Function at 0x56b99d
Capabilities:
Access peb ldr_data
Parse pe header

Disassembly:
inc eax
lodsd eax, dword [esi]
out dx, al
push dword [ebp - 0x4831f37c]
cmp ebx, ecx
mov bl, 0xb6
cmpsd dword [esi], dword es:[edi]
mov dword [0xae3cfe67], eax
daa
cmpsd dword [esi], dword es:[edi]
out dx, al
out 0x55, eax
ret
imul edx, ebp, 0x6a
and esp, eax
dec ecx
sub eax, 0x96fef83c
wait
mov cl, 0xdd
pop ds
or eax, 0x8881a138
cmpsd dword [esi], dword es:[edi]
sbb al, 5
fsub qword [edx]
scasd eax, dword es:[edi]
inc di
neg byte [eax]
jl 0x567f84
neg byte [edi - 0x5e]
sbb edi, dword [ecx - 0x830924e]
mov bh, 0x31
fst st(6)
dec ebx
jne 0x568081
push es
call 0x674de2ef
fsub dword [ebx - 0x4c]
cmpsb byte [esi], byte es:[edi]
das
outsd dx, dword [esi]
jmp 0x568095
test edi, ecx
xchg esp, eax
push ecx
push 0xb7b1b8e6
pop edi
adc dword [edi + ebx*8 - 3], esp
and al, 0xd2
or ecx, esp
mov ebx, 0x14f76b8c
mov word [ebx - 9], gs
adc al, 0xf5
imul esi, edi, 0x14
cmc
cmpsd dword [esi], dword es:[edi]
and al, 0xed
cmp dword [ecx], esp
test eax, 0xbd6e2cf3
sbb al, 0xc9
mov edi, 0xf68cb9e2
and dword [ecx - 0x22865832], 0xfa6fede8
loope 0x568096
push edi
div byte [ebp + 0x2631ec99]
or al, 0x34
out dx, al
dec esi
inc ecx
xchg ebx, eax
xlatb
sti
and byte [eax + 0xa], bh
mov al, 0xc5
mov dh, 0x4d
loopne 0x568134
pop esp
lahf
dec ebp
cli
pop esp
out 0x73, al
inc dx
add al, 0xff
mov edi, dword [ebx - 0x4e065c1c]
sub dword [eax + 0x46c0a663], ebx
lahf
adc byte [ecx], ch
inc ebx
ret
mov cl, 0x71
aad 0xdd
div byte [esi + ebx*2 - 0x27]
inc esp
push esi
push 0x5b09091f
inc esp
cdq
adc edi, edi
clts
push cs
out dx, eax
invalid
jp 0x56810b
cmp eax, 0x23cb30e4
insd dword es:[edi], dx
leave
test al, 0x84
inc ecx
fild dword [edi + 0xa]
das
pushal
sub al, 0xac
arpl word [ebx - 0x48584835], bx
les ebp, [edx - 0x27]
sbb eax, 0x4a03b4da
jl 0x568137
in al, 0x30
retf
mov esp, esi
insd dword es:[edi], dx
and al, 0x3f
aaa
idiv byte [eax]
xchg ebx, eax
sub bl, ch
mov esp, edi
pop ecx
add al, 0xf9
stc
test edi, esi
dec eax
popfd
popal
jmp 0xb83797bc
call 0x568c82
pop eax
sub eax, 0x568c82
cmp dword [eax + 0x51989d], 0
je 0x568cd2
lea esp, [esp + 8]
popal
jmp 0x567fd9
inc dword [eax + 0x51989d]
push 0x93ac88d0
add dword [esp], 0x6ca47359
push 0
push 0
push 0xe714a815
add dword [esp], 0x193c237d
call fcn.00526e3a
jmp 0x56b8c4
call 0x568d03
jmp 0x56b900
push eax
jmp 0x568c7d
call 0x56b8c9
jmp 0x56b9e6
pop eax
xor ax, ax
jmp 0x56b92f
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
jmp 0x568cfe
cmp word [eax], 0x5a4d
jmp 0x56bbfa
pushal
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
jmp 0x56b91f
call 0x56b99d
push ebx
popal
outsb dx, byte gs:[esi]
imul ebp, dword [bp + 0x65], 0x63694c20
outsb dx, byte gs:[esi]
jae 0x56b9fc
jb 0x56b9af
inc esp
insd dword es:[edi], dx
outsd dx, dword [esi]
and byte [esi + 0x31], dh
cmp byte cs:[esi], ch
xor byte [esi], ch
xor byte [eax], al
lea esp, [esp + 4]
jmp 0x56b94f
popal
std
insd dword es:[edi], dx
hlt
call fcn.0052620b
popal
jmp 0x567fd9
movzx ebx, word [eax + 0x3c]
jmp 0x56bcec
add dword [esp], 0xffffdb2d
call 0x524bf0
jmp 0x56b9bc
shl byte [edi + 0x838652], 0x96
int1
add dh, ah
fnstcw word [ebx + 0x654788e4]
je 0x56ba65
imul ebp, dword [esi + 0x64], 0x724f776f
inc ebp
js 0x56ba19
mov bh, 0x35
movsd dword es:[edi], dword [esi]
int3
mov esp, dword [eax - 0x65]
push ss
test bl, ah
push ds
ljmp 0xdd37
je 0x56b9c8
sub eax, 0x10000
jmp 0x56b92f
add ebx, eax
cmp word [ebx], 0x4550
je 0x569098
jmp 0x56bc00