Function at 0x4c6f1e
Capabilities:
Parse pe header

Disassembly:
mov eax, esi
pop esi
pop ebp
ret
push dword [0x4b4c0c]
mov eax, dword [esp]
push ebp
mov ebp, esp
push eax
mov eax, 4
add ebp, 0x1d6d7b74
add ebp, eax
sub ebp, 0x1d6d7b74
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0xf52992c
mov dword [esp], edx
push ecx
mov ecx, 0x357ff005
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x7bc74d3e
add ecx, eax
push edi
mov edi, 0x7bc74d3e
push edi
mov edi, 0x75b76e40
add edi, 1
add edi, 0x71fedcf5
sub edi, 0x8bb72477
add ecx, edi
pop edi
add ecx, edi
sub ecx, 0x5bff26bf
pop edi
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x4c9546
call fcn.00416a80
jmp 0x4ef06e
test eax, eax
jmp 0x4e8b75
push dword [eax + 0x3c]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4e10d2
cmp word [eax], 0x4550
jmp 0x4ef089
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push edi
mov edi, 0x6fa6f256
not edi
xor edi, 0x90590dad
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 0x7f7d320a
xor ecx, 0x5fbf4837
push ebp
mov ebp, 0x3cf79675
and ecx, ebp
pop ebp
shl ecx, 6
inc ecx
xor ecx, 0x30848d45
add esi, ecx
pop ecx
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push ebp
mov ebp, 0x7ff5d342
xor ebp, 0x101c9b08
add eax, ebp
mov ebp, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
sub eax, 0x6ef77f50
add eax, esi
add eax, 0x6ef77f50
sub eax, 0x6fe9484a
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov dword [esp], eax
mov dword [esp], 0x73dbeccb
mov dword [esp], edx
push 0x76c7aa0c
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0x4f5c70
push ebx
mov dword [esp], eax
mov dword [esp], edi
push edi
mov edi, 0x2837e81b
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
push edi
mov dword [esp], edx
push edi
mov edi, 0x1a38ecaa
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, esp
push ebx
mov ebx, 0x3e3ff80b
aas
neg ebx
aas
neg ebx
inc ebx
neg ebx
xor ebx, 0x3e3ff80e
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
push edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
pop eax
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
mov dword [esp], esi
pop dword [0x4b4c0c]
push ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x7d9a3373
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ecx
push edi
mov edi, 0x6ff6a205
add edi, 0xda782f4
add ecx, edi
pop edi
add ecx, eax
push 0x2fd51478
mov dword [esp], ebx
mov ebx, 0x77be8995
dec ebx
inc ebx
push ecx
mov ecx, 0x3cfcdf48
add ebx, ecx
pop ecx
xor ebx, 0xc9254c24
sub ecx, ebx
pop ebx
mov ecx, dword [esp]
push eax
mov eax, esp
push edi
mov edi, 4
add eax, 0x6fdd8ada
add eax, edi
sub eax, 0x6fdd8ada
pop edi
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0x4c7d20
push eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov ecx, 0x24145ac3
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
push 0x79507761
mov dword [esp], ebx
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
push edi
mov edi, 4
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
push 0x66913337
mov dword [esp], esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 0x7dfe7bf5
not ecx
xor ecx, 0x4f2acfc6
or ecx, 0x39bb3cde
neg ecx
sub ecx, 0x244801e
sub esi, ecx
pop ecx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], esi
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], 0x5af0f070
mov dword [esp], ebx
push 0x1eee3130
mov dword [esp], ecx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ebx, dword [esp]
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4e20ea
add esi, 0x1000
jmp 0x4e3a31
cmp esi, 0x7d000000
jmp 0x4ef5a6
je 0x4e3a26
jmp 0x4f5c66
add esp, 4
jmp 0x4c87b9
jne 0x4e3a26
jmp 0x4c6f15
je 0x416d96
jmp 0x4e3a26
jb 0x4e3673
jmp 0x416d7f
cmp word [esi], 0x5a4d
jmp 0x4ef07e
mov dword [0x4b4eb4], eax
jmp 0x4c958e