Function at 0x4beb7a
Capabilities:
Parse pe header

Disassembly:
push 0x10
mov eax, 0x571161
call fcn.00513cec
mov ebx, ecx
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x1c]
lea ecx, [ebx + 0x74]
push eax
call fcn.004be7dd
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebx + 0x78]
je 0x4bec15
mov edi, dword [eax + 0xc]
mov eax, dword [edi]
mov esi, dword [eax + 8]
lea eax, [ebp - 0x18]
push eax
mov ecx, esi
call dword [0x581450]
mov ecx, edi
call esi
mov edi, dword [ebp - 0x18]
lea esi, [ebp + 0xc]
and dword [ebp - 4], 0
lea ecx, [ebx + 0x68]
lea edi, [edi + 4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
and dword [ebp - 0x18], 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 1
push eax
call fcn.004bd852
cmp dword [ebp - 0x14], 0
je 0x4bebf3
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14]
call fcn.00452cb8
mov esi, dword [ebp - 0x18]
test esi, esi
je 0x4bf564
mov eax, dword [esi]
push 1
mov edi, dword [eax]
mov ecx, edi
call dword [0x581450]
mov ecx, esi
call edi
jmp 0x4bf564
mov eax, dword [ebp + 8]
movsx eax, al
cmp eax, 0x59
jg 0x4bf0cd
je 0x4bf0a6
cmp eax, 0x46
jg 0x4beefa
je 0x4beed3
push 0x40
pop edi
cmp eax, edi
jg 0x4bedb6
je 0x4bed8f
sub eax, 0x21
je 0x4bed68
dec eax
sub eax, 1
je 0x4bed41
sub eax, 1
je 0x4bed1e
sub eax, 1
je 0x4becca
sub eax, 6
jne case.0x4bf0d9.95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004c1d4f
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 2
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4becb3
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x4bf380
push 1
call fcn.004c55a0
jmp 0x4bf380
lea eax, [ebp - 0xd]
mov byte [ebp - 0xd], 0x25
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1c68
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x4d
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bed0d
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bf564
push 0x14
jmp 0x4bf12b
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1cfa
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x41
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c186c
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x48
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x49
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c17c2
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x4a
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x4b
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1916
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x42
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x43
jmp 0x4bf102
sub eax, 0x41
je 0x4bee7a
sub eax, 1
je 0x4bee56
sub eax, 1
je 0x4bee06
sub eax, 1
je case.0x4bf0d9.120
sub eax, 1
jne case.0x4bf0d9.95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c05da
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x30
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x31
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0486
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bee45
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bf380
push 0x10
jmp 0x4bf376
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c03dc
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x15
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0332
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4beeb9
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bf380
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14]
call fcn.00452cb8
jmp 0x4bf380
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0684
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x2f
jmp 0x4bf102
cmp eax, 0x50
jg 0x4bf019
je 0x4beff2
sub eax, 0x48
je 0x4befcb
sub eax, 1
je 0x4befa4
sub eax, 3
je 0x4bef7d
sub eax, 1
je 0x4bef56
dec eax
sub eax, 1
jne case.0x4bf0d9.95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0f26
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x54
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x55
jmp 0x4bf420
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0882
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x27
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c166e
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 8
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 9
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c07d8
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x25
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c072e
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x23
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1470
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x3c
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x3d
jmp 0x4bf102
sub eax, 0x52
je 0x4bf07f
sub eax, 1
je 0x4bf058
sub eax, 1
je 0x4bf031
sub eax, 4
jne case.0x4bf0d9.95
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0a80
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x38
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x39
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c09d6
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x29
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c092c
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x36
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x37
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0b2a
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x1b
jmp 0x4bee28
sub eax, 0x5e
cmp eax, 0x1c
ja case.0x4bf0d9.95
jmp dword [eax*4 + 0x4bf56e]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c131c
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 4
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 5
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bf11f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bf564
push 0x10
push dword [ebp - 0x14]
call fcn.00513968
pop ecx
pop ecx
jmp 0x4bf564
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c11c8
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 6
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 7
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c19c0
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0xb
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1acd
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0xd
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0bd4
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0xf
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0c7e
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x13
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0d28
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x17
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0530
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x1d
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1272
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x1f
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0dd2
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x21
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0e7c
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x2b
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c111e
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x2d
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c13c6
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x32
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x33
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c151a
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x35
jmp 0x4bee28
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1b77
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bf36e
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bf380
push 0x20
push dword [ebp - 0x14]
call fcn.00513968
pop ecx
pop ecx
mov byte [ebx + 0x38], 1
jmp 0x4bf564
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1ca5
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x3f
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c15c4
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x44
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x45
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c1718
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x46
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x47
jmp 0x4bf102
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0f65
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x4e
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebx + 0x68]
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bf43d
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x14], 0
je 0x4bf564
push 0x18
jmp 0x4bf12b
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0fe3
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x50
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x51
jmp 0x4bf420
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004c0fa4
pop ecx
pop ecx
mov edx, dword [eax]
and dword [eax], 0
mov dword [ebp - 4], 0x52
mov dword [ebp - 0x18], edx
mov byte [ebp - 4], 0x53
jmp 0x4bf420
lea eax, [ebp - 0x14]
push eax
call fcn.004c1c37
pop ecx
cmp byte [ebp + 0x14], 0
lea edi, [ebx + 0x68]
mov dword [ebp - 4], 0x56
jne 0x4bf4d8
mov edi, dword [ebp - 0x14]
push 0x25
lea ecx, [edi + 0x10]
call fcn.004aac84
push dword [ebp + 8]
lea ecx, [edi + 0x10]
call fcn.004aac84
and dword [ebp - 0x14], 0
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 0x57
lea ecx, [ebx + 0x68]
jmp 0x4bf542
lea eax, [ebp + 0xc]
xor ebx, ebx
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp + 0x14], bl
push eax
call fcn.004c17c2
pop ecx
pop ecx
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x59
push eax
mov ecx, edi
call fcn.004bd852
cmp dword [ebp - 0x18], ebx
je 0x4bf512
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
cmp dword [ebp - 0x1c], 0
mov byte [ebp - 4], 0x56
je 0x4bf528
push 0x10
push dword [ebp - 0x1c]
call fcn.00513968
pop ecx
pop ecx
mov esi, dword [ebp - 0x14]
push dword [ebp + 8]
lea ecx, [esi + 0x10]
call fcn.004aac84
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 0x5a
mov ecx, edi
lea eax, [ebp - 0x18]
push eax
call fcn.004bd852
cmp dword [ebp - 0x18], 0
je 0x4bf55c
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
call fcn.00452cb8
lea ecx, [ebp - 0x14]
call fcn.004c3e0d
call fcn.00513cba
ret 0x10