Function at 0x4fccb0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x537bb0
mov eax, dword fs:[0]
push eax
sub esp, 0x29c
mov eax, dword [0x616718]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x104
lea eax, [ebp - 0x26c]
push eax
call dword [0x53d1e8]
test eax, eax
je 0x4fd034
cmp eax, 0x104
jae 0x4fd034
lea eax, [ebp - 0x2a4]
mov dword [ebp - 0x2a4], 0
push eax
call dword [0x53d1e4]
push eax
call dword [0x53d0a8]
test eax, eax
je 0x4fd034
cmp dword [ebp - 0x2a4], 0
mov ecx, 0x5d8188
mov eax, 0x5d815c
cmove eax, ecx
push eax
lea eax, [ebp - 0x26c]
push eax
call dword [0x61a7dc]
test eax, eax
je 0x4fcd60
lea eax, [ebp - 0x26c]
push eax
call dword [0x53d1ac]
mov ebx, eax
jmp 0x4fcd62
xor ebx, ebx
mov eax, dword [ebx + 0x3c]
mov ecx, 0x5a4d
cmp word [ebx], cx
jne 0x4fd019
cmp dword [eax + ebx], 0x4550
jne 0x4fd019
mov eax, dword [eax + ebx + 0x50]
mov edi, ebx
mov dword [ebp - 0x64], 0x730055
mov dword [ebp - 0x60], 0x720065
mov dword [ebp - 0x5c], 0x430020
mov dword [ebp - 0x58], 0x6f0068
lea ecx, [eax + ebx]
mov dword [ebp - 0x54], 0x630069
mov dword [ebp - 0x50], 0x200065
mov dword [ebp - 0x4c], 0x650073
mov dword [ebp - 0x48], 0x200074
mov dword [ebp - 0x44], 0x690076
mov dword [ebp - 0x40], 0x200061
mov dword [ebp - 0x3c], 0x690057
mov dword [ebp - 0x38], 0x64006e
mov dword [ebp - 0x34], 0x77006f
mov dword [ebp - 0x30], 0x200073
mov dword [ebp - 0x2c], 0x730055
mov dword [ebp - 0x28], 0x720065
mov dword [ebp - 0x24], 0x450020
mov dword [ebp - 0x20], 0x700078
mov dword [ebp - 0x1c], 0x720065
mov dword [ebp - 0x18], 0x650069
mov dword [ebp - 0x14], 0x63006e
mov dword [ebp - 0x2a0], ecx
cmp eax, 0x53
jl 0x4fcffe
lea eax, [ecx - 0x53]
mov esi, 0x4f
mov dword [ebp - 0x2a8], eax
lea edx, [ebp - 0x64]
mov ecx, ebx
mov edi, edi
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4fce51
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4fce40
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4fce78
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4fce78
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4fce78
cmp esi, 0xffffffff
je 0x4fce74
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4fce78
xor eax, eax
jmp 0x4fce7d
sbb eax, eax
or eax, 1
test eax, eax
je 0x4fceb9
cmp edi, dword [ebp - 0x2a8]
je 0x4fcffe
inc edi
lea edx, [ebp - 0x64]
mov ecx, edi
mov esi, 0x4f
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4fce81
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4fce98
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x4fce81
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4fce81
mov edx, dword [ebp - 0x2a0]
cmp edi, edx
je 0x4fcffe
sub edx, edi
sar edx, 1
shr edx, 1
test edi, edi
je 0x4fcf0a
mov ecx, edx
mov eax, edi
test edx, edx
je 0x4fceee
lea esp, [esp]
cmp word [eax], 0
je 0x4fceee
add eax, 2
sub ecx, 1
jne 0x4fcee0
sub edx, ecx
mov esi, ecx
neg esi
mov eax, 0x80070057
sbb esi, esi
and esi, edx
xor edx, edx
test ecx, ecx
cmovne eax, edx
je 0x4fcf0f
add esi, esi
jmp 0x4fcf11
mov eax, 0x80070057
xor esi, esi
test eax, eax
js 0x4fcffe
add esi, 2
push esi
push 0
call dword [0x53d1e0]
push eax
call dword [0x53d1d0]
push eax
lea ecx, [ebp - 0x29c]
call fcn.004f7690
mov eax, dword [ebp - 0x274]
test eax, eax
jne 0x4fcf68
push 0xe
call dword [0x53d074]
lea ecx, [ebp - 0x29c]
call fcn.004f8100
push ebx
mov dword [ebp - 4], 2
call dword [0x53d19c]
jmp 0x4fd04b
push edi
shr esi, 1
push esi
push eax
call fcn.004fd760
test eax, eax
js 0x4fcf86
mov esi, dword [ebp - 0x274]
xor eax, eax
mov dword [ebp - 0x274], eax
jmp 0x4fcf99
push 0x13e
call dword [0x53d074]
mov eax, dword [ebp - 0x274]
xor esi, esi
mov dword [ebp - 4], 3
test eax, eax
je 0x4fcfc4
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x2a0], eax
test ecx, ecx
je 0x4fd069
mov eax, dword [ecx]
lea edx, [ebp - 0x2a0]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0x278]
test ecx, ecx
je 0x4fcfec
mov edx, dword [ecx]
lea eax, [ebp - 0x29c]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [ebp - 0x278], 0
push ebx
mov dword [ebp - 4], 4
call dword [0x53d19c]
mov eax, esi
jmp 0x4fd04d
push 0x13e
call dword [0x53d074]
push ebx
mov dword [ebp - 4], 1
call dword [0x53d19c]
jmp 0x4fd04b
push 0x241
call dword [0x53d074]
push ebx
mov dword [ebp - 4], 0
call dword [0x53d19c]
jmp 0x4fd04b
call dword [0x53d188]
test eax, eax
mov ecx, 1
cmovne ecx, eax
push ecx
call dword [0x53d074]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0051f6a1
mov esp, ebp
pop ebp
ret
call fcn.0051f252
int3