Function at 0xfef371
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lcall 0xe4e8, 0x8714e54a
invalid
test ecx, ecx
call 0x101f4ce
fld qword [edi - 0x37]
pop ecx
cmp bl, cl
jle 0xfef367
push 0xfffffffffffffff8
lahf
push 0xffffffffffffffdc
or esp, dword [edx - reloc.kernel32.dll_VirtualAlloc]
mov ax, 0x2e04
jmp 0x101d0fc
push bp
jmp 0x101acbc
sub esp, 0x1b
call 0x1019b4a
or ch, cl
pop dword [eax]
add byte [eax], al
lea esp, [esp + 0x20]
mov dl, byte [eax]
push ax
stc
pushal
jmp 0x1019bfc
pop dword [esp + 0xd]
lea esp, [esp + 2]
jmp 0x1019c30
jne 0x1019b15
call fcn.01019c41
dec esi
lds edx, [ebp + 0x3c]
iretd
lea esp, [esp + 0x1c]
cmp dl, byte [ecx]
push si
mov byte [esp], dh
lea esp, [esp + 2]
jmp 0x1019c1a
movzx ecx, byte [ecx]
call fcn.0101ac6e
jmp 0x101acdf
push eax
mov dword [esp], ecx
lea esp, [esp + 2]
movzx eax, byte [eax]
jmp 0x101ac85
mov al, byte [edx]
mov byte [ecx], al
call fcn.0101acc9
mov eax, dword [esp + 8]
cmc
jmp 0x101ad42
lea esp, [esp + 4]
jne 0x101ac8d
je 0x101ad65
nop
sbb eax, 0x9527d48d
in al, dx
inc esi
jno 0x101ad42
dec dword [esp + 8]
dec esp
and al, 8
test eax, eax
push ecx
mov dword [esp], ebx
jmp 0x101ad2c
pop esi
ret
mov eax, esi
pushfd
push dword [esp + 1]
lea esp, [esp + 8]
jmp 0x101ad4e
push bx
lea esp, [esp + 2]
jmp 0x101cfa6
pushal
pop dword [esp]
mov eax, dword [eax + 0x7c]
pushal
pop dword [esp + 0x10]
call fcn.0101cf90
salc
pop ecx
leave
test al, 0x5b
out dx, eax
cmp byte [ebx], bl
jb 0x101ae05
jl 0x101ade9
mov edx, dword [ebp - 4]
lea esp, [esp + 0x20]
jne 0x1019b41
je 0x1019b15
jmp 0x101d000
imul eax, dword [ebx], reloc.kernel32.dll_VirtualAlloc
lea ecx, [ebp*4]
mov cx, dx
jmp 0x101f561
add dl, cl
leave
cmpsb byte [esi], byte es:[edi]
mov ah, 0x6f
push es
xor eax, 0xc1af6460
or esi, dword [ecx]
test byte [edi + ebx*4], cl
out 0x11, al
jmp 0x101ae5e
je 0x101aee4
sub esp, 8
mov dword [esp + 1], ebp
lea esp, [esp + 8]
jmp 0x101d344
xor esi, esi
call 0x101e3fb
mov ah, byte [0xc51ac754]
inc esp
fisubr word [edx - 8]
mov esp, 0x85796e18
sal byte [ebp + 0x36], 0xeb
push ds
cmp dword [ebp - 4], ebx
jmp 0x101ae1a
cmp dword [ebp - 4], ebx
jmp 0x101d392
pushfd
jmp 0x101d368
mov edi, dword [ebp - 8]
jmp 0x101ae42
mov eax, dword [ebp - 4]
sub esp, 0x14
jmp 0x101d317
sete dl
mov dl, cl
lea esp, [esp + 2]
jmp 0x101d038
and dword [ebp - 0xc], 0
btc edx, esi
add eax, ecx
push cx
jmp 0x101cf6b
push esi
mov esi, dword [eax + 0x78]
pushal
add esi, ecx
jmp 0x101ad7d
rcl ah, cl
xor eax, eax
jmp fcn.0101ae02
and dword [ebp - 4], 0
jmp 0x101d05f
mov edx, 0x10b
cmp word [eax + 0x18], dx
je 0x101ad72
jne 0x101cff7
mov ebx, dword [esi + 0x18]
call fcn.0101d067
push esi
rol dword [eax + reloc.kernel32.dll_VirtualAlloc], 0xad
jb 0x101d0b8
imul edi, esi, 0xc103fa11
add eax, ecx
push ebx
setg bl
jmp 0x101d049
mov ecx, dword [ebp + 8]
mov dh, 0x99
mov ah, byte [esp]
mov eax, dword [ecx + 0x3c]
jmp 0x101cf83
push esi
jmp 0x101d0d2
and al, 1
jmp 0x101d096
neg ah
sbb al, cl
not eax
jmp 0x101d0df
mov esi, ebp
add esi, 0xfffffff0
mov dword [esi], eax
pop esi
jmp 0x101d0bc
mov eax, dword [esi + 0x1c]
stc
call fcn.0101d3aa
lodsb al, byte [esi]
push ds
inc eax
pushfd
pop eax
xchg ebp, eax
jmp 0x14804b55
mov ebp, esp
xchg cx, ax
sub esp, 0x18
adc ax, sp
jmp 0x101d086
mov edi, eax
lea edx, [eax + ebx]
neg al
mov edx, 0x5913455d
call fcn.0101d182
sub eax, edx
mov edi, 0xbbe9c938
mov di, ax
not edi
lea edi, [edx + ebx]
jmp 0x101d19d
lea esp, [esp + 0x14]
cdq
mov edi, esi
mov edi, ebp
mov di, dx
jmp 0x101d1cc
bsr edi, ecx
mov edi, 0x17a2e6eb
add eax, ebx
neg edx
jmp 0x101d244
test eax, eax
jle 0x101aece
jg 0x101d37e
adc bh, ch
imul esi, dword [ebp - reloc.kernel32.dll_VirtualAlloc], 0xfffffffc
and dword [esi - 0x29], ecx
jle 0x101d37f
pop edx
mov ch, 0xa4
add ecx, esi
cmp eax, ecx
call fcn.0101d33e
lea esp, [esp + 4]
inc edi
push ebp
jmp 0x101d386
lea ebx, [edi - 1]
jmp 0x101ae7c
pop edi
invalid
mov dword [ebp - 4], edi
lea esp, [esp + 4]
jmp 0x101ae7c
jle 0x101aefa
jmp 0x101aee4
movzx ecx, word [eax + 0x14]
lea eax, [eax + ecx + 0x18]
ret