Function at 0x4a4e20
Capabilities:
Parse pe header

Disassembly:
lea r12, [rsp - 0xb8]
cmp r12, qword [r14 + 0x10]
jbe 0x4a57a6
push rbp
mov rbp, rsp
sub rsp, 0x130
mov qword [rsp + 0x140], rax
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x148], rbx
lea rax, [0x004ef280]
nop dword [rax]
call fcn.0040c880
mov qword [rsp + 0xd0], rax
nop
lea rax, [0x004eb320]
call fcn.0040c880
mov rcx, qword [rsp + 0xd8]
mov qword [rax], rcx
cmp dword [0x0064b4b0], 0
jne 0x4a4e98
mov rdx, qword [rsp + 0x148]
jmp 0x4a4ea8
call fcn.00461520
mov rdx, qword [rsp + 0x148]
mov qword [r11], rdx
mov qword [rsp + 0xb8], rax
mov qword [rax + 8], rdx
movups xmmword [rax + 0x10], xmm15
movabs rcx, 0x7fffffffffffffff
mov qword [rax + 0x20], rcx
lea rax, [0x004d8b20]
call fcn.0040c880
mov qword [rsp + 0xe8], rax
mov rcx, qword [rsp + 0xd8]
mov rdx, qword [rcx + 0x18]
mov rbx, rax
mov edi, 0x60
xor esi, esi
mov rax, qword [rsp + 0x148]
mov rcx, rdi
call rdx
nop
test rbx, rbx
jne 0x4a535f
mov rdx, qword [rsp + 0xe8]
cmp byte [rdx], 0x4d
jne 0x4a4ff6
cmp byte [rdx + 1], 0x5a
nop
jne 0x4a4ff6
mov ecx, dword [rdx + 0x3c]
mov qword [rsp + 0x70], rcx
nop
lea rax, [0x004d8ac0]
call fcn.0040c880
mov qword [rsp + 0xe0], rax
mov rcx, qword [rsp + 0xd8]
mov rdx, qword [rcx + 0x18]
mov rbx, rax
mov edi, 4
mov rsi, qword [rsp + 0x70]
mov rax, qword [rsp + 0x148]
mov rcx, rdi
call rdx
mov rbx, qword [rsp + 0xe0]
cmp byte [rbx], 0x50
jne 0x4a4f93
cmp byte [rbx + 1], 0x45
jne 0x4a4f93
cmp byte [rbx + 2], 0
jne 0x4a4f93
cmp byte [rbx + 3], 0
jne 0x4a4f93
mov rdx, qword [rsp + 0x70]
add rdx, 4
jmp 0x4a4ff8
movups xmmword [rsp + 0xf0], xmm15
lea rax, [0x004d8ac0]
call fcn.00409ee0
lea rcx, [0x004d8ac0]
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rax
lea rax, [0x004ff7b1]
mov ebx, 0x1e
lea rcx, [rsp + 0xf0]
mov edi, 1
mov rsi, rdi
nop dword [rax + rax]
call fcn.004957e0
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x130
pop rbp
ret
xor edx, edx
mov qword [rsp + 0x58], rdx
mov rbx, qword [rsp + 0xb8]
mov r9, qword [rbx + 0x10]
lea r10, [rdx + r9]
cmp r9, r10
jg 0x4a5016
mov qword [rbx + 0x18], r10
lea rax, [0x005503e0]
lea rcx, [0x00550ee8]
lea rdi, [0x0064b1e0]
lea rsi, [0x004d37c0]
mov r8, qword [rsp + 0xd0]
call fcn.004a00a0
nop
test rax, rax
jne 0x4a534e
mov rax, qword [rsp + 0xd0]
movzx edx, word [rax]
cmp dx, 0x5032
ja 0x4a508c
nop dword [rax + rax]
cmp dx, 0x14c
ja 0x4a5078
test dx, dx
je 0x4a50be
cmp dx, 0x14c
je 0x4a50be
jmp 0x4a52f4
cmp dx, 0x1c4
je 0x4a50be
nop
cmp dx, 0x5032
je 0x4a50be
jmp 0x4a52f4
cmp dx, 0x5128
ja 0x4a50ac
cmp dx, 0x5064
je 0x4a50be
nop word [rax + rax]
cmp dx, 0x5128
je 0x4a50be
jmp 0x4a52f4
cmp dx, 0x8664
je 0x4a50be
cmp dx, 0xaa64
jne 0x4a52f4
lea rbx, [0x00550880]
mov rcx, qword [rsp + 0xb8]
call fcn.004a7ea0
mov rdx, qword [rsp + 0xd0]
mov qword [rdx + 0x78], rbx
mov qword [rdx + 0x80], rcx
cmp dword [0x0064b4b0], 0
je 0x4a50fe
call fcn.00461540
mov qword [r11], rax
mov r8, qword [rdx + 0x70]
mov qword [r11 + 8], r8
mov qword [rdx + 0x70], rax
test rdi, rdi
jne 0x4a52e3
mov rax, rdx
lea rbx, [0x00550880]
mov rcx, qword [rsp + 0xb8]
nop dword [rax]
call fcn.004a81c0
mov rdx, qword [rsp + 0xd0]
mov qword [rdx + 0x60], rbx
mov qword [rdx + 0x68], rcx
cmp dword [0x0064b4b0], 0
je 0x4a5150
nop
call fcn.00461540
mov qword [r11], rax
mov r9, qword [rdx + 0x58]
mov qword [r11 + 8], r9
mov qword [rdx + 0x58], rax
test rdi, rdi
jne 0x4a52d2
mov rdi, qword [rdx + 0x70]
mov rsi, qword [rdx + 0x78]
mov r8, qword [rdx + 0x80]
call fcn.004a8680
mov rdx, qword [rsp + 0xd0]
mov qword [rdx + 0x48], rbx
mov qword [rdx + 0x50], rcx
cmp dword [0x0064b4b0], 0
je 0x4a519a
call fcn.00461540
mov qword [r11], rax
mov r8, qword [rdx + 0x40]
mov qword [r11 + 8], r8
mov qword [rdx + 0x40], rax
nop
test rdi, rdi
jne 0x4a52c1
mov rcx, qword [rdx]
mov qword [rsp + 0x7c], rcx
movups xmm0, xmmword [rdx + 4]
movups xmmword [rsp + 0x80], xmm0
lea rax, [0x004ef160]
lea rbx, [rsp + 0x7c]
call fcn.004a1300
mov rcx, qword [rsp + 0x58]
add rcx, rax
mov rbx, qword [rsp + 0xb8]
mov rdx, qword [rbx + 0x10]
add rcx, rdx
cmp rdx, rcx
jle 0x4a51fa
mov rdx, qword [0x005e8fe0]
mov rsi, qword [0x005e8fe8]
jmp 0x4a5202
mov qword [rbx + 0x18], rcx
xor edx, edx
xor esi, esi
test rdx, rdx
jne 0x4a52af
mov rdx, qword [rsp + 0xd0]
movzx ecx, word [rdx + 0x10]
lea rax, [0x00550880]
nop
call fcn.004a5840
mov rdx, qword [rsp + 0xd0]
mov qword [rdx + 0x18], rax
cmp dword [0x0064b4b0], 0
je 0x4a524a
call fcn.00461540
mov qword [r11], rbx
mov rsi, qword [rdx + 0x20]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x20], rbx
test rcx, rcx
jne 0x4a529e
movzx ecx, word [rdx + 2]
lea rax, [0x004e0400]
mov rbx, rcx
call fcn.00447ca0
mov rdx, qword [rsp + 0xd0]
movzx esi, word [rdx + 2]
mov qword [rdx + 0x30], rsi
mov qword [rdx + 0x38], rsi
cmp dword [0x0064b4b0], 0
je 0x4a5293
call fcn.00461540
mov qword [r11], rax
mov r9, qword [rdx + 0x28]
mov qword [r11 + 8], r9
mov qword [rdx + 0x28], rax
xor eax, eax
jmp 0x4a5378
xor eax, eax
mov rbx, rcx
mov rcx, rdi
add rsp, 0x130
pop rbp
ret
xor eax, eax
mov rbx, rdx
mov rcx, rsi
add rsp, 0x130
pop rbp
nop
ret
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x130
pop rbp
ret
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x130
pop rbp
ret
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x130
pop rbp
ret
movups xmmword [rsp + 0xf0], xmm15
movzx eax, word [rax]
call fcn.00409f60
lea rcx, [0x004d7a40]
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rax
lea rax, [0x004febc8]
mov ebx, 0x1c
lea rcx, [rsp + 0xf0]
mov edi, 1
mov rsi, rdi
call fcn.004957e0
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x130
pop rbp
ret
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x130
pop rbp
ret
xor eax, eax
add rsp, 0x130
pop rbp
ret
mov qword [r12 + r11*8], r9
lea r9, [r11 + 1]
mov rdx, rax
mov rax, r9
movzx r9d, word [rdx + 2]
nop dword [rax]
cmp rax, r9
jge 0x4a56ba
mov qword [rsp + 0x50], rax
movups xmmword [rsp + 0x90], xmm15
movups xmmword [rsp + 0x98], xmm15
movups xmmword [rsp + 0xa8], xmm15
lea rax, [0x005503e0]
mov rbx, qword [rsp + 0xb8]
lea rcx, [0x00550ee8]
lea rdi, [0x0064b1e0]
lea rsi, [0x004dbe20]
lea r8, [rsp + 0x90]
call fcn.004a00a0
nop word [rax + rax]
test rax, rax
jne 0x4a56a9
mov rdx, qword [rsp + 0xd0]
mov rbx, qword [rdx + 0x70]
mov rcx, qword [rdx + 0x78]
mov rdi, qword [rdx + 0x80]
lea rax, [rsp + 0x90]
call fcn.004a7ac0
test rcx, rcx
jne 0x4a5698
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0xc8], rax
lea rax, [0x004ec880]
call fcn.0040c880
mov qword [rsp + 0xc0], rax
movups xmmword [rsp + 0x100], xmm15
movups xmmword [rsp + 0x110], xmm15
movups xmmword [rsp + 0x120], xmm15
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0x100], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x108], rcx
mov ecx, dword [rsp + 0x98]
mov dword [rsp + 0x110], ecx
mov ecx, dword [rsp + 0x9c]
mov dword [rsp + 0x114], ecx
mov ecx, dword [rsp + 0xa0]
mov dword [rsp + 0x118], ecx
mov ecx, dword [rsp + 0xa4]
mov dword [rsp + 0x11c], ecx
mov ecx, dword [rsp + 0xa8]
mov dword [rsp + 0x120], ecx
mov ecx, dword [rsp + 0xac]
mov dword [rsp + 0x124], ecx
movzx ecx, word [rsp + 0xb0]
mov word [rsp + 0x128], cx
movzx ecx, word [rsp + 0xb2]
mov word [rsp + 0x12a], cx
mov ecx, dword [rsp + 0xb4]
mov dword [rsp + 0x12c], ecx
cmp dword [0x0064b4b0], 0
je 0x4a5519
mov rbx, rax
lea rcx, [rsp + 0x100]
lea rax, [0x004f0980]
call fcn.00411b20
mov rax, qword [rsp + 0xc0]
movups xmm0, xmmword [rsp + 0x100]
movups xmmword [rax], xmm0
movups xmm0, xmmword [rsp + 0x110]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [rsp + 0x120]
movups xmmword [rax + 0x20], xmm0
mov ecx, dword [rax + 0x1c]
mov qword [rsp + 0x70], rcx
mov edx, dword [rax + 0x18]
movabs rbx, 0x7fffffffffffffff
sub rbx, rdx
mov qword [rsp + 0x68], rbx
add rdx, rcx
mov qword [rsp + 0x38], rdx
mov esi, dword [rsp + 0xa4]
mov dword [rsp + 0x34], esi
test esi, esi
lea rax, [0x004eb320]
call fcn.0040c880
mov ecx, dword [rsp + 0x34]
test ecx, ecx
mov rcx, qword [rsp + 0xd8]
lea rdx, [0x00550400]
mov rbx, rcx
cmove rcx, rdx
mov qword [rax], rcx
mov rcx, qword [rsp + 0x148]
lea rsi, [0x0064b1e0]
mov rdi, rcx
cmove rcx, rsi
mov rsi, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
cmp rsi, r8
movabs r8, 0x7fffffffffffffff
mov r9, qword [rsp + 0x38]
cmovle r8, r9
cmp dword [0x0064b4b0], 0
je 0x4a55e0
call fcn.00461520
mov qword [r11], rcx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], r8
cmp dword [0x0064b4b0], 0
jne 0x4a5603
mov r9, qword [rsp + 0xc0]
jmp 0x4a561b
call fcn.00461540
mov qword [r11], rax
mov r9, qword [rsp + 0xc0]
mov r10, qword [r9 + 0x58]
mov qword [r11 + 8], r10
mov qword [r9 + 0x58], rax
lea r10, [0x00550420]
mov qword [r9 + 0x48], r10
cmp dword [0x0064b4b0], 0
je 0x4a5643
call fcn.00461540
mov qword [r11], rax
mov r12, qword [r9 + 0x50]
mov qword [r11 + 8], r12
mov qword [r9 + 0x50], rax
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rax + 0x30]
mov r11, qword [rsp + 0x50]
nop dword [rax + rax]
cmp r11, rcx
jae 0x4a579d
mov r12, qword [rax + 0x28]
cmp dword [0x0064b4b0], 0
je 0x4a536a
mov rcx, r11
nop dword [rax]
call fcn.00461540
mov qword [r11], r9
mov r13, qword [r12 + rcx*8]
mov qword [r11 + 8], r13
mov r11, rcx
jmp 0x4a536a
xor eax, eax
mov rbx, rcx
mov rcx, rdi
add rsp, 0x130
pop rbp
ret
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x130
pop rbp
ret
mov rsi, qword [rdx + 0x30]
mov qword [rsp + 0x60], rsi
mov rcx, qword [rsp + 0xb8]
xor eax, eax
jmp 0x4a56e0
lea rax, [r9 + 1]
mov rsi, qword [rsp + 0x60]
mov rcx, qword [rsp + 0xb8]
cmp rax, rsi
jge 0x4a577a
mov rdi, qword [rdx + 0x30]
cmp rax, rdi
jae 0x4a5795
mov qword [rsp + 0x48], rax
mov rsi, qword [rdx + 0x28]
mov rsi, qword [rsi + rax*8]
test byte [rsi], al
lea rbx, [0x00550880]
mov rax, rsi
call fcn.004a7ba0
mov rdx, qword [rsp + 0xd0]
mov r8, qword [rdx + 0x30]
mov r9, qword [rsp + 0x48]
cmp r9, r8
jae 0x4a578a
mov r8, qword [rdx + 0x28]
mov r8, qword [r8 + r9*8]
mov qword [r8 + 0x38], rbx
mov qword [r8 + 0x40], rcx
cmp dword [0x0064b4b0], 0
je 0x4a5753
call fcn.00461540
mov qword [r11], rax
mov r10, qword [r8 + 0x30]
mov qword [r11 + 8], r10
mov qword [r8 + 0x30], rax
nop word [rax + rax]
test rdi, rdi
je 0x4a56cf
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x130
pop rbp
ret
mov rax, rdx
xor ebx, ebx
xor ecx, ecx
add rsp, 0x130
pop rbp
ret
mov rax, r9
mov rcx, r8
call fcn.004618a0
mov rcx, rdi
call fcn.004618a0
mov rax, r11
call fcn.004618a0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.0045f620
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp fcn.004a4e20