Function at 0x4e30bc
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe54
push ebx
push esi
push edi
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], eax
mov byte [ebp - 0x31], 0
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x10]
lea edx, [ebp - 0x7c]
mov ecx, 0x40
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp eax, 0x40
jne 0x4e30fb
cmp word [ebp - 0x7c], 0x5a4d
je 0x4e3113
push 1
mov ecx, 0x2a96
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
xor ecx, ecx
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x10]
lea edx, [ebp - 0x174]
mov ecx, 0xf8
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp eax, 0xf8
jne 0x4e3146
cmp dword [ebp - 0x174], 0x4550
je 0x4e315e
push 1
mov ecx, 0x2a96
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov eax, dword [ebp - 0xec]
test eax, eax
je 0x4e3171
cmp dword [ebp - 0xe8], 0
jne 0x4e318b
push 1
mov ecx, 0x2a9b
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
jmp 0x4e318e
mov dword [ebp - 0x38], eax
movzx ebx, word [ebp - 0x16e]
dec ebx
test ebx, ebx
jl 0x4e31d9
inc ebx
lea edx, [ebp - 0x2c]
mov ecx, 0x28
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 8]
cmp eax, 0x28
je 0x4e31c8
push 1
mov ecx, 0x2a9c
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x38]
jne 0x4e31d6
mov byte [ebp - 0x31], 1
jmp 0x4e31d9
dec ebx
jne 0x4e319b
cmp byte [ebp - 0x31], 0
jne 0x4e31f7
push 1
mov ecx, 0x2a9b
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
xor ecx, ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x10]
push ebp
lea eax, [ebp - 0x184]
xor edx, edx
call fcn.004e2f1c
pop ecx
test al, al
jne 0x4e322f
push 1
mov ecx, 0x2a9d
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x184]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x10]
lea edx, [ebp - 0x1ac]
mov ecx, 0x28
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp eax, 0x28
je 0x4e3275
push 1
mov ecx, 0x2a9f
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov dl, 1
mov eax, dword [0x419be4]
call fcn.00403a70
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x4e33b6
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x1a4]
sar eax, 1
jns 0x4e329f
adc eax, 0
push eax
movzx eax, word [ebp - 0x19e]
push eax
mov eax, dword [ebp - 0x30]
call fcn.0042e354
mov edx, eax
mov ecx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x3c]
call fcn.004e2c74
test eax, eax
jbe 0x4e33a0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 4]
cmp word [eax + 2], 1
jne 0x4e32e2
cmp word [eax + 4], 1
jb 0x4e32e2
cmp word [eax], 0
je 0x4e32fa
push 1
mov ecx, 0x2a9e
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
movzx ebx, word [eax + 4]
dec ebx
test ebx, ebx
jl 0x4e33a0
inc ebx
xor esi, esi
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 4]
add eax, 6
mov edx, esi
shl edx, 4
add eax, edx
mov edx, dword [eax + 8]
cmp edx, dword [ebp - 0x180]
jne 0x4e3398
cmp byte [eax + 3], 0
jne 0x4e3398
mov edx, dword [eax + 0xc]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x184]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov eax, dword [ebp - 0x180]
xor edx, edx
push edx
push eax
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
call fcn.0041e768
push edx
push eax
mov eax, dword [ebp - 0x180]
cdq
cmp edx, dword [esp + 4]
jne 0x4e3375
cmp eax, dword [esp]
pop edx
pop eax
je 0x4e3391
push 1
mov ecx, 0x2a9f
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
call fcn.00404318
jmp 0x4e33d5
inc esi
dec ebx
jne 0x4e330a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e33bd
mov eax, dword [ebp - 0x3c]
call fcn.00403aa0
ret
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret