Function at 0x4aa370
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0xcccccccc
push 0x400
push 0xffffffffffffffff
push 0x4facb8
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x2ba
push 0xffffffffffffffff
push 0x4fb0b8
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, 2
imul ecx, eax, 0xb
mov edx, 0x30
mov word [ecx + 0x4facb8], dx
mov eax, 2
shl eax, 1
mov ecx, 0x31
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 3
mov ecx, 0x32
mov word [eax + 0x4facb8], cx
mov edx, 2
shl edx, 2
mov eax, 0x33
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 5
mov eax, 0x34
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 6
mov eax, 0x35
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 7
mov eax, 0x36
mov word [edx + 0x4facb8], ax
mov ecx, 2
shl ecx, 3
mov edx, 0x37
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 9
mov edx, 0x38
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0xa
mov edx, 0x39
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x1e
mov edx, 0x41
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x30
mov edx, 0x42
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x2e
mov edx, 0x43
mov word [ecx + 0x4facb8], dx
mov eax, 2
shl eax, 5
mov ecx, 0x44
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x12
mov ecx, 0x45
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x21
mov ecx, 0x46
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x22
mov ecx, 0x47
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x23
mov ecx, 0x48
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x17
mov ecx, 0x49
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x24
mov ecx, 0x4a
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x25
mov ecx, 0x4b
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x26
mov ecx, 0x4c
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x32
mov ecx, 0x4d
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x31
mov ecx, 0x4e
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x18
mov ecx, 0x4f
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x19
mov ecx, 0x50
mov word [eax + 0x4facb8], cx
mov edx, 2
shl edx, 4
mov eax, 0x51
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x13
mov eax, 0x52
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x1f
mov eax, 0x53
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x14
mov eax, 0x54
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x16
mov eax, 0x55
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x2f
mov eax, 0x56
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x11
mov eax, 0x57
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x2d
mov eax, 0x58
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x15
mov eax, 0x59
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x2c
mov eax, 0x5a
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x28
mov eax, 0x27
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x2b
mov eax, 0x5c
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x33
mov eax, 0x2c
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0xd
mov eax, 0x3d
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x29
mov eax, 0x60
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x1a
mov eax, 0x5b
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0xc
mov eax, 0x2d
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x34
mov eax, 0x2e
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x1b
mov eax, 0x5d
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x27
mov eax, 0x3b
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x35
mov eax, 0x2f
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x56
mov eax, 0xa2
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0xe
mov eax, 0x103
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x153
mov eax, 0x105
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x14f
mov eax, 0x10d
mov word [edx + 0x4facb8], ax
mov ecx, 2
imul edx, ecx, 0x1c
mov eax, 0x101
mov word [edx + 0x4facb8], ax
mov ecx, 2
shl ecx, 0
mov edx, 0x100
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x147
mov edx, 0x10c
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x152
mov edx, 0x104
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x15d
mov edx, 0x15c
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x151
mov edx, 0x10b
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x149
mov edx, 0x10a
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x45
mov edx, 0x11c
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x39
mov edx, 0x20
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0xf
mov edx, 0x102
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x3a
mov edx, 0x118
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x145
mov edx, 0x11a
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x46
mov edx, 0x119
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x3b
mov edx, 0x122
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x3c
mov edx, 0x123
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x3d
mov edx, 0x124
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x3e
mov edx, 0x125
mov word [ecx + 0x4facb8], dx
mov eax, 2
imul ecx, eax, 0x3f
mov edx, 0x126
mov word [ecx + 0x4facb8], dx
mov eax, 2
shl eax, 6
mov ecx, 0x127
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x41
mov ecx, 0x128
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x42
mov ecx, 0x129
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x43
mov ecx, 0x12a
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x44
mov ecx, 0x12b
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x57
mov ecx, 0x12c
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x58
mov ecx, 0x12d
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x64
mov ecx, 0x12e
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x65
mov ecx, 0x12f
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x66
mov ecx, 0x130
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x67
mov ecx, 0x131
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x68
mov ecx, 0x132
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x69
mov ecx, 0x133
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x6a
mov ecx, 0x134
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x6b
mov ecx, 0x135
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x6c
mov ecx, 0x136
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x6d
mov ecx, 0x137
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x6e
mov ecx, 0x138
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x76
mov ecx, 0x139
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x38
mov ecx, 0x156
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x1d
mov ecx, 0x155
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x2a
mov ecx, 0x154
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x15b
mov ecx, 0x157
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x137
mov ecx, 0x11b
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x138
mov ecx, 0x15a
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x11d
mov ecx, 0x159
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x36
mov ecx, 0x158
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x15c
mov ecx, 0x15b
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x150
mov ecx, pe_nt_image_headers32
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x14b
mov ecx, 0x107
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x14d
mov ecx, 0x106
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x148
mov ecx, 0x109
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x52
mov ecx, 0x140
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x4f
mov ecx, 0x141
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x50
mov ecx, 0x142
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x51
mov ecx, 0x143
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x4b
mov ecx, 0x144
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x4c
mov ecx, 0x145
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x4d
mov ecx, 0x146
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x47
mov ecx, 0x147
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x48
mov ecx, 0x148
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x49
mov ecx, 0x149
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x4e
mov ecx, 0x14e
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x53
mov ecx, 0x14a
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x135
mov ecx, 0x14b
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x11c
mov ecx, 0x14f
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x59
mov ecx, 0x150
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x37
mov ecx, 0x14c
mov word [eax + 0x4facb8], cx
mov edx, 2
imul eax, edx, 0x4a
mov ecx, 0x14d
mov word [eax + 0x4facb8], cx
mov dword [ebp - 4], 0
jmp 0x4aad25
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x200
jge 0x4aad56
mov eax, dword [ebp - 4]
movsx ecx, word [eax*2 + 0x4facb8]
test ecx, ecx
jle 0x4aad54
mov edx, dword [ebp - 4]
movsx eax, word [edx*2 + 0x4facb8]
mov cx, word [ebp - 4]
mov word [eax*2 + 0x4fb0b8], cx
jmp 0x4aad1c
add esp, 4
cmp ebp, esp
call fcn.004b5e39
mov esp, ebp
pop ebp
ret