Function at 0x4f8b30
Capabilities:
Parse pe header

Disassembly:
push ebx
push esi
push edi
push ebp
mov edi, edx
mov ebx, eax
lea edx, [ebx + 4]
mov word [edx], 0x5a4d
mov word [edx + 2], 0x50
mov word [edx + 4], 2
mov word [edx + 6], 0
mov word [edx + 8], 4
mov word [edx + 0xa], 0xf
mov word [edx + 0xc], 0xffff
mov word [edx + 0xe], 0
mov word [edx + 0x10], 0xb8
mov word [edx + 0x12], 0
mov word [edx + 0x14], 0
mov word [edx + 0x16], 0
mov word [edx + 0x18], 0x40
mov word [edx + 0x1a], 0x1a
xor eax, eax
mov word [edx + eax*2 + 0x1c], 0
inc eax
cmp eax, 4
jne 0x4f8b90
mov word [edx + 0x24], 0
mov word [edx + 0x26], 0
xor eax, eax
mov word [edx + eax*2 + 0x28], 0
inc eax
cmp eax, 0xa
jne 0x4f8bab
mov dword [edx + 0x3c], pe_nt_image_headers32
mov byte [ebx + 0x44], 0xba
mov byte [ebx + 0x45], 0x10
mov byte [ebx + 0x46], 0
mov byte [ebx + 0x47], 0xe
mov byte [ebx + 0x48], 0x1f
mov byte [ebx + 0x49], 0xb4
mov byte [ebx + 0x4a], 9
mov byte [ebx + 0x4b], 0xcd
mov byte [ebx + 0x4c], 0x21
mov byte [ebx + 0x4d], 0xb8
mov byte [ebx + 0x4e], 1
mov byte [ebx + 0x4f], 0x4c
mov byte [ebx + 0x50], 0xcd
mov byte [ebx + 0x51], 0x21
mov byte [ebx + 0x52], 0x90
mov byte [ebx + 0x53], 0x90
lea eax, [ebx + 0x54]
mov edx, 0x4f8e70
call fcn.0040baac
mov byte [ebx + 0x78], 0xd
mov byte [ebx + 0x79], 0xa
mov byte [ebx + 0x7a], 0x24
mov byte [ebx + 0x7b], 0x37
mov eax, 0x38
mov byte [ebx + eax + 0x44], 0
inc eax
cmp eax, 0xc0
jne 0x4f8c21
mov dword [ebx + 0x104], 0x4550
lea esi, [ebx + 0x108]
mov word [esi], 0x14c
mov word [esi + 2], 1
call fcn.0040cf40
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004f72fc
mov dword [esi + 4], eax
xor eax, eax
mov dword [esi + 8], eax
xor eax, eax
mov dword [esi + 0xc], eax
mov word [esi + 0x10], 0xe0
mov word [esi + 0x12], 0xa18e
lea esi, [ebx + 0x11c]
mov word [esi], 0x10b
mov byte [esi + 2], 1
mov byte [esi + 3], 0
xor eax, eax
mov dword [esi + 4], eax
xor eax, eax
mov dword [esi + 8], eax
xor eax, eax
mov dword [esi + 0xc], eax
xor eax, eax
mov dword [esi + 0x10], eax
xor eax, eax
mov dword [esi + 0x14], eax
xor eax, eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], 0x400000
mov dword [esi + 0x20], 0x1000
mov dword [esi + 0x24], 0x200
mov word [esi + 0x28], 1
mov word [esi + 0x2a], 0
mov word [esi + 0x2c], 1
mov word [esi + 0x2e], 0
mov word [esi + 0x30], 4
mov word [esi + 0x32], 0
xor eax, eax
mov dword [esi + 0x34], eax
mov eax, ebx
call fcn.004f8ad4
mov edx, 0x200
call fcn.004f72bc
mov dword [esi + 0x3c], eax
mov eax, ebx
call fcn.004f8a8c
add eax, dword [esi + 0x3c]
mov edx, 0x1000
call fcn.004f72bc
mov dword [esi + 0x38], eax
xor eax, eax
mov dword [esi + 0x40], eax
mov word [esi + 0x44], 2
mov word [esi + 0x46], 1
mov dword [esi + 0x48], 0x1000
mov dword [esi + 0x4c], pe_nt_image_headers32
mov dword [esi + 0x50], 0x1000
mov dword [esi + 0x54], pe_nt_image_headers32
xor eax, eax
mov dword [esi + 0x58], eax
mov dword [esi + 0x5c], 0x10
xor eax, eax
xor edx, edx
mov dword [esi + eax*8 + 0x60], edx
xor edx, edx
mov dword [esi + eax*8 + 0x64], edx
inc eax
cmp eax, 0x10
jne 0x4f8d48
mov dword [esi + 0x70], 0x2000
mov eax, ebx
call fcn.004f8a8c
mov edx, 0x200
call fcn.004f72bc
mov dword [esi + 0x74], eax
lea esi, [ebx + 0x1fc]
mov eax, dword [0x4f8e98]
mov dword [esi], eax
mov eax, dword [0x4f8e9c]
mov dword [esi + 4], eax
mov eax, ebx
call fcn.004f8a8c
mov dword [esi + 8], eax
mov dword [esi + 0xc], 0x2000
mov eax, ebx
call fcn.004f8a8c
mov edx, 0x200
call fcn.004f72bc
mov dword [esi + 0x10], eax
mov eax, dword [ebx + 0x158]
mov dword [esi + 0x14], eax
xor eax, eax
mov dword [esi + 0x18], eax
xor eax, eax
mov dword [esi + 0x1c], eax
mov word [esi + 0x20], 0
mov word [esi + 0x22], 0
mov dword [esi + 0x24], 0x40000000
lea edx, [ebx + 4]
mov ecx, 0x40
mov eax, edi
call fcn.00421d64
lea edx, [ebx + 0x44]
mov ecx, 0xc0
mov eax, edi
call fcn.00421d64
lea edx, [ebx + 0x104]
mov ecx, 0xf8
mov eax, edi
call fcn.00421d64
lea edx, [ebx + 0x1fc]
mov ecx, 0x28
mov eax, edi
call fcn.00421d64
mov eax, ebx
call fcn.004f8ad4
mov edx, 0x200
call fcn.004f72bc
mov esi, eax
mov eax, ebx
call fcn.004f8ad4
sub esi, eax
mov ebx, esi
mov eax, ebx
call fcn.00402a88
mov esi, eax
mov ebp, esi
mov eax, ebp
xor ecx, ecx
mov edx, ebx
call fcn.0040359c
mov edx, ebp
mov ecx, ebx
mov eax, edi
call fcn.00421d64
mov edx, ebx
mov eax, esi
call fcn.00402aa8
pop ebp
pop edi
pop esi
pop ebx
ret