Function at 0x4a87a0
Capabilities:
Parse pe header

Disassembly:
dec edi
pop ecx
cmp dword [edx], 0x3a81584f
dec edi
push edi
add byte [edx], bh
dec esi
push edi
cmp dword [edx], 0x2081564e
sub byte [edx], ch
add ah, byte [eax]
sub byte [ebx], ch
and dword [eax], ebp
sub esp, dword [ecx]
sub dword [ebx], ebp
and dword [ecx], 0x21022c29
sub ch, byte [ecx]
sub ch, byte [0x822d2a22]
and ch, byte [ebx]
add byte cs:[edx], ah
sub al, 0x2f
and dword [ebx], 0x23812f2c
sub eax, 0x2d230030
xor dword [ecx + 0x1312e24], eax
and al, 0x2e
xor ah, byte [edi + ebp]
xor al, byte [ecx - 0x7eccd0db]
and eax, 0x25003430
xor dword [0x35312681], esi
and dword [esi], 0x27813632
xor esi, dword [edi]
add esp, dword [edi]
xor edi, dword [eax]
daa
xor al, 0x38
sub byte [ecx + edi], dh
sub byte [0x35288139], dh
cmp al, byte [ecx - 0x7ec4c9d7]
sub dword [edi], esi
cmp al, 7
sub dh, byte [edi]
cmp eax, 0x2a3d382a
cmp byte [esi], bh
sub bh, byte [ecx]
sub edi, dword ds:[ecx]
aas
sub edi, dword [edx]
aas
sub edi, dword [edx]
inc eax
sub edi, dword [ebx]
inc eax
sub dword [ebx + edi], 0x3c2c0141
inc edx
sub eax, 0x2d81423c
cmp eax, 0x3e2d0443
inc esp
inc esp
inc ebp
aas
inc ebp
aas
inc esi
sub dword [edi], 0x2f014740
inc ecx
dec eax
xor byte [ecx + 0x48], al
xor dword [eax], 0x30044942
inc ebx
dec edx
xor dword [ebx + 0x4a], eax
xor dword [ebx + 0x4b], eax
xor dword [esp + ecx*2 + 0x32], eax
inc esp
dec esp
xor dword [edx], 0x32074d45
inc esi
dec esi
xor eax, dword [esi + 0x4e]
xor eax, dword [edi + 0x4f]
xor eax, dword [edi + 0x50]
xor al, 0x48
push eax
xor al, 0x48
push ecx
xor al, 0x49
push ecx
xor eax, 0x35815249
dec edx
push ebx
xor dword [esi], 0x362c544b
dec esp
push ebp
dec esp
push esi
aaa
dec ebp
push esi
aaa
dec ebp
push edi
aaa
dec esi
pop eax
cmp byte [esi + 0x58], cl
cmp byte [edi + 0x59], cl
cmp byte [edi + 0x5a], cl
cmp dword [eax + 0x5a], edx
push eax
pop edx
cmp dword [eax + 0x5b], edx
push eax
pop ebx
cmp dword [ecx + 0x5c], edx
pop esp
cmp dl, byte [ecx + 0x5c]
cmp edx, dword [edx + 0x5d]
cmp al, 0x54
pop edi
push esi
push esi
pushal
aas
push edi
popal
inc eax
pop eax
bound eax, qword [eax + 0x59]
inc eax
pop ecx
arpl word [ecx + 0x59], ax
inc edx
pop edx
inc edx
inc edx
pop ebx
inc bx
pop esp
inc sp
pop ebp
inc esp
pop ebp
push 0x46695e45
pop edi
push 0x46
pushal
imul eax, dword [edi + 0x61], 0x6c
dec eax
popal
insd dword es:[edi], dx
dec eax
bound ebp, qword [esi + 0x49]
arpl word [edi + 0x4a], bp
jo 0x4a8566
jno 0x4a856a
jno 0x4a856e
jb 0x4a8571
jae 0x4a8575
push 0x75694e74
dec esi
push 0x76
dec edi
imul esi, dword [edi + 0x50], 0x6c
js 0x4a8587
insb byte es:[edi], dx
jns 0x4a858b
insd dword es:[edi], dx
jp 0x4a858f
outsb dx, byte [esi]
jnp 0x4a8592
outsd dx, dword [esi]
jl 0x4a84c4
push ebx
jo 0x4a85c3
or dword [ecx + esi*2 + 0x7e], edx
push ebp
jb 0x4a85cc
push ebp
jae 0x4a84d0
push esi
jae 0x4a84d4
push esi
je 0x4a84d7
push edi
je 0x4a84db
push edi
jne 0x4a84df
pop eax
jbe 0x4a84e2
pop eax
jbe 0x4a84e6
pop eax
ja 0x4a84ea
sbb dword [ecx + 0x77], 0x78598185
xchg byte [ecx - 0x767987a6], al
add byte [eax], al
pop ecx
ja 0x4a84ee
sbb dword [ecx + 0x78], 0x785a8186
xchg byte [ecx], cl
pop ecx
js 0x4a84f3
sbb dword [edx + 0x78], 0x8986
pop edx
js 0x4a84f7
mov dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [edi], dh
aaa
dec ebx
push esi
xor dword [edi], 0x3705574c
dec ebp
pop eax
cmp byte [ebp + 0x58], cl
cmp byte [ebp + 0x59], cl
cmp byte [esi + 0x59], cl
cmp byte [esi + 0x5a], cl
dec esi
pop edx
cmp dword [edi + 0x5a], ecx
pop edx
cmp dword [ecx], 0x39045b4f
dec edi
pop ebx
add al, 0x39
push eax
pop esp
cmp dl, byte [eax + 0x5c]
cmp dl, byte [eax + 0x5d]
cmp dl, byte [ecx + 0x5d]
cmp dl, byte [ecx + 0x5e]
cmp dword [ebx], 0x3b035e52
push edx
pop edi
cmp edx, dword [ebx + 0x5f]
cmp edx, dword [ebx + 0x60]
cmp al, 0x53
pushal
cmp byte [esp + edx*2], 0x61
cmp byte [0x3d006255], 0x55
arpl word [ecx - 0x7e9ca9c3], ax
push esi
cmp dword fs:[esi], 0x3e836457
push edi
push esi
arpl word [ecx - 0x7e9ba9c2], ax
push edi
cmp dword fs:[esi], 0x57
cmp dword gs:[edi], 0x3f876558
pop eax
test byte [edi], bh
pop eax
add dword gs:[edi], edi
push edi
aas
push edi
cmp byte fs:[esi], 0x57
add byte fs:[esi], bh
push edi
arpl word [edx - 0x7e9ca9c2], ax
push esi
bound eax, qword [eax]
cmp eax, 0x3d816255
push ebp
popal
add byte [0x3d816055], bh
push esp
pushal
cmp dword [0x3c825f54], 0x3c005e53
push ebx
pop ebp
cmp dword [edx + edx*2], 0x523c015d
pop esp
cmp edx, dword [edx + 0x5c]
cmp byte [ebx], 0x51
pop ebx
add bh, byte [ebx]
push ecx
pop edx
cmp edx, dword [eax + 0x5a]
cmp edx, dword [eax + 0x59]
cmp dword [edx], 0x3a825950
dec edi
pop eax
add byte [edx], bh
dec edi
push edi
cmp dword [edx], 0x2081574e
sub byte [edx], ch
and dword [eax], 0x21002b28
sub dword [ebx], ebp
and dword [ecx], 0x21002c29
sub ch, byte [ecx + eax*4]
and dword [edx], ebp
sub eax, 0x2d2a2200
and dword [edx], 0x22032e2b
sub ebp, dword [edi]
and ch, byte [edi + ebp]
and ebp, dword [edi + ebp]
and ebp, dword [eax + esi]
and dword [ebx], 0x2406302d
sub eax, 0x312e2431
and al, 0x2e
xor ah, byte [edi + ebp]
xor ah, byte [edi + ebp]
xor esp, dword [0x3025332f]
xor eax, dword [ecx - 0x7ecbcfdb]
xor dword es:[0x36322681], esi
add byte [esi], ah
xor dh, byte [edi]
and dword [edi], 0x27813733
xor al, 0x38
add ebp, dword [eax]
xor al, 0x39
sub byte [0x3a352839], dh
sub byte [esi], dh
cmp al, byte [ecx - 0x7ec4c9d7]
sub dword [edi], esi
cmp al, 0x81
sub bh, byte [eax]
cmp eax, 0x3e392a10
sub edi, dword [ecx]
sub edi, dword ds:[ecx]
aas
sub edi, dword [edx]
aas
sub edi, dword [edx]
inc eax
sub al, 0x3b
inc eax
sub al, 0x3b
inc ecx
sub al, 0x3c
inc ecx
sub al, 0x3c
inc edx
sub eax, 0x3d2d433c
inc ebx
sub eax, 0x3e2d443d
inc esp
inc ebp
aas
inc ebp
aas
inc esi
das
inc eax
inc esi
sub dword [edi], 0x2f0b4740
inc ecx
dec eax
xor byte [ecx + 0x48], al
xor byte [edx + 0x49], al
xor byte [edx + 0x4a], al
xor dword [ebx + 0x4a], eax
xor dword [ebx + 0x4b], eax
xor dword [ebx + ecx*2 + 0x31], eax
inc esp
dec esp
xor al, byte [ebp + 0x4c]
xor al, byte [ebp + 0x4d]
xor al, byte [esi + 0x4e]
xor eax, dword [esi + 0x4e]
xor dword [ebx], 0x34004f47
inc edi
push eax
xor dword [eax + ecx*2], 0x49340a51
push edx
xor eax, 0x4a355249
push ebx
xor eax, 0x4b36544a
push esp
dec ebx
push ebp
dec esp
push ebp
aaa
dec esp
push esi
aaa
dec ebp
push edi
aaa
dec esi
push edi
cmp byte [esi + 0x58], cl
cmp dword [eax], 0x392e594f
pop ecx
cmp dword cs:[eax + 0x5a], edx
push eax
pop edx
cmp dword [eax + 0x5b], edx
pop ebx
cmp dword [ecx + 0x5b], edx
cmp dl, byte [ecx + 0x5c]
cmp dl, byte [edx + 0x5d]
cmp al, 0x54
push esp
pop esi
push esi
pushal
aas
push edi
popal
inc eax
push edi
bound eax, qword [eax + 0x58]
arpl word [ecx + 0x59], ax
arpl word [ecx + 0x5a], ax
inc edx
pop ebx
inc ebx
pop ebx
inc bx
pop esp
inc esp
pop ebp
push 0x45695e45
pop edi
push 0x46
pop edi
imul eax, dword [edi + 0x60], 0x6c
inc edi
popal
insb byte es:[edi], dx
dec eax
bound ebp, qword [ebp + 0x49]
arpl word [esi + 0x49], bp
outsd dx, dword fs:[esi]
dec edx
jo 0x4a87d8
jno 0x4a87db
jb 0x4a87df
jae 0x4a87e3
push 0x75694d74
dec esi
push 0x76
dec edi
push 0x77
ja 0x4a87f1
imul edi, dword [eax + 0x50], 0x6c
jns 0x4a87f9
insd dword es:[edi], dx
jp 0x4a87fc
outsb dx, byte [esi]
jp 0x4a8800
outsb dx, byte [esi]
jnp 0x4a8803
outsd dx, dword [esi]
jl 0x4a8807
jo 0x4a8833
push esp
jno 0x4a8837
push esp
jno 0x4a883b
push ebp
jb 0x4a873f
push ebp
jae 0x4a8742
push esi
je 0x4a8746
push esi
je 0x4a874a
push edi
jne 0x4a874d
push edi
jne 0x4a8751
sbb dword [eax + 0x76], 0x77580284
test dword [ecx + 0x77], ebx
test dword [ecx + 0x77], ebx
xchg byte [edx - 0x767987a7], al
add byte [eax], al
xchg byte [ecx - 0x7f000000], cl
aaa
dec esp
push edi
add eax, 0x38584d37
dec ebp
pop eax
add byte [ecx + 0x5574c37], al
aaa
dec ebp
pop eax
cmp byte [ebp + 0x58], cl
cmp byte [ebp + 0x59], cl
cmp byte [esi + 0x59], cl
cmp byte [esi + 0x5a], cl
cmp dword [edi + 0x5a], ecx
dec edi
pop edx
cmp dword [ecx], 0x39015b4f
cmp dword [edi + 0x5b], ecx
add dword [ecx], edi
cmp dword [eax + 0x5c], edx
push eax
pop esp
cmp dl, byte [eax + 0x5c]
cmp dword [edx], 0x3a015d51
cmp dl, byte [ecx + 0x5d]
add dword [edx], edi
push ecx
pop esi
cmp edx, dword [edx + 0x5e]
cmp dword [ebx], 0x3b005f52
push ebx
pushal
cmp dword [ebx + edx*2], 0x543c8160
popal
add byte [edx*2 + 0x553d8162], bh
bound eax, qword [ebx]
cmp eax, 0x563d6355
arpl word [0x563e6456], di
push esi
cmp dword fs:[esi], 0x3e826457
push edi
push edi
cmp byte fs:[esi], 0x57
push edi
add byte gs:[edi], bh
pop eax
test dword gs:[edi], edi
pop eax
xchg word [edi], di
pop ecx
cmp word [edi], 0x58
cmp word [edi], 0x58
cmp dword gs:[edi], 0x3e816457
push edi
add byte fs:[esi], bh
push edi
arpl word [ecx - 0x7e9ca9c2], ax
push esi
bound eax, qword [eax]
push ebp
popal
cmp dword [0x3d016155], 0x543d6055
pushal
cmp byte [0x3c815f54], 0x53
pop esi
cmp dword [ebx + edx*2], 0x523c025d
pop ebp
cmp al, 0x52
pop esp
cmp edx, dword [edx + 0x5c]
cmp byte [ebx], 0x51
pop ebx
add dword [ebx], edi
push ecx
pop edx
cmp edx, dword [eax + 0x5a]
cmp dword [ebx], 0x3a005950
push eax
pop ecx
cmp byte [edx], 0x4f
pop eax
cmp dword [edx], 0x2082574f
sub byte [edx], ch
and dword [eax], 0x21002b28
sub dword [ebx], ebp
and dword [ecx], 0x21022c29
sub ch, byte [ecx]
sub ch, byte [0x822d2a22]
and ch, byte [ebx]
add byte cs:[edx], ah
sub al, 0x2f
and dword [ebx], 0x23812f2c
sub eax, 0x2d230030
xor dword [ecx + 0x1312e24], eax
and al, 0x2e
xor ah, byte [edi + ebp]
xor al, byte [ecx - 0x7eccd0db]
and eax, 0x25003430
xor dword [0x35312681], esi
and dword [esi], 0x27813632
xor esi, dword [edi]
add esp, dword [edi]
xor edi, dword [eax]
daa
xor al, 0x38
sub byte [ecx + edi], dh
sub byte [0x35288139], dh
cmp al, byte [ecx - 0x7ec4c9d7]
sub dword [edi], esi
cmp al, 5
sub dh, byte [edi]
cmp eax, 0x2a3d382a
cmp byte [esi], bh
sub bh, byte [ecx]
sub edi, dword ds:[ecx]
aas
sub edi, dword [edx]
aas
sub dword [ebx], 0x2c81403a
cmp eax, dword [ecx + 1]
sub al, 0x3c
inc edx
sub eax, 0x2d81423c
cmp eax, 0x3e2d0843
inc esp
inc esp
inc ebp
aas
inc ebp
aas
inc esi
das
inc eax
inc esi
das
inc eax
inc edi
das
inc ecx
dec eax
xor byte [ecx + 0x48], al
xor dword [eax], 0x30044942
inc edx
dec edx
xor dword [ebx + 0x4a], eax
xor dword [ebx + 0x4b], eax
xor dword [ebx + ecx*2 + 0x32], eax
inc esp
dec esp
xor dword [edx], 0x32074d45
inc esi
dec esi
xor eax, dword [esi + 0x4e]
xor eax, dword [edi + 0x4f]
xor eax, dword [edi + 0x50]
xor al, 0x48
push eax
xor al, 0x48
push ecx
xor al, 0x49
push ecx
xor eax, 0x35815249
dec edx
push ebx
pop ss
xor eax, 0x4b36544b
push esp
dec esp
push ebp
dec esp
push esi
aaa
dec ebp
push esi
aaa
dec ebp
push edi
aaa
dec esi
pop eax
cmp byte [esi + 0x58], cl
cmp byte [edi + 0x59], cl