Function at 0xd5bf87
Capabilities:
Parse pe header

Disassembly:
mov ebx, dword [eax + edi + 0x18]
cmp dl, 0x26
stc
test ebx, ebx
jmp 0xc279fb
call eax
pop esi
seta bh
jmp 0xc1bc51
call fcn.00d5bf87
add esp, 0xc
pop esi
jmp 0xcd128a
pop edi
mov esp, ebp
movsx ebp, sp
pop ebp
jmp 0xbc7e4f
je 0xd0305b
cmp eax, edi
jne 0xc284b5
cmp byte [ebp + 0x10], 0
je 0xb9553f
mov ebx, dword [ebp + 0xc]
dec cl
bt si, si
lea eax, [ebp - 0x114]
inc cl
test edx, 0xa4b28c0
movzx esi, bp
sub edx, edx
sub ebx, eax
mov al, 0xf7
ror cl, 0x60
mov edi, edi
bts eax, esi
rcr cl, 0x31
stc
mov eax, 0x4b7b142a
not cl
mov cl, dl
rol si, 0x65
rcl esi, 0x32
rol eax, cl
lea esi, [ebp + edx - 0x114]
add al, dl
xor al, byte [ebx + esi]
mov byte [esi], al
je 0xc79faf
inc edx
cmp edx, 0x104
jmp 0xc79fa9
je 0xcb6d36
mov bl, cl
clc
sub bl, 0x30
jmp 0xcec8b1
test edi, edi
jmp 0xc743c6
jne 0xd29e42
pop esi
pop ebx
shl di, 3
xor eax, eax
mov edi, 0x469b6b35
not di
pop edi
jmp 0xc20ea8
call eax
test eax, eax
jmp 0xb80c69
call fcn.00d5bf87
add esp, 0xc
bswap di
pop esi
not edi
pop ebx
pop edi
jmp 0xc32c6d
mov eax, dword [ebp + 0xc]
jmp 0xc3b8d3
mov dword [ebp + 8], esi
jmp 0xc9b1e0
jae 0xd0305b
mov edx, dword [eax + edi + 0x1c]
test dx, 0x32ce
clc
lea ecx, [edx + ecx*4]
jmp 0xbf38c3
cmp cl, 0x2e
jmp 0xc7e560
jae 0xd0305b
mov ecx, dword [eax + edi + 0x1c]
adc edx, esi
rol dl, cl
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
cmc
test ecx, ecx
jmp 0xd29e3c
jae 0xcb5aa2
lea eax, [ecx + edi]
sub cl, 0x5b
mov cl, byte [eax]
mov esi, eax
test cl, cl
jmp 0xc51c76
je 0xc9e87b
push 0
jmp 0xc192d0
add edx, edi
cmp cx, di
cmc
cmp dword [edx], 0x4550
jmp 0xc3230a
mov esp, ebp
pop ebp
ret
jne 0xc49a25
inc esi
jmp 0xb9ac40
ret
mov dword [ebp - 8], ecx
jmp 0xc7a406
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
cbw
lea eax, [edx + esi*2]
movzx edx, bx
not edx
movzx ecx, word [eax + edi]
not dl
cwd
lea edx, [ebx + 1]
jmp 0xbcf294
ret
ret
inc esi
jmp 0xc34d5a
test cl, cl
jmp 0xcb6d30
je 0xc49a20
test eax, eax
jmp 0xcd6a12
mov ecx, dword [ecx + edi]
cmp eax, edx
test ecx, ecx
jmp 0xb8bdc9
call fcn.00c2e13d
lea esp, [esp + 4]
cmp bp, 0x734f
clc
cmp eax, 0xffffffff
jmp 0xbf3877
ja 0xb71e31
sub ecx, dword [eax + edi + 0x10]
cmp eax, ecx
cmp ecx, dword [eax + edi + 0x14]
jmp 0xb9e91f
push ebx
stc
push esi
or esi, 0xffffffff
test edx, ebp
test cx, 0x55a4
mov dword [ebp - 0x10], edx
cmp cx, bp
test sp, bx
cmc
mov dword [ebp - 8], esi
jmp 0xc5b1ed
push ecx
push eax
jmp 0xb92c0d
pop ebx
not di
pop edi
jmp 0xc72be4
push edx
jmp 0xcf8da5
mov esp, ebp
pop ebp
ret
je 0xc49a38
mov edx, dword [eax + edi + 0x20]
jmp 0xcc8101
jne 0xb80c6f
lea edx, [ebp - 0x114]
cwde
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xb928fc
cmp byte [esi + 1], 0x23
setl cl
lea ecx, [esi + 1]
jmp 0xbafc2f
mov dword [ebp + 8], edx
cmp edx, ecx
jb 0xd28d7d
mov eax, dword [ebp + 8]
movsx ecx, bp
movzx ecx, sp
lea ecx, [ebp - 0x114]
jmp 0xcc0627
jne 0xcd1456
mov eax, dword [edx + 0x78]
cmc
test esi, edi
mov dword [ebp - 4], eax
cmp bh, 0xe1
cmc
test eax, eax
jmp 0xca28f3
mov esp, ebp
pop ebp
jmp 0xbd7c2b
test cl, cl
jmp 0xd03055
jae 0xd0305b
mov dword [ebp + 8], 0
test bl, 0xdf
cmp si, dx
test ecx, ecx
jmp 0xd28d6a
mov edx, dword [edi + 0x3c]
jmp 0xbb2108
push eax
cwde
cmovge ax, sp
not ax
push edi
sete al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xb73502
lea ebx, [esi - 1]
test cl, ah
cmp dword [ebp + 8], ebx
jle 0xd5fc5b
mov eax, dword [ebp - 4]
rol si, 0xb7
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0xba812a
je 0xd0305b
mov edi, edi
stc
jmp 0xb9e9b1
cmp ecx, 0xffff
jmp 0xbff32d
ret
jl 0xc49a38
jmp 0xd5fc71
mov esp, ebp
cmovbe ebp, esp
not bp
bswap ebp
pop ebp
ret
je 0xcd1456
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0xcd1439
jb 0xb80cad
lea eax, [ebp - 0x114]
jmp 0xc8d00a
mov dword [ebp + 8], edx
jmp 0xc49a25
je 0xc9320c
mov cl, byte [esi + 1]
jmp 0xbe3804
mov esp, ebp
pop ebp
ret
push eax
setl ah
push edi
mov eax, 0x1d9a3a62
setg ah
bswap eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
mov bx, 0x31a9
pop ebx
xchg di, di
pop edi
jmp 0xbbb84d
mov ecx, esi
test bp, 0x7f4e
sub ecx, eax
cmp dx, bp
cmp ecx, 0x104
jmp 0xc3855f
jmp 0xc49a25
mov cl, byte [esi + 2]
lea esi, [esi + 2]
cmc
cmp esp, edx
xor edx, edx
cmc
test cl, cl
jmp 0xb8529a
je 0xcd1456
mov edx, dword [edx + 0x7c]
clc
jmp 0xc18d48
pop esi
movzx bx, ch
bswap ax
pop ebx
mov al, cl
bswap eax
lea eax, [ecx + edi]
movsx edi, bp
not di
pop edi
mov esp, ebp
pop ebp
jmp 0xbdbf9f
jne 0xb852a0
push 0
jmp 0xc1bddb
push ecx
jmp 0xcf974d
dec ebx
cmp ebp, ebx
lea edx, [edx + edi]
cmc
test ah, 0xc0
mov dword [ebp + 8], 0
clc
cmc
cmp edi, 0x53b40813
mov dword [ebp - 0xc], edx
cmp cx, di
test al, 0xab
test ebx, ebx
jmp 0xc6931a
pop ebx
pop edi
jmp 0xc83cf5
je 0xcd1456
mov eax, 0x5a4d
clc
cmp di, 0x3f75
cmp cx, si
cmp word [edi], ax
je 0xc399a6
sub eax, eax
jmp 0xb7d6f5
je 0xbd0d6d
cmp eax, 1
jmp 0xbc3f20
inc edx
inc eax
stc
jmp 0xc2b6a2
inc esi
clc
test si, cx
test di, 0x1b20
cmp bl, 9
ja 0xcb6d36
movsx ecx, cl
stc
cmc
lea edx, [edx + edx*4]
stc
lea edx, [ecx + edx*2 - 0x30]
rol cl, 0x59
cmp eax, 0x318700d8
mov cl, byte [esi]
jmp 0xbec246
call eax
test eax, eax
jmp 0xc2835b
push eax
jmp 0xb794ef
mov byte [ebp + eax - 0x114], 0
cbw
sete ah
mov eax, eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xcf709a
jne 0xb9e9b1
pop esi
pop ebx
bts edi, eax
sub eax, eax
mov edi, 0x41a35f07
pop edi
mov esp, ebp
bswap ebp
pop ebp
jmp 0xc641e7
jbe 0xc2b6ad
lea ebx, [ebp - 0x114]
sar dl, 0x6b
sub ebx, eax
rol dl, cl
mov dl, byte [eax]
cmp bp, sp
test cl, bh
stc
test dl, dl
je 0xc2b6ad
mov byte [ebx + eax], dl
cmovo dx, bp
mov edx, dword [ebp + 8]
jmp 0xcdcdf8
je 0xd0305b
cmp ecx, eax
jb 0xcb5aa2
mov edx, dword [ebp - 0x10]
test si, bp
clc
add edx, eax
stc
test dh, ah
cmp ecx, edx
jmp 0xbad6b5
push ebp
cmp ebp, ebx
shrd bp, sp, 0x55
mov ebp, esp
lea esp, [esp - 0x114]
cmc
clc
push edi
neg di
mov edi, dword [ebp + 8]
jmp 0xb8997f
mov ecx, dword [ebp + 0xc]
btr si, si
xadd dl, al
mov edx, dword [ebp - 0xc]
xor si, 0x32a
btc eax, 0xac
mov eax, dword [ebp + 8]
cmp bx, bp
and si, 0x15d1
sub esi, 0x6d791174
lea esi, [ebx + eax]
shrd ax, cx, 0x24
sal al, 0x61
cmp ax, si
mov eax, dword [ebp + 0x10]
push eax
not eax
cmc
bt ax, cx
sar esi, 1
mov eax, dword [edx + esi*4]
cmp bh, cl
test esi, 0x67a258ff
test di, bx
add eax, edi
jmp 0xbfb6a4