Function at 0xdf8305
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0xd4984e
mov eax, 0x5a4d
jmp 0xd49845
mov esp, ebp
pop ebp
jmp 0xd24a6b
je 0xc9b239
push 0
push ecx
jmp 0xccd775
je 0xd9b414
mov edi, edi
cmp cl, 0x2e
jmp 0x1271c57
jne 0xca2e34
cmp byte [ebp + 0x10], 0
jmp 0xd392bc
push eax
mov ah, 4
cmovb eax, edi
movsx eax, bx
push edi
not al
movzx eax, sp
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xcf7f1b
jne 0x12bcbde
inc esi
mov dword [ebp + 8], esi
jmp 0xc48853
jae 0xd9b414
mov dword [ebp + 8], 0
test sp, 0x5286
test ecx, ecx
jmp 0xc7a403
jmp 0x12bcbde
jbe 0xdd7f20
lea ebx, [ebp - 0x114]
xchg dl, dl
sub ebx, eax
mov dl, byte [eax]
test dx, ax
cmp di, sp
test dl, dl
jmp 0xe2af72
push eax
jmp 0xdb8d1a
mov esp, ebp
pop ebp
jmp 0xc8d53f
mov edx, dword [edi + 0x3c]
cmc
add edx, edi
clc
cmp di, cx
cmp dword [edx], 0x4550
jne 0xd4984e
mov eax, dword [edx + 0x78]
jmp 0xd31c0a
ret
mov cl, byte [esi + 2]
lea esi, [esi + 2]
clc
cmc
xor edx, edx
test esi, ebp
cmp ecx, ecx
test cl, cl
jmp 0x127e9cf
ret
cmp byte [esi + 1], 0x23
xchg cl, ch
jmp 0xdbe52b
mov edx, dword [ebp - 0xc]
btr si, dx
mov eax, dword [ebp + 8]
cmp ebp, 0x55b62cf2
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
test esi, 0x784035c
push eax
rcr ax, 0xd0
jmp 0xd6a396
dec ebx
stc
add edx, edi
cmc
stc
mov dword [ebp + 8], 0
test sp, 0x6dbe
mov dword [ebp - 0xc], edx
stc
test ebx, ebx
jmp 0xdb8403
push eax
call fcn.00df8305
add esp, 0xc
movsx esi, bx
movsx bx, al
pop esi
pop ebx
pop edi
jmp 0xdab3d1
ret
je 0xd9b414
cmp ecx, eax
jmp 0xdf3145
call eax
test eax, eax
je 0xd9b414
cmp eax, edi
jmp 0xc0a71a
call eax
pop esi
pop ebx
mov edi, 0x533763dd
pop edi
jmp 0xd3a335
mov esp, ebp
cmovg ebp, edi
bswap bp
pop ebp
jmp 0xc9f519
ret
je 0x12866eb
mov edx, dword [eax + edi + 0x20]
jmp 0xcb9dc9
ret
mov dword [ebp - 4], eax
test eax, eax
jmp 0x12b25f6
je 0xdf41ef
mov ebx, dword [ebp + 0xc]
rcl esi, 0x59
xadd al, cl
lea eax, [ebp - 0x114]
shl si, 0xad
cmc
ror si, 0xef
sub edx, edx
bts si, bx
sub ebx, eax
stc
mov edi, edi
cbw
cmc
mov eax, 0x6bb319ac
cmovno si, ax
mov cl, dl
xchg si, si
rcl esi, 0x16
btc esi, esi
rol eax, cl
adc si, bx
shrd esi, eax, 0xb
shl esi, 0x57
lea esi, [ebp + edx - 0x114]
stc
test cx, bp
add al, dl
test bh, 0x84
stc
xor al, byte [ebx + esi]
jmp 0xe13a18
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0xdb82ab
test cl, cl
jmp 0xd9b40e
call eax
test eax, eax
jmp 0xd4588c
jne 0xce799b
lea edx, [ebp - 0x114]
cmovb eax, edx
push edx
mov eax, esi
mov eax, 0x5ec929c0
xchg ah, ah
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xce7991
cmp word [edi], ax
je 0xc89102
sub eax, eax
movzx edi, dx
movsx edi, cx
mov edi, 0x19a6607f
pop edi
jmp 0xd810ce
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x1281b13
cmp edx, 0x104
jmp 0x128a03b
call fcn.00df8305
add esp, 0xc
not di
pop esi
xchg di, bx
pop ebx
pop edi
jmp 0x13b6eec
mov esp, ebp
bswap ebp
movzx ebp, bp
pop ebp
jmp 0xe1710f
push ecx
jmp 0xddca86
jne 0xc04409
pop esi
sar ebx, 0xbc
bsf bx, dx
and bl, bl
pop ebx
add di, dx
adc edi, 0x34ea1b9d
xor eax, eax
cmovg edi, esi
mov di, di
xchg edi, edi
pop edi
jmp 0xd05f59
pop ebp
jmp 0xcd5ff7
inc esi
cmp bl, 9
jmp 0xe235fe
mov esp, ebp
pop ebp
ret
je 0x12bcbdb
test eax, eax
jmp 0x13a1898
mov dword [ebp - 8], ecx
jmp 0x13a792a
ret
jl 0x12866eb
jmp 0xcb60e0
push edi
cwde
not ax
mov ax, 0x1e4d
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x127371c
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
movsx ecx, sp
cwde
bswap ax
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0xdafa68
lea ecx, [esi + 1]
jmp 0xbf1cdf
mov ecx, dword [ebp + 0xc]
bts dx, bp
jmp 0xcb60d9
mov ebx, dword [eax + edi + 0x18]
cmp bh, ah
test ebx, ebx
jmp 0xd232a5
inc eax
mov dword [ebp + 8], edx
clc
cmp edx, ecx
jb 0xc7a413
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
jmp 0xd8ec89
jae 0xd9b414
mov edx, dword [eax + edi + 0x1c]
test ch, ch
lea ecx, [edx + ecx*4]
stc
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0x13b4a6c
mov byte [ebp + eax - 0x114], 0
movsx eax, bp
mov ah, al
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xd401b5
mov ecx, esi
cmc
cmp edx, edi
sub ecx, eax
cmp ecx, 0x104
jmp 0xc3e42d
inc esi
stc
jmp 0xd3a41c
jb 0x127acad
mov edx, dword [ebp - 0x10]
add edx, eax
clc
cmp ebp, 0xbad435f
cmp ecx, edx
jmp 0xe1d6ca
mov eax, dword [ebp + 0xc]
jmp 0xc7dc1d
push ebp
mov ebp, esp
lea esp, [esp - 0x114]
clc
test cx, di
push edi
btc edi, 0x12
xor edi, esi
mov edi, dword [ebp + 8]
test edi, edi
je 0xd4984e
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0xbec5cd
mov byte [esi], al
je 0x128a041
inc edx
cmc
jmp 0xd70e3c
push edx
jmp 0x127262a
jae 0xd9b414
mov ecx, dword [eax + edi + 0x1c]
sub dh, 0xdf
lea edx, [ecx + esi*4]
inc cx
cmc
mov ecx, dword [edx + edi]
cmp bp, 0x6432
cmc
test al, ch
test ecx, ecx
jmp 0xce237a
ret
inc edx
jmp 0xdd7f13
jae 0x127acad
lea eax, [ecx + edi]
mov cl, byte [eax]
mov esi, eax
test cl, cl
jmp 0xc04401
ja 0x13b83de
movsx ecx, cl
cmp ax, 0x4f72
lea edx, [edx + edx*4]
test ecx, 0x628d77e9
cmc
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
cmp dl, 0x79
clc
cmp si, di
test cl, cl
jmp 0x13b83d8
je 0xdd7f20
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
jmp 0xe1b72e
je 0xddcc07
mov cl, byte [esi + 1]
jmp 0xdedadd
push eax
jmp 0xd7b455
call eax
pop esi
movzx ebx, dx
cmova ebx, ebp
sete bl
pop ebx
xchg edi, edi
mov edi, edx
pop edi
jmp 0xbed5ee
pop esi
lahf
not al
pop ebx
cbw
lea eax, [ecx + edi]
not di
pop edi
mov esp, ebp
pop ebp
jmp 0xd0c4f7
je 0x13b83de
mov bl, cl
test di, sp
sub bl, 0x30
jmp 0xda5cb2
call fcn.00cb148b
add esp, 4
stc
cmc
cmp eax, 0xffffffff
jmp 0xdad486
jle 0xdceaaf
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0xe15efb
jb 0xd392e8
lea eax, [ebp - 0x114]
jmp 0xc0a7c8
je 0xd4984e
mov edx, dword [edx + 0x7c]
cmp edx, esi
push ebx
test sp, dx
push esi
cmp ch, al
test ax, 0x5414
test cl, cl
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp ecx, 0xffff
ja 0xdceaf0
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0xdd901e
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0x12866df
je 0xdbdb41
cmp eax, 1
jmp 0xc1fea5
mov dword [ebp + 8], edx
jmp 0x12bcbde
jne 0xce2380
pop esi
sub bl, 0xc9
pop ebx
cmc
xor eax, eax
xchg di, di
pop edi
jmp 0xc81398
mov esp, ebp
jmp 0xd9f190
jne 0x127e9d5
push 0
jmp 0xe143bf