Function at 0x541561
Capabilities:
Parse pe header

Disassembly:
mov edi, edi
mov ecx, ecx
mov edi, edi
mov ebx, ebx
mov ebx, ebx
mov ebx, ebx
mov esi, esi
mov edx, edx
mov ebp, ebp
xor eax, eax
pop esi
pop ebp
ret
mov eax, esi
pop esi
pop ebp
ret
je 0x51aa4c
jmp 0x4f2e4e
inc ebx
int3
push ss
leave
cmc
popal
into
in al, 0xfb
mov dword [0x6e254c1b], eax
mov byte [0xba4c16d], al
mov dword [esi - 0x35e497b8], esi
jb 0x4b31e8
loope 0x4b316f
rcl byte [esi + 0x30e3300], cl
movsd dword es:[edi], dword [esi]
pop ecx
adc dword [ebx + 0x28], ecx
insb byte es:[edi], dx
out dx, al
dec ebx
bound eax, qword fs:[eax + 0x13]
xor edx, edx
imul esi, dword [ebp + 0x528919ba], 0xffffff9e
int3
push dword [eax + 0x3c]
push dword [esp]
cmp al, 0xff
xor al, 0x24
pop eax
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 0x1fbfbebd
dec ebx
xor ebx, 0x7efebcfd
dec ebx
and ebx, 0x7ddfecb2
inc ebx
xor ebx, 0x61410005
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
jmp 0x53db57
add esp, 4
jmp 0x4fbc54
call fcn.00417a80
jmp 0x4eb5b3
cmp word [esi], 0x5a4d
jmp 0x5086e2
mov dword [0x633bf0], eax
jmp 0x4f9910
cmp word [eax], 0x4550
jmp 0x5086ed
test eax, eax
jmp 0x4a6346
jb 0x54f556
jmp 0x417e6f
jne 0x51aa4c
jmp 0x57237a
je 0x417e86
jmp 0x51aa4c
add esi, 0x1000
jmp 0x51aa57
cmp esi, 0x7d000000
jmp 0x502d55
push ecx
push ebx
push 0xff9b9d8
pop ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
push 0x103a7559
mov dword [esp], edx
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ebx
push 0x4e7d980a
mov ebx, dword [esp]
add esp, 4
not ebx
and ebx, 0x6efbf685
shl ebx, 4
sub ebx, 0x6ff50820
sub ebx, 0x18ba429a
add eax, ebx
pop ebx
add eax, 0x26b9d8a4
add eax, esi
sub eax, 0x26b9d8a4
sub eax, 0x7f771d96
jmp 0x4f9906
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], esi
pop dword [0x633940]
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4f2e44
sub esp, 4
mov dword [esp], edi
sub esp, 4
mov dword [esp], edx
mov edx, 0x55d14988
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push eax
push esp
pop eax
push ebp
mov ebp, 4
add eax, ebp
pop ebp
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push esi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push eax
push 4
pop eax
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], esi
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push 0x7529e146
mov dword [esp], ebp
mov ebp, esp
push esi
mov esi, 0x7fb7ee49
push eax
mov eax, 0x67fa583a
and esi, eax
pop eax
and esi, 0x7fa85d65
shl esi, 3
sub esi, 0x3d023ffc
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x54151f
push edx
push esi
mov dword [esp], ebx
push 0x2810dba9
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push ebx
mov dword [esp], ecx
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push 0x5aec88b7
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [0x633940]
mov eax, dword [esp]
push esi
mov esi, esp
push eax
mov eax, 4
add esi, eax
pop eax
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
jmp 0x4b31e6