Function at 0x5e30a5
Capabilities:
Access peb ldr_data
Parse pe header

Disassembly:
mov ah, 0xc0
inc esp
lodsd eax, dword [esi]
inc edi
call 0x5df7fb
cmpsd dword [esi], dword es:[edi]
sub edi, dword [ebx + 0x31e06172]
mov esi, 0x52737953
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ebx + 0x74], dx
jb 0x5e0424
outsb dx, byte [esi]
dec esp
outsb dx, byte gs:[esi]
add byte [ecx + 0x64], ah
jbe 0x5e0426
jo 0x5e0430
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add al, cl
push ebx
jns 0x5e0445
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ebx + 0x74], dx
jb 0x5e0444
outsb dx, byte [esi]
dec esp
outsb dx, byte gs:[esi]
add byte [edx + 0x65], dl
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x5e044e
dec ebx
jns 0x5e03ed
or dl, byte [ebx + 0x79]
jae 0x5e0438
jb 0x5e0459
push ebx
je 0x5e046a
imul ebp, dword [esi + 0x67], 0x6552d300
push ecx
jne 0x5e0468
jb 0x5e047e
push esi
popal
insb byte es:[edi], dx
jne 0x5e046f
inc ebp
js 0x5e044e
add byte [edx + 0x65], dl
dec edi
jo 0x5e0479
outsb dx, byte [esi]
dec ebx
jns 0x5e045e
js 0x5e045c
add byte [esp + 0x36c8bbae], bh
outsd dx, dword [esi]
insb byte es:[edi], dx
popal
jne 0x5e049c
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebp + 0x73], dh
jb 0x5e0467
jae 0x5e0497
jb 0x5e0467
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebp + 0x2f63d907], bl
inc edi
je 0x5e048f
jns 0x5e04a9
jns 0x5e04a9
outsd dx, dword [esi]
popal
jb 0x5e04af
push esp
jns 0x5e04be
add byte gs:[ebx + 0x6c], dl
jo 0x5e0456
test eax, 0x74736544
jae 0x5e04cf
jb 0x5e04cc
outsd dx, dword [esi]
jns 0x5e04b6
push edi
imul ebp, dword [esi + 0x64], 0xd200776f
dec esp
outsd dx, dword [esi]
popal
push ebx
push ebx
je 0x5e04df
imul ebp, dword [esi + 0x67], 0x86880041
inc ecx
add byte [eax + 0xe886], cl
add byte [eax], al
call 0x5e0479
pop eax
sub eax, 0x5e0479
cmp dword [eax + 0x549019], 0
pop esi
add byte [ebx + 0x549019b8], al
add byte [eax], al
je 0x5e0647
lea esp, [esp + 8]
and al, 8
popal
jmp 0x5e039b
inc edi
je 0x5e04df
inc ebx
add byte [edi], dl
imul esp, dword [ebp + 0x72], 0x6e
insb byte es:[edi], dx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [edi + 0x65], al
je 0x5e04f0
inc ebx
push eax
add ch, dh
sbb bl, byte [eax]
inc ebx
push 0x654e7261
js 0x5e0531
inc ecx
add cl, cl
out 0x6b, eax
push esi
imul esi, dword [edx + 0x74], 0x416c6175
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
adc eax, 0x56cb19b8
add byte [0x56cb19b8], dl
imul esi, dword [edx + 0x74], 0x466c6175
jb 0x5e0543
add byte gs:[ebx + 0x61], dl
add byte [ebx + 0x61], dl
jbe 0x5e0549
inc esp
inc ebx
add byte [edx], ah
dec ecx
outsb dx, byte [esi]
je 0x5e0551
jb 0x5e055a
outsd dx, dword [esi]
arpl word [ebx + 0x65], bp
dec ecx
imul esp, dword [ebp + 0x64], 0x49
outsb dx, byte [esi]
arpl word [edx + 0x65], si
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x5e04fd
push ebx
insb byte es:[edi], dx
jo 0x5e0503
add eax, 0x65746e49
jb 0x5e0576
outsd dx, dword [esi]
arpl word [ebx + 0x65], bp
inc esp
arpl word gs:[edx + 0x65], si
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x5e0519
sbb ecx, dword [edx + ecx*2 - 0x35]
dec ecx
insb byte es:[edi], dx
jae 0x5e0595
jb 0x5e058f
outsb dx, byte gs:[esi]
inc ecx
add byte [ebp - 0x3d], bh
push esi
imul esi, dword [edx + 0x74], 0x516c6175
jne 0x5e0598
jb 0x5e05ae
add byte [eax + 0x61], dl
je 0x5e057c
insb byte es:[edi], dx
je 0x5e053d
jl 0x5e05ab
jae 0x5e05b5
jb 0x5e05a6
jo 0x5e05be
outsb dx, byte [esi]
inc ecx
add byte [edi], bl
jle 0x5e0592
je 0x5e0591
jne 0x5e05c2
jb 0x5e05b7
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x5e05a9
push 0x64616572
dec ecx
add byte fs:[edi + 0x53], bh
mov esi, 0x74654777
push esp
push 0x64616572
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
add byte gs:[eax + 0x4c], dl
outsd dx, dword [esi]
popal
dec esp
dec esp
imul esp, dword [edx + 0x72], 0x45797261
jns 0x5e05c3
js 0x5e05c1
add ch, ah
inc edi
je 0x5e05d6
jb 0x5e05f7
arpl word [ecx + 0x64], ax
jb 0x5e05f3
jae 0x5e0603
jae 0x5e0591
add byte [ebx], dh
xor edx, ecx
inc edi
je 0x5e05ea
rol dword [edi + 0x65], 1
je 0x5e05ea
je 0x5e05fa
popal
jb 0x5e060f
jne 0x5e060d
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [ecx + ebp*2 + 0x6e], cl
push esp
outsd dx, dword [esi]
add byte [eax + 0x4d], dl
dec ebp
jne 0x5e061a
je 0x5e0619
inc edx
jns 0x5e0627
push esp
outsd dx, dword [esi]
push edi
imul esp, dword [ebp + 0x43], 0x726168
cli
add dl, bh
cld
push edi
imul esp, dword [ebp + 0x43], 0x54726168
outsd dx, dword [esi]
inc ebx
push 0x6f547261
dec ebp
jne 0x5e063a
je 0x5e0639
inc edx
jns 0x5e0647
add byte gs:[edx + 0x65], dl
popal
popal
inc esi
imul ebp, dword [ebp], 0x746547a7
dec ebp
outsd dx, dword [esi]
jne 0x5e0653
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
inc ecx
add byte [eax + 0x654dc89a], al
jae 0x5e066a
dec ebp
jae 0x5e066a
popal
inc edx
inc edx
outsd dx, dword [esi]
js 0x5e063f
add byte [edi + 0x65], al
je 0x5e064f
popal
jae 0x5e067a
inc ebp
jb 0x5e067b
outsd dx, dword [esi]
jb 0x5e060c
ja 0x5e0655
inc edi
je 0x5e065e
je 0x5e065e
outsd dx, dword [esi]
jne 0x5e0681
inc esi
imul ebp, dword [ebp + 0x4e], 0x41656d61
dec esi
dec esi
popal
insd dword es:[edi], dx
inc ecx
add byte [ebx + 0x65], dl
je 0x5e0676
arpl word gs:[eax + eax - 0x51], si
inc edi
je 0x5e0679
add byte [edi + 0x4c746547], ch
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [esi + 0x72], al
jb 0x5e06a0
dec esp
dec esp
imul esp, dword [edx + 0x72], 0x797261
imul edi, dword [edi + 0x1e], 0xffffffff
sbb byte [ecx], 0x90
push esp
add byte [eax - 0x65], ch
jb 0x5e06a2
jb 0x5e06bc
add byte [ebx + 0x7f], ch
push ds
inc dword [eax + 0x549019]
push 0xa3c4d49b
add dword [esp], 0x5c8f06d9
push 0
push 0
push 0x89eb8640
add dword [esp], 0x766840a7
call fcn.005565b6
aam 0xc4
mov dword [0xd9240481], eax
push es
add al, 0x24
fld dword [esi]
invalid
inc eax
xchg bl, ch
mov dword [ecx + 0x40a72404], eax
push 0x5f48e876
dec eax
pop edi
idiv edi
jmp 0x5e2f75
call 0x5e0678
add byte [eax], al
jmp 0x5e3051
aam 0x29
sub dword [eax], eax
add byte [ebp + 0x24d5b21c], cl
add byte [eax], al
lea ebx, [edx + esi*4]
aad 0x24
and al, 0xe7
mov eax, 0x5ab8492e
out 0x2e, eax
mov eax, 0x5ab8492e
add byte [ebx], 0x45
js 0x5e06f7
je 0x5e06e0
jb 0x5e0701
arpl word [ebp + 0x73], sp
jae 0x5e0697
popal
xlatb
inc esi
imul ebp, dword [esi + 0x64], 0x736f6c43
add byte gs:[edx + edx*4], dh
jae 0x5e0707
add byte [edx + edx*4], dh
or byte [esi], ah
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x5e070d
jb 0x5e0713
push ebx
je 0x5e0723
imul ebp, dword [esi + 0x67], 0x65530041
inc ecx
add byte [ebx + 0x65], dl
je 0x5e0707
outsb dx, byte gs:[esi]
jne 0x5e06be
mov ecx, 0x61657243
je 0x5e072a
push esp
push 0x64616572
add ah, ch
jg 0x5e0742
push ebx
je 0x5e0718
outsb dx, byte [esi]
dec edi
inc si
imul ebp, dword [ebp], 0x6b3dcfe
stc
push cs
push ebx
je 0x5e072c
imul ebp, dword [ebp + 0x50], 0x746e696f
jb 0x5e06f1
outsb dx, byte [esi]
je 0x5e0754
jb 0x5e06f1
div bh
xor dl, byte [ebp + 0x6e]
push 0x6c646e61
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
inc ebp
js 0x5e0763
jo 0x5e0777
jo 0x5e0777
imul ebp, dword [edi + 0x6e], 0x746c6946
jb 0x5e070d
imul ebp, dword [esp + esi*2 + 0x65], 0xa57b0072
jnp 0x5e06b4
inc esp
sub byte [eax], 0x52
popal
imul esi, dword [ebx + 0x65], 0x65637845
jo 0x5e0791
js 0x5e077d
jo 0x5e0791
imul ebp, dword [edi + 0x6e], 0x74520800
insb byte es:[edi], dx
je 0x5e0791
push ebp
outsb dx, byte [esi]
ja 0x5e0792
outsb dx, byte [esi]
add byte fs:[edi + 0x65], al
je 0x5e0776
inc edi
je 0x5e0776
imul ebp, dword [ebp + 0x53], 0x657a69
and dword [edi + 0x72], edx
imul esi, dword [ebp + 0x46], 0x656c69
push ebx
je 0x5e079b
add byte [ebx + 0x65], dl
je 0x5e079b
imul ebp, dword [ebp + 0x65], 0x471a0072
je 0x5e07a4
je 0x5e07b7
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[eax], dl
jns 0x5e06ec
enter 0x7845, 0x69
je 0x5e07b7
push 0x64616572
add byte [esi - 0x37], bl
xor byte [esi - 0x20], dh
inc esi
imul ebp, dword [esi + 0x64], 0x73726946
je 0x5e07be
inc esi
imul ebp, dword [ebp + 0x41], 0x6c43df00
fild word [ebx + 0x6c]
outsd dx, dword [esi]
jae 0x5e07e8
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[edi - 0x28], cl
dec esi
sub eax, ebx
xor dh, ah
imul esp, dword [ebp + 0x72], 0x6e
jb 0x5e0803
insb byte es:[edi], dx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ecx + 0x56f76aa2], bh
inc ebx
jb 0x5e080b
popal
je 0x5e080e
inc esi
imul ebp, dword [ebp + 0x41], 0x615b1a00
mov dword [0x47736c54], eax
je 0x5e0810
popal
insb byte es:[edi], dx
jne 0x5e0823
add byte [ecx + 0x73], cl
inc ebx
push 0x646c69
rcl dword [esp + ebp*2 + 0x73]
push ebx
je 0x5e0825
popal
insb byte es:[edi], dx
jne 0x5e0838
add byte [edi + 0x657375c2], dl
jb 0x5e080e
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [esi - 0x80], bh
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
or al, 0x47
je 0x5e0839
imul ebp, dword [ebp + 0x54], 0x657079
pop ds
insb byte es:[edi], dx
out 0x57, eax
imul ebp, dword [esi + 0x64], 0x7246776f
outsd dx, dword [esi]
ja 0x5e084b
jb 0x5e0876
insd dword es:[edi], dx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x61578300
outsb dx, byte [esi]
je 0x5e080e
adc dword [edi + 0x61], 0x69
je 0x5e0861
popal
imul esi, dword [ebp + ecx*2 + 0x65], 0x67617373
add ch, ah
jae 0x5e088a
popal
add ch, ah
ja 0x5e0805
xor byte [ecx - 0x69], 0x8a
inc ebx
jb 0x5e088a
popal
je 0x5e088d
push edi
imul ebp, dword [esi + 0x64], 0x7845776f
inc ecx
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
ja 0x5e0874
js 0x5e0872
add byte [ebx + 0x68], dl
outsd dx, dword [esi]
ja 0x5e088e
imul ebp, dword [esi + 0x64], 0xfd00776f
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
ja 0x5e083d
std
inc edi
je 0x5e088f
outsd dx, dword [esi]
jne 0x5e08b2
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
inc ecx
add byte [edx + esi*2 + 0x61], dl
outsb dx, byte [esi]
jae 0x5e08c1
popal
je 0x5e08bd
dec ebp
jae 0x5e08cf
popal
add byte gs:[di], ch
je 0x5e082a
dec ecx
push ebp
outsb dx, byte [esi]
push 0x576b6f6f
imul ebp, dword [esi + 0x64], 0x4873776f
outsd dx, dword [esi]
outsd dx, dword [esi]
imul eax, dword [ebp + 0x78], 0
js 0x5e0878
jg 0x5e08ce
jb 0x5e08dd
arpl word [ebx + 0x50], bp
outsd dx, dword [esi]
jo 0x5e08f7
jo 0x5e08d1
outsb dx, byte gs:[esi]
jne 0x5e0888
pop ss
push ecx
nop
push ebx
je 0x5e08df
je 0x5e08df
push eax
jb 0x5e0900
jo 0x5e08d4
add byte [eax + 0x54], al
jb 0x5e08f9
outsb dx, byte [esi]
jae 0x5e0907
popal
je 0x5e0903
dec ebp
inc esp
dec ecx
push ebx
jns 0x5e0917
inc ecx
arpl word [ebx + 0x65], sp
insb byte es:[edi], dx
add byte [esi + 0x4d], dl
mov al, 0x53
jns 0x5e0923
je 0x5e0917
insd dword es:[edi], dx
push eax
popal
jb 0x5e0918
insd dword es:[edi], dx
je 0x5e0920
jb 0x5e0930
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add dh, dh
popal
int1
nop
arpl si, ax
mov cl, 0x55
outsb dx, byte [esi]
jb 0x5e0933
imul esi, dword [bp + di + 0x74], 0x6c437265
imul esi, dword [ebx + 0x74], 0x6c437265
je 0x5e0938
jb 0x5e0918
inc ebx
insb byte es:[edi], dx
popal
jae 0x5e094c
inc ecx
add bl, cl
int3
or al, 0xf3
stc
test eax, 0x776f6853
push ebx
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
inc edx
popal
jb 0x5e08ef
push ebx
push 0x774f776f
outsb dx, byte [esi]
push eax
push eax
outsd dx, dword [esi]
jo 0x5e0971
jo 0x5e0971
add byte [edi - 0x4a], bh
xchg esi, eax
mov dh, 0x96
push ebp
jo 0x5e0969
popal
je 0x5e096d
push edi
push edi
imul ebp, dword [esi + 0x64], 0x5800776f
sbb ebp, dword [ecx]
stosb byte es:[edi], al
push ss
cmp byte [ebx + 0x65], dl
je 0x5e0970
push edi
imul ebp, dword [esi + 0x64], 0x6554776f
js 0x5e0996
inc ecx
add byte [ebx + 0x65], dl
je 0x5e0978
popal
jb 0x5e0990
outsb dx, byte [esi]
je 0x5e092e
adc dword [ebx + 0x65], edx
je 0x5e098a
je 0x5e098a
imul ebp, dword [esi + 0x64], 0x6f50776f
push eax
outsd dx, dword [esi]
jae 0x5e093c
push ebx
je 0x5e0997
imul ebp, dword [esi + 0x64], 0x6f4c776f
outsb dx, byte [esi]
push edi
add byte [ebp + 0x53], dh
push ebx
je 0x5e09a7
imul ebp, dword [esi + 0x64], 0x4873776f
outsd dx, dword [esi]
outsd dx, dword [esi]
imul eax, dword [ebp + 0x78], 0x41
add byte [eax + 0x47], dh
je 0x5e09a6
outsd dx, dword [esi]
insd dword es:[edi], dx
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
dec esp
dec esp
imul ebp, dword [esi + 0x65], 0x65530041
inc ecx
add byte [ebx + 0x65], dl
je 0x5e09ca
je 0x5e09ca
imul ebp, dword [esi + 0x64], 0x6f4c776f
dec esp
outsd dx, dword [esi]
outsb dx, byte [esi]
inc ecx
add byte [edx + 0x69], al
je 0x5e09c4
insb byte es:[edi], dx
je 0x5e0985
cmp al, 0x53
je 0x5e09e1
imul ebp, dword [esi + 0x64], 0x6c50776f
insb byte es:[edi], dx
popal
arpl word [ebp + 0x6d], sp
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x5e0999
push cs
movsd dword es:[edi], dword [esi]
push ebx
je 0x5e09f2
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
push edx
popal
outsb dx, byte [esi]
add byte gs:[di + 0x75], cl
insb byte es:[edi], dx
inc esp
imul esi, dword [esi], 0xbce950ab
cli
invalid
push eax
jmp 0x5e0474
outsw dx, word [esi]
add byte [eax], ah
int3
add dl, byte [ebx + 0x65]
je 0x5e0a15
outsd dx, dword [esi]
jb fcn.005e0a37
jb 0x5e0a44
jne 0x5e0a45
push edi
imul ebp, dword [esi + 0x64], 0x7100776f
jmp 0x1949225e
jns 0x5e09fb
jmp 0x5e09fd
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [ebx + 0x65], dl
je 0x5e0a3e
insb byte es:[edi], dx
popal
jae 0x5e0a72
dec esp
outsd dx, dword [esi]
outsb dx, byte [esi]
inc ecx
add byte [edx + 0x65], dl
insb byte es:[edi], dx
popal
jae 0x5e0a71
inc esp
inc ebx
add byte [ecx + 0x53], dh
je 0x5e0a57
insb byte es:[edi], dx
imul esi, dword [eax + 0x62], 0x6472616f
inc esp
popal
je 0x5e0a81
add byte [eax + 0x74], dl
dec ecx
outsb dx, byte [esi]
push edx
arpl word gs:[eax + eax + 0x7f], si
xor eax, 0x43746553
jne 0x5e0aa4
jae 0x5e0aa3
jb 0x5e0a36
dec esp
inc ebx
jae 0x5e0ae6
jae 0x5e0ad5
push ebx
arpl word [edx + 0x65], si
outsb dx, byte gs:[esi]
push esp
outsd dx, dword [esi]
inc ebx
insb byte es:[edi], dx
imul esp, dword [ebp + 0x6e], 0x601f0074
mov ch, 0x9e
push ebx
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
call 0x5e2f7a
add dword [esp], 0xfffff21b
jmp 0x5e3041
call 0x55436c
call 0x555987
popal
jmp 0x5e039b
pop eax
xor ax, ax
jmp 0x5e33d1
call 0x5e30a5
push ebx
popal
outsb dx, byte gs:[esi]
imul ebp, dword [bp + 0x65], 0x63694c20
outsb dx, byte gs:[esi]
jae 0x5e3104
jb 0x5e30b7
inc esp
insd dword es:[edi], dx
outsd dx, dword [esi]
and byte [esi + 0x31], dh
cmp byte cs:[esi], ch
xor byte [esi], ch
xor byte [eax], al
lea esp, [esp + 4]
pushal
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
jmp 0x5e0673
adc eax, 0x80711680
daa
sahf
add al, 0x9a
std
or al, 0xfd
fimul word [ebx - 0x25]
mov esi, 0x8810fd4d
push ds
jns 0x5e30a3
and esi, eax
pop ebp
int 0x94
fisub dword [bx + di - 3]
insd dword es:[edi], dx
hlt
movzx ebx, word [eax + 0x3c]
add ebx, eax
cmp word [ebx], 0x4550
je 0x5e09b2
jmp 0x5e33dc
cmp word [eax], 0x5a4d
je 0x5e326c
sub eax, 0x10000
jmp 0x5e33d1