Function at 0x4e95f0
Capabilities:
Parse pe header

Disassembly:
test byte fs:[ebx], ah
sub al, 0x2f
test byte [eax], ch
xor al, 0x39
add byte [eax], al
add byte [eax], al
sub dword [0x2d824d44], 0x2d824e45
add byte [eax], al
add byte [ecx - 0x7db2bbd3], al
sub eax, 0x2d824e45
sub byte [0x2d004f46], 0x46
sub eax, 0x2d004f46
inc esi
inc esi
dec edi
add byte [0x2d815046], ch
inc edi
push eax
add dword [0x482e5147], ebp
push eax
sub dword [0x2d015047], 0x482e5147
push ecx
sub dword [esi], 0x2e005248
dec ecx
push edx
sub dword [esi], 0x2e005349
dec ecx
push esp
sub dword [esi], 0x2e01544a
dec edx
push ebp
das
dec ebx
push ebp
sub dword [edi], 0x2f82564b
dec esp
push edi
sub dword [edi], 0x2f22584d
dec ebp
pop ecx
das
dec esi
pop ecx
xor byte [edi + 0x5a], cl
xor dword [eax + 0x5c], edx
xor dl, byte [edx + 0x5d]
xor edx, dword [eax + 0x35]
push edi
bound esi, qword [esi]
pop edx
cmp byte [ebp + 0x69], bl
cmp esp, dword [ecx + 0x6d]
cmp eax, 0x6a407165
jbe 0x4e959b
outsb dx, byte [esi]
jp 0x4e95a0
jae 0x4e95dc
dec eax
ja 0x4e94e3
or dword [esi + edi*2 - 0x76], 0x50
dec esp
jle 0x4e94ed
push eax
adc dword [eax + 0x55958953], 0xffffff8d
cdq
push ecx
mov dword [ebp + 0x51998d55], edx
xchg dword [ebx + 0x488a7d4b], edx
xchg ebx, eax
dec ebx
jge 0x4e94fc
dec eax
js 0x4e94f9
inc ebp
je 0x4e94f8
inc edx
outsd dx, dword [esi]
jl 0x4e95bb
imul edi, dword [eax + 0x3d], 0x67
je 0x4e95bc
arpl word [eax + 0x38], si
pop edi
insb byte es:[edi], dx
xor eax, 0x5933695c
xor dl, byte [edi + 0x64]
xor byte [ebp + 0x62], dl
das
push ebx
popal
das
push edx
pushal
push edx
pop edi
sub dword [esi], 0x2d865f51
push ecx
pop edi
test dword [ecx + edx*2], ebp
xchg byte [0x2c855f51], ch
push ecx
pop edi
test byte [ebx], ch
push ecx
pop edi
sub byte [ebx], 0x51
pushal
sub dword [edx], 0x51
pushal
add byte [edx], ch
push ecx
popal
sub byte [edx], 0x52
popal
pop ds
sub dl, byte [ebx + 0x62]
sub edx, dword [ebx + 0x2b]
push ebp
sub eax, 0x5a2e6757
push 0x30
pop ebp
insd dword es:[edi], dx
xor ah, byte [eax + 0x70]
xor al, 0x64
je 0x4e960c
push 0x7c6c3978
cmp esi, dword [ecx - 0x7f]
jno 0x4e955f
jne 0x4e9567
inc ecx
jp 0x4e956e
inc esp
adc byte [eax + 0x4a958547], 0x89
cdq
dec esp
mov word [edx + ecx*2 - 0x7dba6577], ds
dec edx
mov dword [edx + 0x41928245], ebx
xchg ebp, eax
dec edx
mov dword [ecx + 0x4a9c8c4c], ebx
dec edx
dec edx
mov dword [edx + 0x41928245], ebx
jl 0x4e9586
js 0x4e9585
cmp al, 0x73
test byte [ecx], bh
outsd dx, dword [esi]
xor byte [esi], 0x6b
jl 0x4e963a
js 0x4e963a
arpl word [ebp + 0x2f], si
pushal
jno 0x4e963c
pop ebp
outsb dx, byte [esi]
sub al, 0x5b
insb byte es:[edi], dx
sub bl, byte [ecx + 0x6a]
sub dword [edi + 0x68], edx
sub byte [esi + 0x67], dl
sub dword [eax], 0x28816655
push esp
add byte [edi], ah
push esp
test byte [edi], ah
push esp
add byte gs:[edi], ah
push ebx
test dword gs:[edi], esp
push ebx
add byte fs:[edi], ah
push ebx
arpl word [ecx - 0x7e9cadd9], cx
daa
push edx
bound eax, qword [ebx + 0x1f635227]
daa
push edx
arpl word [ecx - 0x7c9dadd9], ax
daa
push edx
arpl word [edi], bx
daa
push ebx
sub byte fs:[ebp + 0x29], dl
push esi
sub bl, byte [eax + 0x69]
sub al, 0x5a
imul ebp, dword [esi], 0x5d
outsb dx, byte [esi]
xor byte [ecx + 0x72], ah
xor ah, byte [ebp + 0x75]
xor eax, 0x6d377969
jle 0x4e969f
jb 0x4e95e9
cmp eax, 0x7b408776
mov eax, dword [ecx + eax*4 - 0x6e]
push 0x29
push edi
push 0x84675628
sub byte [ebp + 0x66], dl
sub dword [eax], 0x54
add byte gs:[eax], ch
push esp
sub dword fs:[eax], 0x28006453
push ebx
arpl word [ecx - 0x7d9cacd7], ax
sub dword [edx + 0x62], edx
add byte [ecx], ch
push edx
popal
sub dword [ecx], 0x29826151
push ecx
pushal
add byte [ecx], ch
push eax
pushal
sub byte [ecx], 0x50
pop edi
add byte [ecx], ch
push eax
pop esi
sub byte [ecx], 0x4f
pop esi
test byte [edx], ch
dec edi
pop ebp
sub dword [edx], 0x40815c4e
pop esi
imul eax, dword [ecx - 0x7c94a0c0], 0x16b6041
inc eax
inc ecx
pushal
imul eax, dword [ecx], 0x40
pop esi
imul edi, dword [edi], 0x3e81665c
pop edx
test byte fs:[edx], ah
pop esp
cmp word [esi], 0x645a
test byte [edx], ah
sub al, 0x2f
test byte [edi], ah
xor edi, dword [ecx]
add byte [eax], al
add byte [eax], al
sub dword [0x2d824d44], 0x2d824e45
inc esi
sub eax, 0x2d004f46
inc esi
push eax
sub dword [0x2e015047], 0x482e5147
dec edi
add byte [0x2d815046], ch
inc edi
push eax
add dword [esi], ebp
inc edi
push ecx
dec eax
push ecx
sub dword [esi], 0x2e825248
dec ecx
push ebx
sub dword [esi], 0x2e01544a
dec edx
push ebp
das
dec ebx
push ebp
sub dword [edi], 0x2f00564b
dec esp
push esi
sub dword [edi], 0x2f82574c
dec ebp
pop eax
and ch, byte [edi]
dec esi
pop ecx
xor byte [esi + 0x5a], cl
xor byte [edi + 0x5b], cl
xor dword [ecx + 0x5c], edx
xor dl, byte [ebx + 0x5f]
xor al, 0x55
popal
pop eax
cmp byte fs:[eax + ebp*2 + 0x3a], bl
pushal
insb byte es:[edi], dx
cmp eax, 0x69407064
jne 0x4e97ad
outsb dx, byte [esi]
jp 0x4e97b3
je 0x4e96ef
dec ecx
jns 0x4e96f7
dec ebp
or byte [esp + edx*2 - 0x72a96976], 0x99
push esp
mov ebx, dword [eax + 0x5ea4985c]
push esi
lea ebx, [ecx + 0x5c988b54]
cwde
movsb byte es:[edi], byte [esi]
pop esi
wait
test al, 0x54
mov word [eax + 0x498d804d], ds
jp 0x4e9714
inc esi
jne 0x4e9712
inc edx
jo 0x4e9810
aas
imul edi, dword [eax + 0x3c], 0x66
jae 0x4e97d3
bound ebp, qword [edi + 0x37]
aaa
pop esi
imul esi, dword [0x5833685b], 0x66
xor dword [esi + 0x63], edx
xor eax, 0x5833685b
xor word [esi + 0x63], dx
xor byte [edx + 0x2f], dl
push ebx
pushal
push edx
pushal
sub dword [esi], 0x2e005f52
push edx
pop edi
add byte [esi], ch
push ecx
pop edi
test dword [0x2c865f51], ebp
push ecx
pop edi
xchg dword [ebx], ebp
push ecx
pushal
test byte [edx], ch
push edx
popal
and ebp, dword [edx]
push edx
bound ebp, qword [edx]
push ebx
bound ebp, qword [edx]
push ebx
arpl word [ebx], bp
push ebp
sub al, 0x57
sub edx, dword [ebp + 0x64]
sub al, 0x57
sub ax, 0x6959
das
pop esp
insb byte es:[edi], dx
xor dword [edi + 0x6f], ebx
xor esp, dword [ebx + 0x73]
ja 0x4e9821
insb byte es:[edi], dx
jl 0x4e9827
jno 0x4e976f
aas
jbe 0x4e9778
inc edx
jl 0x4e9780
inc esi
adc byte [edx + 0x509d8d4c], 0x93
movsb byte es:[edi], byte [esi]
dec esp
mov word [ebp + 0x52a08f4d], ds
xchg edi, eax
test al, 0x4e
nop
popfd
dec ebp
invalid
mov al, byte [0x43968547]
jg 0x4e979f
aas
jns 0x4e979c
cmp al, 0x74
test dword [eax], edi
outsd dx, dword [esi]
xor byte [0x66337c6a], 0x78
xor byte [edx + 0x74], ah
pop edi
jno 0x4e9851
pop esp
outsb dx, byte [esi]
sub ebx, dword [edx + 0x6b]
sub bl, byte [eax + 0x6a]
sub dword [edi + 0x68], edx
sub byte [esi + 0x67], dl
sub byte [ebp + 0x67], dl
sub dword [eax], 0x55
add byte [edi], ah
push ebp
and word [edi], 0x6654
test byte [edi], ah
push esp
xchg byte gs:[edi], ah
push ebx
add byte fs:[edi], ah
push ebx
arpl word [edx + 0x20635227], cx
arpl word [eax], sp
daa
push ebx
sub byte fs:[ebp + 0x28], dl
push ebp
sub dl, byte [edi + 0x68]
sub ebx, dword [ecx + 0x6a]
sub eax, 0x602f6d5c
jno 0x4e989a
je 0x4e98a0
push 0x7e6d3779
cmp dh, byte [edx - 0x7d]
ja 0x4e97ff
inc ecx
jge 0x4e9808
inc ebp
test byte [ebp + ecx*2 - 0x6cb05f71], dl
movsb byte es:[edi], byte [esi]
dec esp
invalid
test byte [edi], dh
outsb dx, byte [esi]
jg 0x4e98d3
imul edi, dword [ebx + 0x32], 0x62307765
jae 0x4e98d6
jnp 0x4e98d4
ja 0x4e98d5
bound esi, qword [ebx + 0x2e]
pop edi
jo 0x4e98d7
pop esp
insd dword es:[edi], dx
sub ebx, dword [edx + 0x6b]
sub bl, byte [eax + 0x69]
sub dword [edi + 0x68], edx
sub dword [eax], 0x28816756
push ebp
sub dword [bx + si], 0x55
add byte [ecx], ch
push ebp
sub byte gs:[ecx], 0x54
add byte gs:[ecx], ch
push esp
sub dword fs:[ecx], 0x29816453
sub dword [ebx + 0x63], edx
push ebx
arpl word [edx - 0x7e9dadd7], ax
sub dword [edx + 0x61], edx
add byte [ecx], ch
sub byte [ecx], 0x52
bound eax, qword [ecx + 0x615229]
sub dword [ecx + 0x61], edx
sub dword [edx + 0x62], edx
sub dword [ecx], 0x29006152
push ecx
popal
sub byte [ecx], 0x51
pushal
add byte [ecx], ch
push eax
pushal
sub dword [ecx], 0x2a005f50
push eax
pop edi
sub byte [edx], 0x50
pop esi
sub dword [edx], 0x2a835e4f
dec edi
pop ebp
add dword [eax + 0x5e], 0x5f408169
imul eax, dword [0x426b6041], 0x60
insb byte es:[edi], dx
inc edx
pushal
imul eax, dword [ecx + 0x60], 0x6b
inc ecx
pop esi
imul edi, dword [edi], 0x3f81665c
pop edx
test byte fs:[edx], ah
sub ebp, dword [esi]
and byte [edi], 0x33
cmp byte [ecx + 0x383227], al
add byte [eax], al
add byte [ecx + 0x4d442d], al
sub eax, 0x2d814d45
inc ebp
dec esi
sub byte [0x2d044f46], 0x46
dec edi
add al, 0x2d
inc esi
push eax
sub eax, 0x472d5047
push ecx
inc edi
push ecx
dec eax
push ecx
sub dword [esi], 0x2e825248
dec ecx
push ebx
sub dword [esi], 0x2e01544a
dec edx
push ebp
das
dec ebx
push ebp
sub dword [edi], 0x2f82564b
dec esp
push edi
sub dword [edi], 0x2f23584d
dec ebp
pop ecx
xor byte [esi + 0x59], cl
xor byte [edi + 0x5a], cl
xor dword [eax + 0x5b], edx
xor dl, byte [edx + 0x5d]
xor edx, dword [eax + 0x35]
push edi
arpl word [esi], si
pop edx
cmp word [esi + 0x6a], bx
cmp esp, dword [edx + 0x6e]
jae 0x4e99d1
insd dword es:[edi], dx
jns 0x4e99d7
jae 0x4e9a13
dec ecx
jns 0x4e991c
dec esi
or byte [ebx + edx*2 - 0x69a46b78], 0xa2
pop esp
xchg edi, eax
mov dword [0x5b958953], eax
xchg esi, eax
mov dword [0x5eb6a967], eax
wait
test al, 0x52
mov dword [ebp + 0x498e814d], edx
jnp 0x4e993f
xchg ebp, eax
dec ebp
or dword [esi + 0x45877b49], 0x6e418174
inc ebp
je 0x4e993c
inc ecx
outsb dx, byte [esi]
jnp 0x4e99fd
imul esi, dword [esi + 0x3b], 0x60387264
outsb dx, byte [esi]
pop ebp
push 0x33
pop edx
xor dl, byte [bx + 0x65]
xor byte [ebp + 0x63], dl
push ebp
arpl word [edi], bp
das
push esp
popal
das
push ebx
pushal
sub dword [esi], 0x52
pushal
test byte [0x2d006052], ch
push ecx
pushal
xchg byte [ecx + edx*2], ch
pushal
sub dword [ebx], 0x2b826051
push edx
pushal
sub byte [ebx], 0x52
popal
sub dword [edx], 0x2a816152
push edx
bound esp, qword [edx]
sub dl, byte [ebx + 0x62]
sub dl, byte [ebx + 0x63]
sub edx, dword [esp + 0x2b]
push esi
sub eax, 0x5a2e6858
and ch, byte [edx]
push ebx
bound ebp, qword [edx]
push ebx
arpl word [ebx], bp
push esp
sub edx, dword fs:[esi + 0x65]
sub eax, 0x5a2e6858
push 0x30
pop ebp
insd dword es:[edi], dx
xor ah, byte [ecx + 0x71]
xor al, 0x65
jbe 0x4e9a51
push 0x7a
cmp esi, dword [eax - 0x80]
jne 0x4e99a8
inc edx
jl 0x4e99b1
inc esi
adc dword [ebx + 0x559b8a4b], 0xffffff9a
stosd dword es:[edi], eax
pop ecx
mov byte [0x9e8d4cb2], al
dec eax
xchg dword [eax + 0x55ac9b55], ebx
pushfd
lodsd eax, dword [esi]
dec esp
mov ds, word [edi + 0x43978647]
jg 0x4e99d6
aas
jns 0x4e99d3
cmp esi, dword [ebx - 0x7c]
aaa
outsb dx, byte [esi]
jg 0x4e9a84
imul edi, dword [edx + 0x32], 0x612f7665
jp 0x4e9a85
jbe 0x4e9a85
popal
jae 0x4e9a86
pop esi
jo 0x4e9a87
pop ebx
insd dword es:[edi], dx
sub bl, byte [ecx + 0x6b]
sub dword [eax + 0x69], ebx
sub byte [esi + 0x68], dl
sub dword [eax], 0x28836756
push ebp
add byte [bx + si], ch
push ebp
and word [edi], 0x6655
and dword [edi], 0x27846654
push esp
add byte gs:[edi], ah
push ebx
invalid
daa
push ebx
and byte fs:[eax], ch
and byte [eax], ch
push ebp
sub dword gs:[esi + 0x67], edx
sub bl, byte [eax + 0x69]
sub al, 0x5b
insb byte es:[edi], dx
pop esi
outsd dx, dword [esi]
xor byte [edx + 0x73], ah
xor esp, dword [esi + 0x77]
imul edi, dword ss:[ecx + edi + 0x71], 0xffffff82
cmp eax, 0x7d418877
mov es, word [ebp - 0x7c]
xchg ebp, eax
dec ebx
lea ebx, [esi + 0x55ad9c55]
sahf
scasd eax, dword es:[edi]
dec ebx
lea ebx, [esi + 0x5ca89751]
test al, 0xb9
push esp
wait
lodsb al, byte [esi]
dec ecx
mov ebx, dword [ebp + eax*2 + 0x7d419584]
invalid