Function at 0x4854b0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa4
mov eax, dword [0x545100]
xor eax, esp
mov dword [esp + 0xa0], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, ecx
mov dword [esp + 0x2c], eax
push edi
push 2
mov dword [esp + 0x30], edx
mov eax, dword [esi + 0x44]
mov edi, dword [esi + 0x40]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x44]
push eax
push 0
push 0
mov dword [esp + 0x2c], esi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], edi
call fcn.00488a80
test al, al
je 0x485662
mov eax, 0x5a4d
cmp word [esp + 0x40], ax
jne 0x485662
push 4
lea eax, [esp + 0x3c]
mov ecx, esi
push eax
push 0
push 0x3c
call fcn.00488a80
test al, al
je 0x485662
push 4
lea eax, [esp + 0x48]
mov ecx, esi
push eax
push 0
push dword [esp + 0x44]
call fcn.00488a80
test al, al
je 0x485662
cmp dword [esp + 0x44], 0x4550
jne 0x485662
lea eax, [esp + 0x3c]
mov dword [esp + 0x3c], 0x14
push eax
lea eax, [esp + 0x4c]
mov ecx, esi
push eax
call fcn.00488770
test al, al
je 0x485662
cmp dword [esp + 0x3c], 0x14
je 0x48559b
mov dword [esi + 0x60], 0x1e
jmp 0x485662
mov ecx, dword [esp + 0x38]
mov edx, 0x8664
mov ax, word [esp + 0x48]
add ecx, 0x98
cmp ax, dx
je 0x4855d2
mov edx, 0x200
cmp ax, dx
je 0x4855d2
mov edx, 0x284
cmp ax, dx
je 0x4855d2
mov edx, 0xaa64
cmp ax, dx
jne 0x4855d5
add ecx, 0x10
push 4
lea eax, [esp + 0x40]
push eax
push 0
push ecx
mov ecx, esi
call fcn.00488a80
test al, al
je 0x485662
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x485662
mov edi, eax
xor eax, eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x10], eax
cmp edi, 7
jbe 0x48565e
mov ebx, dword [esp + 0x10]
mov eax, 7
nop dword [eax]
dec eax
lea edx, [esp + 0x37]
mov dword [esp + 0x24], eax
mov ecx, edi
sub ecx, 1
mov eax, ebx
push 1
sbb eax, 0
mov dword [esp + 0x24], ecx
push edx
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x20], eax
call fcn.00488a80
test al, al
je 0x48564a
cmp byte [esp + 0x37], 0
jne 0x48564a
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x485610
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jl 0x485716
jg 0x485679
cmp edi, 0x48
jb 0x485716
mov esi, edi
lea eax, [esp + 0x5c]
push 8
sub esi, 8
mov edi, ecx
mov ecx, dword [esp + 0x20]
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x4856c9
lea eax, [esp + 0x5c]
cmp dword [eax], 0x53575341
jne 0x4856c9
cmp dword [eax + 4], 0x42336769
jne 0x4856c9
mov dword [esp + 0x10], 0x40
test ebx, ebx
je 0x4859fe
mov dword [ebx], 7
jmp 0x4859fe
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
jne 0x4856df
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x10], edx
je 0x48571a
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x64]
push 8
sub esi, 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x485716
lea eax, [esp + 0x64]
cmp dword [eax], 0x53575341
jne 0x485716
cmp dword [eax + 4], 0x42336769
je 0x4856ae
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test eax, eax
jl 0x485887
jg 0x485734
cmp ecx, 0xc0
jb 0x4857c3
mov esi, ecx
mov edi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x6c]
push 8
sub esi, 0x80
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x485770
lea eax, [esp + 0x6c]
cmp dword [eax], 0x53575341
jne 0x485770
cmp dword [eax + 4], 0x42336769
je 0x4856ae
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x14]
jne 0x485784
mov esi, dword [esp + 0x18]
cmp dword [esp + 0x10], esi
je 0x4857d6
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x74]
push 8
sub esi, 0x80
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x4857d6
lea eax, [esp + 0x74]
cmp dword [eax], 0x53575341
jne 0x4857d6
cmp dword [eax + 4], 0x42336769
jne 0x4857d6
jmp 0x4856ae
test eax, eax
jl 0x485887
jg 0x4857d6
cmp ecx, 0x48
jb 0x485887
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x7c]
mov edi, dword [esp + 0x18]
sub esi, 8
mov ecx, dword [esp + 0x1c]
push 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x48582a
lea eax, [esp + 0x7c]
cmp dword [eax], 0x53575341
jne 0x48582a
cmp dword [eax + 4], 0x42326769
jne 0x48582a
mov dword [esp + 0x10], 0x40
test ebx, ebx
je 0x4859fe
mov dword [ebx], 5
jmp 0x4859fe
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
jne 0x485840
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x10], edx
je 0x48588d
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x84]
push 8
sub esi, 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x48587d
lea eax, [esp + 0x84]
cmp dword [eax], 0x53575341
jne 0x48587d
cmp dword [eax + 4], 0x42326769
je 0x48580f
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
jmp 0x48588f
mov ecx, dword [esp + 0x14]
jmp 0x48588f
mov eax, edx
test eax, eax
jl 0x485a73
jg 0x4858a2
cmp ecx, 0x78
jb 0x485939
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x8c]
mov esi, ecx
mov ecx, dword [esp + 0x1c]
push 8
sub esi, 0x38
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x4858e3
lea eax, [esp + 0x8c]
cmp dword [eax], 0x53575341
jne 0x4858e3
cmp dword [eax + 4], 0x42326769
je 0x48580f
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x14]
jne 0x4858f7
mov esi, dword [esp + 0x18]
cmp dword [esp + 0x10], esi
je 0x48594c
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x94]
push 8
sub esi, 0x38
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x48594c
lea eax, [esp + 0x94]
cmp dword [eax], 0x53575341
jne 0x48594c
cmp dword [eax + 4], 0x42326769
jne 0x48594c
jmp 0x48580f
test eax, eax
jl 0x485a73
jg 0x48594c
cmp ecx, 0x30
jb 0x485a73
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x9c]
mov edi, dword [esp + 0x18]
sub esi, 8
mov ecx, dword [esp + 0x1c]
push 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x48598b
lea eax, [esp + 0x9c]
cmp dword [eax], 0x53575341
jne 0x48598b
cmp dword [eax + 4], 0x646e6769
je 0x4859ec
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x14]
jne 0x4859a3
mov ecx, dword [esp + 0x18]
cmp dword [esp + 0x10], ecx
je 0x485a73
mov edi, dword [esp + 0x10]
mov esi, eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0xa4]
push 8
sub esi, 8
push eax
sbb edi, 0
push edi
push esi
call fcn.00488a80
test al, al
je 0x485a73
lea eax, [esp + 0xa4]
cmp dword [eax], 0x53575341
jne 0x485a73
cmp dword [eax + 4], 0x646e6769
jne 0x485a73
mov dword [esp + 0x10], 0x28
test ebx, ebx
je 0x4859fe
mov dword [ebx], 1
mov ebx, dword [esp + 0x10]
sub esi, ebx
push ecx
mov ecx, dword [esp + 0x20]
sbb edi, 0
push edi
push esi
call fcn.004886e0
mov ecx, dword [esp + 0x2c]
mov al, 1
mov byte [esp + 0x37], al
test ecx, ecx
je 0x485a51
lea eax, [esp + 0x38]
mov dword [esp + 0x38], ebx
push eax
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00488770
test al, al
je 0x485a49
cmp dword [esp + 0x38], ebx
je 0x485a4d
mov eax, dword [esp + 0x1c]
mov dword [eax + 0x60], 0x1e
xor al, al
jmp 0x485a51
mov al, byte [esp + 0x37]
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x485a75
mov dword [ecx], esi
mov dword [ecx + 4], edi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.004a5e3b
mov esp, ebp
pop ebp
ret
xor al, al
mov ecx, dword [esp + 0xac]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004a5e3b
mov esp, ebp
pop ebp
ret