Function at 0xd00367
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0x94ae63
inc eax
cmc
stc
cmp eax, 0x104
jmp 0x94ae5d
inc esi
stc
clc
cmp al, 9
jmp 0xcbd27d
mov eax, dword [ebp - 0xc]
sbb esi, 0x6cb97b20
cdq
test bp, ax
mov edx, dword [ebp + 0x10]
rcr esi, 0xbe
rol esi, 0x47
mov si, dx
lea esi, [edi + ebx]
jmp 0xd0a28a
push edi
call fcn.00d00367
add esp, 0xc
mov di, cx
pop edi
mov bx, bp
movzx bx, dh
not si
pop ebx
pop esi
jmp 0xd02c86
je 0x8ab9d0
mov esi, dword [ebp + 0xc]
test esi, esi
jmp 0x8ab9b9
jne 0x833871
lea edx, [ebp - 0x114]
bswap eax
lahf
movzx eax, di
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x922ed6
mov esp, ebp
pop ebp
jmp 0x85db23
ret
jb 0x960433
lea ecx, [ebp - 0x114]
setb al
jmp 0xca8ab3
push esi
jmp 0x8db2aa
inc edi
jmp 0x89b560
push edi
jmp 0x8ee2ae
jne 0xd1be4e
push 0
jmp 0x959117
mov eax, dword [ecx + 0x3c]
cmp dword [eax + ecx], 0x4550
jmp 0xce8b61
mov eax, dword [eax + esi*4]
cmc
push edx
mov edx, dword [ebp + 0xc]
test dl, 0xc5
test eax, esp
cmp ch, ch
add eax, ecx
call fcn.007d7ac9
lea esp, [esp + 4]
test eax, eax
jmp 0xd3189d
je 0xd0437e
mov edx, dword [ebp + 8]
cmp edi, edx
jmp 0xd05893
je 0xd0437e
cmp cl, 0x2e
jmp 0x9181c0
mov byte [esi], cl
jmp 0x7722a1
jle 0xd174d4
lea ebx, [esi + 1]
shl ecx, 0x59
mov ecx, dword [ebp + 8]
jmp 0x959aaa
ret
ret
je 0x8ab9d0
mov eax, dword [eax + ecx + 0x7c]
clc
jmp 0x884889
push ebx
cmp esp, 0x39ed51ff
push edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0xffffffff
cmp esi, 0xffff
jmp 0xcbd460
pop ebx
movzx esi, ax
pop esi
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0xcda447
je 0x7c3069
mov byte [ebx + eax], dl
jmp 0x7c49bd
inc eax
cmp edi, ecx
jmp 0x7c3063
ret
je 0x8ab9d0
mov eax, 0x5a4d
test esp, esp
cmc
cmp word [ecx], ax
je 0x7eab01
xor eax, eax
jmp 0x8e624b
mov eax, dword [ebp + 0xc]
jmp 0xd22860
mov dword [ebp - 0xc], eax
jmp 0xc96f96
pop edi
sal ebx, 0xf1
sub esi, 0x62cb1c19
shl si, 0xa1
pop ebx
shl esi, 0x44
clc
dec si
add eax, ecx
cmovnp si, sp
movsx esi, sp
pop esi
mov esp, ebp
pop ebp
jmp 0x85ba4f
jb 0x8cae17
mov esi, dword [ebp - 0x10]
add esi, edx
test al, 0xa4
cmp eax, esi
jmp 0xcebcc1
je 0xd0437e
cmp eax, edx
jmp 0x8cd6e6
test ecx, ecx
jmp 0x78a4af
mov cl, byte [esi + 2]
stc
add esi, 2
stc
sub edx, edx
test sp, di
cmp esi, 0xff11623
test cl, cl
jmp 0xd1be48
pop esi
jmp 0x90d76f
call fcn.00d00367
add esp, 0xc
cmovns edi, ecx
movsx bx, dh
pop edi
jmp 0x885835
ret
push eax
push edx
mov ax, 0x35ec
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xd372db
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
je 0x8e3c84
push 0
push ecx
jmp 0x7c5636
mov esp, ebp
movzx ebp, dx
not bp
pop ebp
jmp 0x7c0097
je 0x960402
mov cl, byte [esi + 1]
inc esi
test cl, cl
jmp 0xd04378
mov edi, dword [edx + ecx + 0x18]
test edi, edi
je 0xd17513
mov eax, dword [edx + ecx + 0x20]
add eax, ecx
clc
cmp edi, eax
sub ebx, ebx
jmp 0xd24dee
call eax
mov edi, eax
test edi, edi
jmp 0x83386b
je 0x8af576
mov edi, dword [ebp + 0xc]
add ebx, ebx
adc cx, si
lea ecx, [ebp - 0x114]
cmp esp, ebp
shl esi, 0xed
bt esi, ebp
sub eax, eax
setbe bh
sub edi, ecx
rol cl, cl
lea esp, [esp]
rcl ebx, 0xcc
mov bx, 0x6252
mov cl, al
stc
jmp 0xd1c2cb
jb 0x929656
lea eax, [ebp - 0x114]
jmp 0x8fe859
push edx
jmp 0x788ac0
cmp ebx, edi
jle 0x788378
jmp 0xd1750e
mov ecx, esi
test al, 0xa1
cmp bp, 0x72f
sub ecx, eax
stc
cmc
cmp ecx, 0x104
jae 0xd0437e
sub edi, edi
cmp edx, 0x8ca606b
test ecx, ecx
je 0x7c3069
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0x88b17e
mov esp, ebp
movsx ebp, dx
pop ebp
jmp 0x8a92e3
js 0xd17513
jmp 0x788385
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xcee158
push ecx
movsx ax, cl
mov byte [ebp + edi - 0x114], 0
jmp 0xc9d75d
ja 0x7d7c49
movsx eax, cl
mov cl, byte [esi]
lea edx, [edx + edx*4]
lea edx, [eax + edx*2 - 0x30]
test cl, cl
jmp 0x7d7c43
ja 0x92101a
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
mov dword [ebp - 8], eax
jmp 0xd17513
ret
ret
mov esp, ebp
not ebp
bswap bp
pop ebp
jmp 0x8ef27f
lea eax, [esi + eax*4]
test sp, bx
cmp si, sp
mov eax, dword [eax + ecx]
test eax, eax
jmp 0x8d176e
jne 0x8ab9d0
mov edx, dword [eax + ecx + 0x78]
test esp, 0x4efc072f
mov dword [ebp - 4], edx
clc
test edx, edx
jmp 0x8843b3
jae 0x8cae17
lea eax, [eax + ecx]
adc si, 0x3dbe
mov cl, byte [eax]
clc
mov esi, eax
cmc
clc
test cl, cl
jmp 0x84b7c3
call eax
mov edi, eax
cmp edi, 0x3d7c4ffd
test edi, edi
jmp 0x78e187
push ebp
mov ebp, esp
mov cl, 0xd9
mov ecx, dword [ebp + 8]
clc
lea esp, [esp - 0x114]
cmp ax, sp
jmp 0x7c497c
mov esp, ebp
pop ebp
jmp 0xcdbef9
jne 0x84b7c9
pop edi
not si
pop ebx
dec esi
clc
cmp bp, 0x1284
xor eax, eax
movzx esi, bx
pop esi
jmp 0x964527
jne 0x905cbd
cmp byte [ebp + 0x10], 0
jmp 0x929623
sar esi, 1
cmp ebx, edi
jmp 0x807053
mov eax, dword [ebp + 8]
xadd dh, dh
mov ecx, dword [ebp - 4]
add dx, 0x71ba
shl dx, 0x3b
mov edx, dword [ecx + eax + 0x24]
bts cx, bx
lea ecx, [edx + esi*2]
shr dh, cl
cmova dx, sp
movzx edx, word [ecx + eax]
shld cx, bp, 0x51
mov dword [ebp - 8], edx
xor ecx, edi
btr edx, 3
mov ecx, eax
setnp ah
mov edx, dword [ebp - 4]
rcl eax, cl
mov eax, dword [ebp - 8]
cmp ebx, eax
cmp eax, dword [edx + ecx + 0x14]
jae 0xd0437e
mov esi, dword [edx + ecx + 0x1c]
cmp dl, 0x2e
jmp 0xce859b
je 0x7d7c49
lea eax, [ecx - 0x30]
jmp 0x781ed2
mov ebx, 0x1e172ed9
cmovbe esi, ebx
rol ebx, cl
mov esi, edi
lea esi, [ebp + eax - 0x114]
rcl ch, 0x32
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
jmp 0x84d5c0
push eax
movzx eax, cx
movsx eax, bp
lahf
push edx
cwde
movsx ax, dl
cbw
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop ebx
mov si, 0x16d0
mov esi, ebx
pop esi
jmp 0xce3586
dec edi
jmp 0x8bd06c
jns 0x84eccd
lea edi, [esi - 1]
jmp 0x84ecd9
call eax
pop edi
pop ebx
mov si, dx
movsx esi, si
pop esi
jmp 0x7b83d9