub eax, 1
je 0x4bf870
sub eax, 1
je case.0x4bfb43.120
sub eax, 1
jne case.0x4bfb43.95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c062f
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x30
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x31
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c04db
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bf8af
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bfdea
push 0x10
jmp 0x4bfde0
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0431
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x15
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0387
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bf923
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bfdea
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14]
call fcn.00452cb8
jmp 0x4bfdea
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c06d9
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x2f
jmp 0x4bfb6c
cmp eax, 0x50
jg 0x4bfa83
je 0x4bfa5c
sub eax, 0x48
je 0x4bfa35
sub eax, 1
je 0x4bfa0e
sub eax, 3
je 0x4bf9e7
sub eax, 1
je 0x4bf9c0
dec eax
sub eax, 1
jne case.0x4bfb43.95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1022
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x54
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x55
jmp 0x4bfe8a
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c08d7
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x27
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c16c3
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 8
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 9
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c082d
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x25
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0783
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x23
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c14c5
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x3c
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x3d
jmp 0x4bfb6c
sub eax, 0x52
je 0x4bfae9
sub eax, 1
je 0x4bfac2
sub eax, 1
je 0x4bfa9b
sub eax, 4
jne case.0x4bfb43.95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0ad5
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x38
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x39
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0a2b
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x29
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0981
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x36
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x37
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0b7f
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x1b
jmp 0x4bf892
sub eax, 0x5e
cmp eax, 0x1c
ja case.0x4bfb43.95
jmp dword [eax*4 + 0x4bffd8]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1371
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 4
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 5
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bfb89
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bffce
push 0x10
push dword [ebp - 0x14]
call fcn.00513968
pop ecx
pop ecx
jmp 0x4bffce
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c121d
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 6
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 7
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1a15
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0xb
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1b22
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0xd
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0c29
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0xf
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0cd3
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x13
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0d7d
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x17
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0585
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x1d
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c12c7
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x1f
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0e27
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x21
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0ed1
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x2b
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1173
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x2d
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c141b
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x32
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x33
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c156f
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x35
jmp 0x4bf892
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1bd7
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bfdd8
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bfdea
push 0x20
push dword [ebp - 0x14]
call fcn.00513968
pop ecx
pop ecx
mov byte [ebx + 0x38], 1
jmp 0x4bffce
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1ca5
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x3f
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1619
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x44
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x45
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c176d
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x46
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x47
jmp 0x4bfb6c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1061
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x4e
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bfea7
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bffce
push 0x18
jmp 0x4bfb95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c10df
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x50
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x51
jmp 0x4bfe8a
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c10a0
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x52
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x53
jmp 0x4bfe8a
lea eax, [ebp - 0x14]
push eax
call fcn.004c1c37
pop ecx
cmp byte [ebp + 0x14], 0
lea edi, [ebx + 0x68]
mov dword [ebp - 4], 0x56
jne 0x4bff42
mov edi, dword [ebp - 0x14]
push 0x25
lea ecx, [edi + 0x10]
call fcn.004aac84
push dword [ebp + 8]
lea ecx, [edi + 0x10]
call fcn.004aac84
and dword [ebp - 0x14], 0
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 0x57
lea ecx, [ebx + 0x68]
jmp 0x4bffac
lea eax, [ebp + 0xc]
xor ebx, ebx
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp + 0x14], bl
push eax
call fcn.004c1817
pop ecx
pop ecx
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x59
push eax
mov ecx, edi
call fcn.004bd852
cmp dword [ebp - 0x18], ebx
je 0x4bff7c
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x1c], 0
mov byte [ebp - 4], 0x56
je 0x4bff92
push 0x10
push dword [ebp - 0x1c]
call fcn.00513968
pop ecx
pop ecx
mov esi, dword [ebp - 0x14]
push dword [ebp + 8]
lea ecx, [esi + 0x10]
call fcn.004aac84
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 0x5a
mov ecx, edi
lea eax, [ebp - 0x18]
push eax
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bffc6
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
lea ecx, [ebp - 0x14]
call fcn.004c3e0d
call fcn.00513cba
ret 0x10