Function at 0x4efa22
Capabilities:
Parse pe header

Disassembly:
mov esi, esi
mov ebp, ebp
mov ebx, ebx
mov edx, edx
mov edi, edi
mov ecx, ecx
mov ebx, ebx
mov ebp, ebp
mov edi, edi
xor eax, eax
pop esi
pop ebp
ret
mov eax, esi
pop esi
pop ebp
ret
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push edi
mov edi, 0x57a03c92
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ebp
mov dword [esp], eax
mov dword [esp], 0x4d17a997
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ecx
push esp
pop ecx
push edi
mov edi, 0x2fcf3c68
shr edi, 4
neg edi
sub edi, 0x7dcd2dd7
shl edi, 6
dec edi
xor edi, 0xcd7798bb
add ecx, edi
pop edi
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push dword [0x637960]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push ecx
push ecx
mov ecx, 0x2de027e0
mov dword [esp + 4], ecx
push dword [esp]
pop ecx
add esp, 4
mov dword [esp], ebx
push 0x5f36fece
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
push dword [esp]
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0x4f265a
sub eax, 0x26dfe9a8
add eax, 0x6a2f18b8
sub eax, 0x7fff4c42
add eax, esi
add eax, 0x7fff4c42
push ebx
mov ebx, 0x6a2f18b8
sub eax, ebx
pop ebx
push ebp
mov ebp, 0x26dfe9a8
add eax, ebp
pop ebp
push ecx
mov dword [esp], 0x6c1daa2b
mov dword [esp], ebx
mov dword [esp], 0x25c95451
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x67be6d7a
add ecx, eax
push ebx
mov ebx, 0x67be6d7a
push ebp
mov ebp, 0x7eeb4629
and ebp, 0x3df53fd4
shr ebp, 1
sub ebp, 0x7ff5f834
sub ebp, 0x1e931673
add ecx, ebp
pop ebp
add ecx, 0x5c7e2ad6
sub ecx, ebx
sub ecx, 0x5c7e2ad6
sub ecx, 0x7fe77459
pop ebx
push dword [esp]
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x529873
push 0x5ede6b50
mov dword [esp], ecx
mov dword [esp], eax
push ecx
mov ecx, 0x41a70a4b
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push esi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
sub esp, 4
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], 0x6de01a4c
mov dword [esp], esi
pop dword [0x637960]
push ebp
mov dword [esp], 0x6e60d204
mov dword [esp], eax
mov dword [esp], ecx
push esi
mov dword [esp], eax
push 0x6ff99e03
pop eax
shl eax, 8
or eax, 0x7eaf931d
push ebx
mov ebx, 0x7cde5b01
xor eax, ebx
pop ebx
or eax, 0x7f7503a6
add eax, 0x58474f8f
add ecx, eax
pop eax
add ecx, eax
sub ecx, 0x57bd1b4d
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0x54e0ef
push dword [eax + 0x3c]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push edx
push edx
mov edx, 0x3498a42f
mov dword [esp + 4], edx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push 0x15822d93
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x4e687a
cmp word [eax], 0x4550
jmp 0x557f6a
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 4
sub ebp, edx
pop edx
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], esi
jmp 0x4ef964
jb 0x511d3e
jmp 0x4182df
add esp, 4
jmp 0x54ac4c
cmp word [esi], 0x5a4d
jmp 0x557f5f
mov dword [0x637c10], eax
jmp 0x5105b1
je 0x55aa43
jmp 0x529869
test eax, eax
jmp 0x548172
call fcn.00417ee0
jmp 0x51e348
jne 0x55aa43
jmp 0x4d029a
je 0x4182f6
jmp 0x55aa43
add esi, 0x1000
jmp 0x55aa4e
cmp esi, 0x7d000000
jmp 0x513167