Function at 0x4a7fb0
Capabilities:
Parse pe header

Disassembly:
xor byte [ecx + 0x48], al
xor dword [eax], 0x30044942
inc ebx
dec edx
xor dword [ebx + 0x4a], eax
xor dword [ebx + ecx*2 + 0x31], eax
inc esp
dec esp
xor al, byte [esp + ecx*2 - 0x7f]
xor al, byte [ebp + 0x4d]
pop es
xor al, byte [esi + 0x4e]
xor eax, dword [esi + 0x4e]
xor eax, dword [edi + 0x4f]
xor eax, dword [edi + 0x50]
xor al, 0x48
push eax
xor al, 0x48
push ecx
xor al, 0x49
push ecx
xor eax, 0x35815249
dec edx
push ebx
xor dword [esi], 0x363a544b
dec esp
push ebp
dec esp
push esi
aaa
dec ebp
push esi
aaa
dec ebp
push edi
aaa
dec esi
pop eax
cmp byte [esi + 0x58], cl
cmp byte [edi + 0x59], cl
cmp byte [edi + 0x5a], cl
dec edi
pop edx
cmp dword [eax + 0x5a], edx
push eax
pop edx
cmp dword [eax + 0x5b], edx
pop ebx
cmp dword [ecx + 0x5c], edx
cmp dl, byte [ecx + 0x5c]
cmp dl, byte [edx + 0x5d]
push edx
pop ebp
cmp edx, dword [ebx + 0x5e]
push ebx
pop esi
cmp eax, 0x573f5f55
pop edi
aas
push edi
popal
inc eax
pop eax
bound eax, qword [eax + 0x58]
inc eax
pop eax
arpl word [ecx + 0x59], ax
inc ecx
pop ecx
inc edx
pop edx
inc edx
pop ebx
inc ebx
pop esp
inc bx
pop esp
inc esp
pop ebp
push 0x45695e45
pop edi
push 0x46
pushal
imul eax, dword [edi + 0x60], 0x6c
inc edi
popal
insd dword es:[edi], dx
dec eax
bound ebp, qword [ebp + 0x49]
arpl word [esi + 0x49], bp
outsd dx, dword fs:[esi]
dec edx
jo 0x4a809c
jno 0x4a809f
jb 0x4a80a3
jae 0x4a80a7
push 0x75694d74
dec esi
push 0x76
dec edi
imul esi, dword [edi + 0x50], 0x6b
js 0x4a80b9
insb byte es:[edi], dx
jns 0x4a80bd
insd dword es:[edi], dx
jp 0x4a80c0
outsb dx, byte [esi]
jp 0x4a80c4
outsd dx, dword [esi]
jnp 0x4a80c8
outsd dx, dword [esi]
jl 0x4a80cb
jo 0x4a80f7
push esp
jno 0x4a80fb
push ebp
jb 0x4a80ff
push ebp
jb 0x4a8003
push esi
jae 0x4a8006
push esi
je 0x4a800a
push edi
je 0x4a800e
push edi
jne 0x4a8012
pop eax
jbe 0x4a8015
pop eax
jbe 0x4a8019
pop ecx
ja 0x4a801c
pop ecx
ja 0x4a8020
pop ecx
js 0x4a8023
sbb dword [edx + 0x78], 0x795a8286
xchg dword [ecx + 0x2000000], ecx
pop edx
js 0x4a8028
sbb byte [edx + 0x79], 0x87
pop edx
jns 0x4a802d
mov dword [eax], eax
add byte [eax], al
add dh, byte [esi]
dec ebx
add byte [eax], al
add byte [edx], al
dec ebx
push ebp
dec ebx
aaa
dec ebp
pop eax
cmp byte [ebp + 0x58], cl
dec ebp
pop eax
cmp byte [ebp + 0x59], cl
dec ebp
pop ecx
cmp byte [esi + 0x59], cl
pop ecx
cmp dword [eax], 0x39005a4e
pop edx
add byte [ecx], bh
dec edi
pop edx
cmp dword [ecx], 0x39015b4f
push eax
pop esp
cmp dl, byte [eax + 0x5c]
cmp dword [edx], 0x3a005d51
push ecx
pop esi
cmp dword [ebx], 0x3b025e52
push edx
pop edi
cmp edx, dword [ebx + 0x5f]
cmp edx, dword [ebx + 0x60]
cmp dword [ebx + edx*2], 0x543c8260
popal
add byte [edx*2 + 0x553d8162], bh
bound eax, qword [ecx - 0x7d9caac3]
cmp eax, 0x3e826356
push esi
cmp al, 0x55
bound eax, qword [ecx - 0x7e9daac3]
cmp eax, 0x3d816255
push ebp
arpl word [edx - 0x7d9ca9c3], ax
push esi
cmp eax, 0x3d826355
push esi
arpl word [edx - 0x739ba9c2], ax
push edi
add byte fs:[esi], bh
push edi
arpl word [ebx - 0x7e9ca9c2], ax
push esi
bound eax, qword [ecx - 0x7d9daac3]
cmp eax, 0x3d816155
push esp
pushal
add bh, byte [0x543c5f54]
pop edi
cmp al, 0x53
pop edi
cmp byte [ebx + edx*2], 0x5e
cmp dword [edx + edx*2], 0x523b025d
pop ebp
cmp edx, dword [edx + 0x5c]
cmp edx, dword [ecx + 0x5c]
cmp byte [ebx], 0x51
pop ebx
cmp dword [ebx], 0x3a025a50
push eax
pop edx
cmp dl, byte [eax + 0x59]
cmp cl, byte [edi + 0x59]
cmp byte [edx], 0x4f
pop eax
add byte [edx], bh
dec edi
push edi
cmp dword [edx], 0x3982574e
dec esi
push esi
and byte [eax], 0x28
sub eax, dword [eax]
and dword [ecx], ebp
sub eax, dword [ecx + 0x32c2921]
and dword [edx], ebp
sub al, 0x21
sub ch, byte [0x222d2a22]
sub ebp, dword [0x2e2b2281]
add byte [edx], ah
sub al, 0x2f
and dword [ebx], 0x23002f2c
sub al, 0x30
and dword [ebx], 0x2481302d
xor dword cs:[esp], eax
xor ah, byte cs:[edi + ebp]
xor ah, byte [edi + ebp]
xor esp, dword [0x3025332f]
xor eax, dword [ecx - 0x7ecbcfdb]
xor dword es:[0x36322681], esi
add byte [esi], ah
xor dh, byte [edi]
and dword [edi], 0x27813733
xor al, 0x38
add ebp, dword [eax]
xor al, 0x39
sub byte [0x3a352839], dh
sub byte [esi], dh
cmp al, byte [ecx - 0x7ec4c9d7]
sub dword [edi], esi
cmp al, 0x81
sub bh, byte [eax]
cmp eax, 0x3e392a1e
sub edi, dword [ecx]
sub edi, dword ds:[ecx]
aas
sub edi, dword [edx]
aas
sub edi, dword [edx]
inc eax
sub al, 0x3b
inc eax
sub al, 0x3b
inc ecx
sub al, 0x3c
inc ecx
sub al, 0x3c
inc edx
sub eax, 0x3d2d433c
inc ebx
sub eax, 0x3e2e443d
inc esp
inc ebp
aas
inc ebp
aas
inc esi
das
inc eax
inc esi
das
inc eax
inc edi
das
inc ecx
inc edi
das
inc ecx
dec eax
xor byte [ecx + 0x48], al
xor byte [edx + 0x49], al
xor byte [edx + 0x4a], al
xor dword [ebx + 0x4a], eax
xor dword [ebx + 0x4b], eax
xor dword [ebx + ecx*2 + 0x31], eax
inc esp
dec esp
xor al, byte [ebp + 0x4c]
xor al, byte [ebp + 0x4d]
xor al, byte [esi + 0x4e]
xor eax, dword [esi + 0x4e]
xor dword [ebx], 0x340d4f47
dec eax
push eax
xor al, 0x48
push ecx
xor al, 0x49
push ecx
xor al, 0x49
push edx
xor eax, 0x4a355249
push ebx
xor eax, 0x4b36544a
push esp
dec ebx
push ebp
dec esp
push ebp
aaa
dec ebp
push esi
aaa
dec ebp
push edi
aaa
dec esi
push edi
cmp byte [esi + 0x58], cl
cmp dword [eax], 0x392e594f
invalid
push eax
pop edx
cmp dword [eax + 0x5b], edx
pop ebx
cmp dword [ecx + 0x5b], edx
cmp dl, byte [ecx + 0x5c]
cmp dl, byte [edx + 0x5d]
cmp edx, dword [ebx + 0x5e]
push ebx
pop esi
cmp al, 0x54
pop edi
push esi
popal
aas
push edi
bound eax, qword [eax + 0x58]
bound eax, qword [ecx + 0x59]
pop ecx
arpl word [ecx + 0x5a], ax
inc edx
pop edx
inc ebx
pop ebx
inc bx
pop esp
inc esp
pop ebp
push 0x45695e44
pop esi
imul eax, dword [esi + 0x5f], 0x6b60466a
inc edi
popal
insb byte es:[edi], dx
dec eax
bound ebp, qword [ebp + 0x48]
arpl word [esi + 0x49], bp
arpl word [edi + 0x4a], bp
jo 0x4a82fe
jno 0x4a8302
jb 0x4a8306
jae 0x4a830a
push 0x75694d74
dec esi
imul esi, dword [esi + 0x4f], 0x6b4f776a
ja 0x4a831c
insb byte es:[edi], dx
js 0x4a8320
insd dword es:[edi], dx
jns 0x4a8323
outsb dx, byte [esi]
jp 0x4a8327
outsb dx, byte [esi]
jnp 0x4a832a
outsd dx, dword [esi]
jl 0x4a832e
jo 0x4a835a
push esp
jno 0x4a835e
push esp
jno 0x4a8362
push ebp
jb 0x4a8365
push ebp
jae 0x4a8269
push esi
je 0x4a826d
push esi
je 0x4a8271
push edi
jne 0x4a8274
push edi
jne 0x4a8278
sbb dword [eax + 0x76], 0x77598184
test dword [eax], eax
pop ecx
js 0x4a8287
sbb dword [edx + 0x78], 0x795a8186
xchg dword [ecx + 0x1000000], ecx
pop edx
js 0x4a828b
sbb dword [edx + 0x79], 0x8987
pop edx
jns 0x4a8290
mov dword [eax], eax
add byte [eax], al
add dword [esi], esi
dec ebx
add byte [eax], al
add byte [ecx], al
dec ebx
push esi
aaa
dec ebx
push esi
xor dword [edi], 0x3705574c
dec ebp
pop eax
cmp byte [ebp + 0x58], cl
cmp byte [ebp + 0x59], cl
dec ebp
pop ecx
cmp byte [esi + 0x59], cl
dec esi
pop ecx
cmp byte [esi + 0x5a], cl
pop edx
cmp dword [esi + 0x5a], ecx
pop edx
cmp dword [ecx], 0x39815b4f
push eax
pop esp
add byte [edx], bh
pop ebx
cmp dword [ecx], 0x3a005c50
push eax
pop esp
cmp dword [edx], 0x3a015d51
push ecx
pop esi
cmp edx, dword [edx + 0x5e]
cmp dword [ebx], 0x3b005f52
push ebx
pushal
cmp dword [ebx + edx*2], 0x543c8260
popal
cmp byte [0x3d006255], 0x55
arpl word [ecx + 0x63563d], ax
cmp eax, 0x3e816456
cmp dword [0x3d006356], 0x3e816456
add byte [0x3e816456], bh
cmp dword [esi], 0x3e826456
push edi
push esi
cmp byte fs:[esi], 0x57
xchg byte fs:[esi], bh
push edi
cmp dword gs:[edi], 0x57
add byte gs:[esi], bh
push edi
test dword gs:[esi], edi
push edi
cmp byte fs:[esi], 0x56
arpl word [edx + 0x62563e], ax
cmp eax, 0x3d816255
push ebp
popal
add byte [0x3d816055], bh
push esp
pushal
add bh, byte [0x543c5f54]
pop edi
cmp al, 0x53
pop edi
cmp byte [ebx + edx*2], 0x5e
cmp dword [edx + edx*2], 0x523c025d
pop esp
cmp edx, dword [edx + 0x5c]
cmp edx, dword [ecx + 0x5c]
cmp dword [ebx], 0x3b005b51
push ecx
pop edx
cmp dword [ebx], 0x3a815a50
push eax
pop ecx
add byte [edx], bh