Function at 0x576b0d
Capabilities:
Parse pe header

Disassembly:
mov eax, esi
pop esi
pop ebp
ret
push ecx
mov ecx, esp
add ecx, 4
push ebx
push edi
mov edi, 4
mov ebx, edi
pop edi
sub ecx, 0x4b7881ba
sub ecx, ebx
add ecx, 0x4b7881ba
pop ebx
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x7b67dc16
add ecx, eax
pop eax
sub ecx, 0x7bffcdd6
add ecx, eax
add ecx, 0x7bffcdd6
push edx
mov edx, 0x6efd34f4
sub edx, 0x5ffe90c4
sub edx, 0x9396c81a
sub ecx, edx
pop edx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push dword [0x4c6974]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
jmp 0x576aa9
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 0x77f6282d
xor eax, 0x7fde7cbc
xor eax, 0x7cc619d8
xor eax, 0x74ee4d4d
sub edi, eax
pop eax
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], 0x5852d54d
mov dword [esp], esi
push 0x14de14c8
mov dword [esp], esi
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x6e805fcd
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
add ecx, 0x3abf1484
add ecx, eax
push edi
push 0x3abf1484
mov edi, dword [esp]
add esp, 4
sub ecx, edi
mov edi, dword [esp]
add esp, 4
mov ecx, dword [esp]
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
jmp 0x519962
cmp esi, 0x7d000000
jmp 0x5032f4
jb 0x503250
jmp loc.0041817f
push edi
mov dword [esp], ebp
mov dword [esp], 0x835081b
mov dword [esp], esi
pop dword [0x4c6974]
jmp 0x535a56
push ebx
mov ebx, esp
add ebx, 4
sub esp, 4
mov dword [esp], eax
mov eax, 4
sub ebx, eax
pop eax
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
push ebp
mov ebp, 0x77eeb05f
or ebp, 0x3f3fae7f
add ebp, 0x33c9faf0
and ebp, 0x298e8d77
push ecx
mov ecx, 0x7ddda12c
and ebp, ecx
pop ecx
shl ebp, 6
sub ebp, 0xe2613899
add ecx, ebp
pop ebp
add ecx, eax
push esi
mov esi, 0x779dfa8f
shr esi, 8
xor esi, 0x5a7eabcd
shl esi, 2
xor esi, 0x4ffe6394
sub esi, 0xa81baae1
add ecx, 0x6f77380c
sub ecx, esi
sub ecx, 0x6f77380c
pop esi
mov ecx, dword [esp]
push edx
mov edx, esp
push ebp
mov ebp, 0x7f9d485b
dec ebp
xor ebp, 0x7f9d485e
add edx, 0x55d69eb2
add edx, ebp
sub edx, 0x55d69eb2
pop ebp
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push ebp
mov ebp, 0x3f5f2a13
sub ebp, 0x7a4ff68f
not ebp
sub ebp, 1
neg ebp
xor ebp, 0xbad91f9f
add eax, ebp
pop ebp
push edi
mov edi, 0x5abfd4fb
sub eax, edi
pop edi
add eax, esi
add eax, 0x5abfd4fb
sub eax, 0x7fd62c19
jmp 0x586f3d
je 0x418196
jmp 0x52a89d
add esi, 0x1000
jmp 0x5032e9
add esp, 4
jmp 0x54c952
call fcn.00417e80
jmp 0x53378d
cmp word [esi], 0x5a4d
jmp 0x5398b2
je 0x52a89d
jmp 0x535a60
jne 0x52a89d
jmp 0x4e6e2d
test eax, eax
jmp 0x5398a7
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
sub ebp, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push eax
mov eax, esp
push ebx
mov ebx, 0x2b6d0e1c
and ebx, 0x7757e049
sub ebx, 0x1dfdc12b
not ebx
shl ebx, 7
or ebx, 0x37df711e
sub ebx, 0x7ffff11a
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push edx
push esp
pop edx
add edx, 4
push edi
mov edi, 4
add edx, edi
pop edi
xchg dword [esp], edx
mov esp, dword [esp]
push dword [eax + 0x3c]
mov eax, dword [esp]
push ecx
mov ecx, esp
push eax
push 4
pop eax
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
push ecx
mov ecx, esp
push ebp
mov ebp, 0x7be737bb
xor ebp, 0x72f3021e
xor ebp, 0x6a5eea57
inc ebp
xor ebp, 0x5bbdf9bc
xor ebp, 0x38f7264b
add ecx, ebp
pop ebp
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], edx
mov dword [esp], ebx
push ebp
mov dword [esp], ecx
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop ebx
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x51a70b
mov dword [0x4c6c28], eax
jmp 0x586f47
cmp word [eax], 0x4550
jmp 0x52a892