Function at 0x4b39f0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
add esp, 0xfffffea8
mov eax, dword [ebp + 0xc]
call fcn.004b4570
mov dword [ebp - 0x30], 0x84d407a5
call fcn.004b4580
call fcn.004b4590
mov dword [ebp - 0x3c], ecx
call fcn.004b45a0
mov ecx, eax
add ecx, 0x8135934d
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], ecx
jg 0x4b4005
jmp 0x4b3a36
mov eax, dword [ebp - 0x40]
sub eax, 0x883fc145
call fcn.004b45b0
jg 0x4b3a66
jmp 0x4b3a4e
call fcn.004b45c0
sub eax, 0x84d407a5
mov dword [ebp - 0x4c], eax
je 0x4b4024
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0x95391887
call fcn.004b45d0
jg 0x4b3a95
jmp 0x4b3a7e
mov eax, dword [ebp - 0x40]
add eax, 0x77c03eba
mov dword [ebp - 0x54], eax
je 0x4b453f
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0x9f8a9ef9
call fcn.004b45e0
jg 0x4b3ac5
jmp 0x4b3aad
mov eax, dword [ebp - 0x40]
sub eax, 0x95391888
call fcn.004b45f0
je 0x4b41f6
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0xad30d1d8
mov dword [ebp - 0x60], eax
jg 0x4b3af2
jmp 0x4b3adb
mov eax, dword [ebp - 0x40]
add eax, 0x60756106
mov dword [ebp - 0x64], eax
je 0x4b4498
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
add eax, 0x4c68a5b2
mov dword [ebp - 0x68], eax
jg 0x4b3b20
jmp 0x4b3b09
mov eax, dword [ebp - 0x40]
add eax, 0x52cf2e27
mov dword [ebp - 0x6c], eax
je 0x4b417c
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
add eax, 0x3ea19d28
call fcn.004b4600
jg 0x4b3b53
jmp 0x4b3b39
call fcn.004b4610
sub eax, 0xb3975a4f
call fcn.004b4620
je 0x4b4031
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0x790cc91b
call fcn.004b4630
jg 0x4b3feb
jmp 0x4b3b6b
call fcn.004b4640
sub eax, 0x76a620a7
call fcn.004b4650
jg 0x4b3fd2
jmp 0x4b3b85
mov eax, dword [ebp - 0x40]
sub eax, 0x71568985
mov dword [ebp - 0x80], eax
jg 0x4b3fb6
jmp 0x4b3b9b
mov eax, dword [ebp - 0x40]
sub eax, 0x66363146
call fcn.004b4660
jg 0x4b3f9d
jmp 0x4b3bb3
mov eax, dword [ebp - 0x40]
sub eax, 0x62dbc8ac
mov dword [ebp - 0x88], eax
jg 0x4b3f83
jmp 0x4b3bcc
mov eax, dword [ebp - 0x40]
sub eax, 0x5ff53d37
call fcn.004b4670
jg 0x4b3f6b
jmp 0x4b3be4
call fcn.004b4680
add eax, 0xa360bc85
call fcn.004b4690
jg 0x4b3f52
jmp 0x4b3bff
mov eax, dword [ebp - 0x40]
sub eax, 0x531914e4
call fcn.004b46a0
jg 0x4b3f38
jmp 0x4b3c17
mov eax, dword [ebp - 0x40]
sub eax, 0x44956bcc
call fcn.004b46b0
jg 0x4b3f20
jmp 0x4b3c2f
call fcn.004b46c0
add eax, 0xbf6f1ee1
call fcn.004b46d0
jg 0x4b3f05
jmp 0x4b3c4a
mov eax, dword [ebp - 0x40]
sub eax, 0x3b4f363a
mov dword [ebp - 0xa0], eax
jg 0x4b3eeb
jmp 0x4b3c63
mov eax, dword [ebp - 0x40]
sub eax, 0x350de5a0
mov dword [ebp - 0xa4], eax
jg 0x4b3ed0
jmp 0x4b3c7c
mov eax, dword [ebp - 0x40]
sub eax, 0x314812a8
mov dword [ebp - 0xa8], eax
jg 0x4b3eb7
jmp 0x4b3c95
call fcn.004b46e0
add eax, 0xd31db4df
mov dword [ebp - 0xac], eax
jg 0x4b3e9f
jmp 0x4b3cb1
mov eax, dword [ebp - 0x40]
sub eax, 0x16d39c63
mov dword [ebp - 0xb0], eax
jg 0x4b3e85
jmp 0x4b3cca
call fcn.004b46f0
add eax, 0x3c895396
mov dword [ebp - 0xb4], eax
jg 0x4b3d00
jmp 0x4b3ce6
mov eax, dword [ebp - 0x40]
add eax, 0x3ea19d27
mov dword [ebp - 0xb8], eax
je 0x4b444a
jmp 0x4b401f
call fcn.004b4700
add eax, 0x37e6424e
call fcn.004b4710
jg 0x4b3d33
jmp 0x4b3d1b
mov eax, dword [ebp - 0x40]
sub eax, 0xc376ac6b
call fcn.004b4720
je 0x4b4278
jmp 0x4b401f
call fcn.004b4730
sub eax, 0xcfd395b5
mov dword [ebp - 0xc4], eax
jg 0x4b3d67
jmp 0x4b3d4e
mov eax, dword [ebp - 0x40]
sub eax, 0xc819bdb3
mov dword [ebp - 0xc8], eax
je 0x4b4151
jmp 0x4b401f
call fcn.004b4740
sub eax, 0xdf77031d
mov dword [ebp - 0xcc], eax
jg 0x4b3d9d
jmp 0x4b3d82
call fcn.004b4750
sub eax, 0xcfd395b6
mov dword [ebp - 0xd0], eax
je 0x4b41c1
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0xf67d821e
mov dword [ebp - 0xd4], eax
jg 0x4b3dd1
jmp 0x4b3db6
call fcn.004b4760
sub eax, 0xdf77031e
mov dword [ebp - 0xd8], eax
je 0x4b42d5
jmp 0x4b401f
call fcn.004b4770
sub eax, 0xba9e4d3
call fcn.004b4780
jg 0x4b3e04
jmp 0x4b3deb
mov eax, dword [ebp - 0x40]
sub eax, 0xf67d821f
mov dword [ebp - 0xe0], eax
je 0x4b44af
jmp 0x4b401f
call fcn.004b4790
sub eax, 0xe822590
mov dword [ebp - 0xe4], eax
jg 0x4b3e39
jmp 0x4b3e1f
mov eax, dword [ebp - 0x40]
add eax, 0xf4561b2c
mov dword [ebp - 0xe8], eax
je 0x4b43be
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0xe822591
mov dword [ebp - 0xec], eax
je 0x4b40e6
jmp 0x4b3e52
mov eax, dword [ebp - 0x40]
sub eax, 0x129a797f
mov dword [ebp - 0xf0], eax
je 0x4b4202
jmp 0x4b3e6b
call fcn.004b47a0
sub eax, 0x12afa182
call fcn.004b47b0
je 0x4b4429
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
add eax, 0xe92c639c
mov dword [ebp - 0xf8], eax
je 0x4b44bc
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0x2ce24b22
call fcn.004b47c0
je 0x4b41e3
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
add eax, 0xceb7ed57
call fcn.004b47d0
je 0x4b42fe
jmp 0x4b401f
call fcn.004b47e0
sub eax, 0x350de5a1
mov dword [ebp - 0x104], eax
je 0x4b41a4
jmp 0x4b401f
call fcn.004b47f0
sub eax, 0x3b4f363b
call fcn.004b4800
je 0x4b43ca
jmp 0x4b401f
call fcn.004b4810
add eax, 0xbf6f1ee0
call fcn.004b4820
je 0x4b4282
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0x44956bcd
call fcn.004b4830
je 0x4b4261
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
add eax, 0xace6eb1b
mov dword [ebp - 0x114], eax
je 0x4b4553
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0x5c9f437c
mov dword [ebp - 0x118], eax
je 0x4b4440
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0x5ff53d38
call fcn.004b4840
je 0x4b448b
jmp 0x4b401f
call fcn.004b4850
sub eax, 0x62dbc8ad
call fcn.004b4860
je 0x4b43a7
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0x66363147
mov dword [ebp - 0x124], eax
je 0x4b40f2
jmp 0x4b401f
call fcn.004b4870
add eax, 0x8ea9767a
mov dword [ebp - 0x128], eax
je 0x4b4312
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
sub eax, 0x76a620a8
mov dword [ebp - 0x12c], eax
je 0x4b42ae
jmp 0x4b401f
call fcn.004b4880
sub eax, 0x790cc91c
call fcn.004b4890
je 0x4b416d
jmp 0x4b401f
mov eax, dword [ebp - 0x40]
add eax, 0x8135934c
mov dword [ebp - 0x134], eax
je 0x4b4163
jmp 0x4b401f
jmp 0x4b4565
mov eax, 0xb3975a4f
mov dword [ebp - 0x30], eax
jmp 0x4b4565
mov eax, 0xe822591
mov ecx, 4
mov dword [ebp - 0x138], eax
mov eax, ecx
mov dword [ebp - 0x13c], ecx
call fcn.00437f10
mov eax, esp
call fcn.004b48a0
mov eax, dword [ebp - 0x13c]
call fcn.00437f10
mov eax, 0x437288
mov eax, esp
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x13c]
call fcn.00437f10
mov eax, esp
call fcn.004b48b0
call fcn.004b48c0
call fcn.00437f10
mov eax, esp
call fcn.004b48d0
call fcn.004b48e0
mov eax, ecx
call fcn.00437f10
mov eax, esp
call fcn.004b48f0
mov eax, dword [ebp - 0x13c]
call fcn.00437f10
mov eax, esp
call fcn.004b4900
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
call fcn.004b4910
call fcn.004b4920
mov edx, dword [ebp - 0x34]
mov dword [eax], edx
call fcn.004b4930
call fcn.004b4940
mov dword [eax], esi
mov edi, dword [eax]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x138]
mov dword [ebp - 0x30], edi
jmp 0x4b4565
mov dword [ebp - 0x30], 0x66363147
jmp 0x4b4565
mov eax, 0
mov ecx, 0x40
mov edx, dword [ebp - 0x24]
mov edx, dword [edx]
mov esi, dword [ebp - 0x28]
mov esi, dword [esi]
mov edi, dword [ebp - 0x18]
add edi, 0x80
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], esi
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x148], ecx
call edx
add esp, 0x10
mov ecx, 0xc819bdb3
mov edx, 0x7eca6cb4
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x30], ecx
jmp 0x4b4565
mov eax, dword [ebp - 0x2c]
call fcn.004b4950
call fcn.004b4960
jmp 0x4b4565
call fcn.004b4970
jmp 0x4b4565
mov eax, 0x5bfe94
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
jmp 0x4b4565
mov eax, 0x350de5a1
mov ecx, dword [ebp - 0x18]
movzx ecx, word [ecx + 0x80]
cmp ecx, 0x5a4d
setne dl
and dl, 1
mov byte [ebp - 0x11], dl
call fcn.004b4980
jmp 0x4b4565
mov eax, 0xcfd395b6
mov ecx, 0x2ce24b22
mov dl, byte [ebp - 0x11]
test dl, 1
cmovne eax, ecx
call fcn.004b4990
jmp 0x4b4565
mov eax, 0x2ce24b22
mov ecx, 0x95391888
mov edx, dword [ebp - 0x18]
cmp dword [edx + 0xbc], 0
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x4b4565
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0xb
call fcn.004b49a0
jmp 0x4b4565
mov dword [ebp - 0x30], 0x129a797f
jmp 0x4b4565
mov eax, 0xf8
call fcn.004b49b0
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
mov esi, dword [ebp - 0x18]
mov esi, dword [esi + 0xbc]
mov edi, dword [ebp - 0x18]
sub edi, 0xffffff40
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], 0xf8
mov dword [esp + 0xc], edx
mov dword [ebp - 0x14c], eax
call ecx
add esp, 0x10
mov ecx, 0x5bfe2c
mov ecx, dword [ecx]
mov edx, 0xc376ac6b
test al, 1
cmovne ecx, edx
call fcn.004b49c0
jmp 0x4b4565
call fcn.004b49d0
mov dword [eax], 0x1e
mov dword [ebp - 0x30], 0x5ff53d38
jmp 0x4b4565
call fcn.004b49e0
jmp 0x4b4565
mov eax, 0x76a620a8
pushfd
mov ecx, 0xf8030840
sub ecx, 0xc6baf597
popfd
call fcn.004b49f0
cmp dword [edx + 0xc0], 0x4550
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x4b4565
mov eax, 0xdf77031e
mov ecx, 0x314812a9
mov edx, dword [ebp - 0x18]
movzx edx, word [edx + 0xd8]
cmp edx, 0x10b
cmovne eax, ecx
call fcn.004b4a00
jmp 0x4b4565
mov eax, 0x314812a9
mov ecx, 0xc9197f3c
pushfd
sub ecx, 0x57c2f5b6
popfd
mov edx, dword [ebp - 0x18]
cmp word [edx + 0xc6], 0
cmovne eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x4b4565
call fcn.004b4a10
call fcn.004b4a20
call fcn.004b4a30
jmp 0x4b4565
mov eax, 0
mov ecx, dword [ebp - 0x18]
movzx ecx, word [ecx + 0xc6]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x20]
call fcn.004b4a40
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0xbc]
mov edx, eax
sub edx, ecx
mov ecx, eax
add ecx, 0xfffffffc
add edx, ecx
mov ecx, eax
sub ecx, edx
mov edx, eax
sub edx, 0x14
sub ecx, edx
mov edx, dword [ebp - 0x18]
movzx edx, word [edx + 0xd4]
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x1c]
call fcn.004b4a50
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.0043994b
add esp, 4
mov ecx, 0x62dbc8ad
mov edx, 0xba9e4d4
mov esi, dword [ebp - 0x18]
call fcn.004b4a60
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x1b8], 0
cmovne ecx, edx
mov dword [ebp - 0x30], ecx
jmp 0x4b4565
call fcn.004b4a70
mov dword [eax], 8
mov dword [ebp - 0x30], 0x5ff53d38
jmp 0x4b4565
mov dword [ebp - 0x30], 0x3b4f363b
jmp 0x4b4565
call fcn.004b4a80
mov eax, dword [eax]
call fcn.004b4a90
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
mov esi, dword [ebp - 0x1c]
call fcn.004b4aa0
mov edi, dword [ebp - 0x18]
mov edi, dword [edi + 0x1b8]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call eax
add esp, 0x10
pushfd
xor ecx, ecx
add ecx, 0x15b585b8
sub ecx, 0x305e436
popfd
mov edx, 0x5c9f437c
test al, 1
cmovne ecx, edx
call fcn.004b4ab0
jmp 0x4b4565
call fcn.004b4ac0
mov dword [eax], 0x1e
mov dword [ebp - 0x30], 0x5ff53d38
jmp 0x4b4565
call fcn.004b4ad0
jmp 0x4b4565
mov eax, 0
mov ecx, dword [ebp - 0x1c]
call fcn.004b4ae0
mov edx, dword [ebp - 0x20]
call fcn.004b4af0
mov esi, eax
sub esi, ecx
mov ecx, 0x80
mov ecx, eax
sub ecx, edx
add esi, ecx
sub eax, esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x18], eax
call fcn.004b4b00
mov dword [eax], 0
call fcn.004b4b10
jmp 0x4b4565
mov eax, 0x9f8a9efa
mov dword [ebp - 0x30], eax
jmp 0x4b4565
mov eax, 0xf67d821f
call fcn.004b4b20
mov ecx, dword [ecx]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x30], eax
jmp 0x4b4565
mov eax, dword [ebp - 0x10]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8
mov eax, 4
mov dword [ebp - 0x150], eax
call fcn.00437f10
mov eax, esp
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x154], eax
mov eax, esi
mov eax, ecx
call fcn.00437f10
mov eax, esp
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x158], eax
mov eax, ecx
call fcn.00437f10
mov eax, esp
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x15c], eax
mov eax, ecx
mov eax, ecx
call fcn.00437f10
mov edx, eax
mov eax, esp
call fcn.004b4b30
mov edx, dword [ebp - 0x38]
call fcn.004b4b40
mov esi, dword [ebp - 0x15c]
mov edi, dword [ebp - 0x34]
mov dword [esi], edi
call fcn.004b4b50
call fcn.004b4b60
call fcn.004b4b70
jmp 0x4b4565
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], 0xad30d1d9
call fcn.004b4b80
jmp 0x4b4565
call fcn.004b4b90
mov dword [ebp - 0x30], 0x9f8a9efa
mov dword [ebp - 0x164], eax
jmp 0x4b3a18