Function at 0xdc4dbe
Capabilities:
Parse pe header

Disassembly:
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_1]
jmp 0xd56de1
je 0x88a3c2
mov edx, dword [edx + 0x7c]
stc
cmp di, ax
push ebx
jmp 0xd73086
lea ecx, [esi + 1]
je 0xd58b0f
push 0
jmp 0xdd5249
mov byte [esi], al
jmp 0x836a2a
ret
mov edx, dword [edi + 0x3c]
add edx, edi
jmp 0x8a1a34
je 0xdb6098
inc edx
stc
cmp edx, 0x104
jmp 0xdb6092
pop esi
cwde
movzx ax, ah
pop ebx
lea eax, [ecx + edi]
jmp 0xd2853e
mov esp, ebp
pop ebp
jmp 0xcff317
je 0x88a3c2
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x88a3a8
ret
jae 0x90bc50
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
test al, 0xda
stc
cmc
mov ecx, dword [ecx + edi]
stc
test ecx, ecx
jne 0x9438b9
pop esi
rol edi, 0xb4
sub bl, 0x4b
xchg bx, bx
pop ebx
or di, si
xor eax, eax
jmp 0xd6ad46
je 0x88a3c2
mov eax, 0x5a4d
test al, 0x75
cmp ch, 0xf9
stc
cmp word [edi], ax
je 0x82b71e
xor eax, eax
cmovbe di, bx
pop edi
jmp 0xd70515
je 0xd805f2
mov byte [ebx + eax], dl
cdq
dec edx
mov edx, dword [ebp + 8]
inc edx
jmp 0xd805dc
je 0xd1273d
test eax, eax
jmp 0xdd3e11
cmp dword [edx], 0x4550
jmp 0xdb36e8
ret
jae 0x83c322
lea eax, [ecx + edi]
sub si, bp
xor cl, 0x1c
mov cl, byte [eax]
mov esi, eax
test cl, cl
je 0x90bc50
mov edi, edi
cmp cl, 0x2e
jmp 0xd845d1
ret
push eax
jmp 0xd8f60e
je 0x90bc50
cmp eax, edi
jmp 0xd63acf
call fcn.008278a0
add esp, 4
cmp eax, 0xffffffff
jmp 0x893366
pop edi
jmp 0xd32c49
push eax
push edi
bswap eax
cwde
not ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
call eax
pop esi
movzx edi, bx
pop ebx
movzx edi, bp
jmp 0x8fbc51
mov ecx, dword [ebp + 0xc]
dec dl
add dh, 0x9b
stc
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
movzx esi, dx
xchg si, si
lea esi, [ebx + eax]
sal ah, cl
mov eax, dword [ebp + 0x10]
cmc
push eax
sar esi, 1
rcl al, cl
bts eax, eax
mov eax, dword [edx + esi*4]
stc
add eax, edi
jmp 0x8e841c
jne 0x8c0dd0
pop esi
pop ebx
bswap di
sub edi, ebx
shr edi, 0x75
xor eax, eax
xchg di, di
bswap edi
pop edi
jmp 0xd93f89
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
cbw
lea eax, [edx + esi*2]
not cx
jmp 0xda8f2b
mov esp, ebp
pop ebp
jmp 0x829c3b
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0xd911a8
cmp byte [esi + 1], 0x23
jmp 0x822b56
jmp 0xd12747
jae 0x90bc50
mov ecx, dword [eax + edi + 0x1c]
sets dl
lea edx, [ecx + esi*4]
sbb cx, si
mov ecx, dword [edx + edi]
test ecx, ecx
je 0x90bc50
cmp ecx, eax
jmp 0xd06b01
push eax
push edi
mov ax, 0x5f40
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
call eax
pop esi
mov ebx, ebx
pop ebx
pop edi
mov esp, ebp
movsx ebp, sp
mov bp, ax
pop ebp
jmp 0x8b1b77
pop esi
pop ebx
pop edi
mov esp, ebp
movzx ebp, sp
cmove bp, bp
mov ebp, esp
pop ebp
jmp 0xd1f5bf
jae 0x90bc50
mov dword [ebp + 8], 0
cmc
cmp cx, 0x53d3
test ecx, ecx
jmp 0xd695b5
jne 0xd59e89
push 0
jmp 0xdd8700
mov dl, byte [eax]
cmp edi, 0x3d30340f
clc
cmc
test dl, dl
jmp 0x89239a
ret
jb 0x83c322
mov edx, dword [ebp - 0x10]
test dl, dh
add edx, eax
test esp, 0x12fa4305
cmc
stc
cmp ecx, edx
jmp 0x8c0db3
lea esi, [esi + 2]
xor edx, edx
test di, dx
test cl, cl
jmp 0xd59e83
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_1]
call eax
test eax, eax
jmp 0x8d7c19
jl 0xdd08d2
jmp 0x90513d
lea ebx, [esi - 1]
clc
cmp esi, 0x1797223b
cmp dword [ebp + 8], ebx
jmp 0xdd08c6
jmp 0xd12747
ret
pop edi
mov esp, ebp
pop ebp
jmp 0x8c206b
jne 0x8d7c1f
lea edx, [ebp - 0x114]
jmp 0xd0dc96
mov esp, ebp
mov bp, bp
mov ebp, 0x57420ba0
pop ebp
jmp 0xd3c52b
ret
call eax
test eax, eax
jmp 0xd2a568
mov cl, byte [esi + 2]
cmc
jmp 0xd08492
je 0x95656f
mov bl, cl
cmp ebp, 0x4f1c103d
sub bl, 0x30
inc esi
cmp bl, 9
ja 0x95656f
movsx ecx, cl
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
cmc
test cl, cl
jmp 0x956569
jne 0x9364e0
cmp byte [ebp + 0x10], 0
jmp 0xdb4bc7
jbe 0xd805f2
lea ebx, [ebp - 0x114]
shr dl, 0xa8
clc
sal dl, 0xe4
sub ebx, eax
jmp 0xcf46c0
pop edi
jmp 0x926b43
mov esp, ebp
cmovne bp, bx
pop ebp
jmp 0x88245f
push esi
clc
cmp di, bp
or esi, 0xffffffff
test esi, esp
mov dword [ebp - 0x10], edx
test si, 0x1ade
mov dword [ebp - 8], esi
cmp esi, esp
cmp ch, 0x1a
cmp ecx, 0xffff
jmp 0xda59dc
mov dword [ebp + 8], edx
jmp 0xd13109
inc esi
cmp sp, 0x6df7
cmc
test cl, cl
jmp 0x90bc4a
inc eax
test ebp, esp
mov dword [ebp + 8], edx
cmp bh, ah
cmc
test bp, 0x7829
cmp edx, ecx
jb 0xcf46c0
mov eax, dword [ebp + 8]
not ecx
lea ecx, [ebp - 0x114]
push ecx
jmp 0x816fef
je 0xdd27b1
mov cl, byte [esi + 1]
jmp 0xd7b6e7
call fcn.00dc4dbe
add esp, 0xc
mov di, 0x15a
cmovl edi, edi
not esi
pop esi
not di
pop ebx
pop edi
jmp 0x8442de
je 0xdd08d2
mov edx, dword [eax + edi + 0x20]
jmp 0xdcbe30
mov esp, ebp
mov ebp, ebp
pop ebp
ret
push edi
mov edi, dword [ebp + 8]
clc
test edi, edi
jmp 0x86a579
mov eax, dword [ebp + 0xc]
jmp 0x90205d
ja 0x92fec2
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0x88395c
movzx ecx, word [eax + edi]
mov dx, bp
not edx
lea edx, [ebx + 1]
jmp 0xdd5e42
jne 0x88a3c2
mov eax, dword [edx + 0x78]
cmp eax, 0x520d2f30
mov dword [ebp - 4], eax
cmp ecx, 0x73814400
test eax, eax
jmp 0x81af13
je 0xda3467
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
neg esi
sub edx, edx
xor esi, 0x2450150d
sub ebx, eax
mov edi, edi
mov eax, 0x3fd41811
not cl
cmc
mov cl, dl
rol esi, 0xa1
btr si, 0xbc
rol eax, cl
bsr esi, ecx
lea esi, [ebp + edx - 0x114]
add al, dl
xor al, byte [ebx + esi]
jmp 0x8278d0
jb 0xdb4be4
lea eax, [ebp - 0x114]
jmp 0x94aded
push ebp
ror bp, 0xd3
bsf bp, di
xor ebp, 0x551d1284
mov ebp, esp
cmc
lea esp, [esp - 0x114]
jmp 0xda069b
dec ebx
add edx, edi
mov dword [ebp + 8], 0
clc
cmp esp, edx
mov dword [ebp - 0xc], edx
cmc
test ebx, ebx
jmp 0xd0fa6d
jle 0x905131
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0x94389b
mov ecx, esi
cmp dx, sp
clc
sub ecx, eax
cmc
cmp bl, bl
clc
cmp ecx, 0x104
jmp 0x953c5a
je 0x911d89
cmp eax, 1
jne 0xd12747
inc esi
mov dword [ebp + 8], esi
jmp 0x9385e7
push ecx
push eax
call fcn.00dc4dbe
add esp, 0xc
mov di, sp
jmp 0x953451
mov dword [ebp - 8], ecx
jmp 0xd7950c
push edx
jmp 0x8ca18f