Function at 0x4f3020
Capabilities:
Parse pe header

Disassembly:
mov eax, esi
pop esi
pop ebp
ret
je 0x5259b8
jmp 0x51fa77
jne 0x5259b8
jmp 0x4e5d79
cmp esi, 0x7d000000
jmp 0x4e2d09
jb 0x529852
jmp 0x41800f
push dword [0x4c5910]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push esi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push 0x64b65bac
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x4f9415
push eax
push ebx
push edx
push ebx
mov ebx, 0x76fd2a15
shr ebx, 6
sub ebx, 0x7ffbcd60
add ebx, 0x4fbf8645
add ebx, 0x91202a60
mov edx, ebx
pop ebx
xor edx, 0x3edf2616
shr edx, 1
dec edx
or edx, 0x3bee1c0a
not edx
add edx, 0x93553641
mov ebx, edx
pop edx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edi
mov edi, esp
push ebx
mov ebx, 0x7add6d43
inc ebx
not ebx
push ebx
not dword [esp]
pop ebx
add ebx, 0x852292c0
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], edx
push 0x53eae3e3
pop edx
sub eax, edx
mov edx, dword [esp]
add esp, 4
add eax, esi
add eax, 0x53eae3e3
jmp 0x51fa59
push edi
push esp
pop edi
push eax
mov eax, 4
sub edi, 0xd8ff859
add edi, eax
add edi, 0xd8ff859
pop eax
sub edi, 4
out dx, eax
add al, 0
add byte [eax], al
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push 0x2e7fa9ad
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], 0x7c9e5db0
mov dword [esp], esi
pop dword [0x4c5910]
push ebp
mov dword [esp], 0x7d83ba8d
mov edx, 0xc897d83
and al, 0x89
loope 0x4f3008
rol dword [eax + eax], 0
add byte [ebx + 0xc8704e9], al
and al, 0x8b
and al, 0x24
mov edx, 0xc897d83
and al, 0x89
loope 0x4f3008
rol dword [eax + eax], 0
add byte [ebx + 0xc8704e9], al
and al, 0x8b
and al, 0x24
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x3babc072
add ecx, eax
mov eax, dword [esp]
add esp, 4
sub ecx, 0x7dd26b11
add ecx, eax
add ecx, 0x7dd26b11
sub ecx, 0x3babc072
mov ecx, dword [esp]
push ecx
push esp
pop ecx
push esi
mov esi, 4
add ecx, esi
pop esi
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0x51fa6d
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
push eax
mov eax, 0x9d7fe97
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
push ebp
mov ebp, 0x7f7de1a8
neg ebp
or ebp, 0x3fb97a4e
sub ebp, 0x5df9b1fc
sub ebp, 0x61c1cc5e
add ecx, ebp
pop ebp
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [eax + 0x3c]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push eax
mov eax, esp
push ebp
mov ebp, 0x6fdfc6e6
not ebp
neg ebp
shl ebp, 7
sub ebp, 0x5ddfd0e0
add ebp, 0x6dfc5d64
add eax, ebp
pop ebp
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push 0x5607b3b0
mov dword [esp], edx
mov dword [esp], ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4e6ee8
add esp, 4
jmp 0x52ee01
mov dword [0x4c5bc0], eax
jmp 0x51fa63
cmp word [eax], 0x4550
jmp 0x5259ad
call fcn.00417ca0
jmp 0x5064c4
cmp word [esi], 0x5a4d
jmp 0x4dd51f
je 0x418026
jmp 0x5259b8
add esi, 0x1000
jmp 0x4e2cfe
push ebx
push esp
pop ebx
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], esi
jmp 0x4f2fef
test eax, eax
jmp 0x4dd514