Function at 0xf4fbff
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov edi, dword [edx + ecx + 0x18]
cmp eax, ebp
cmp esp, 0x2df754eb
test edi, edi
jmp 0x1030403
xor edx, edx
test cl, cl
je 0xf64f6c
lea eax, [ecx - 0x30]
jmp 0xf64f48
je 0xf258ae
inc eax
cmp esp, ebp
cmp eax, 0x104
jmp 0xf258a8
jne 0xebaf55
lea edx, [ebp - 0x114]
jmp 0xee1f07
mov esp, ebp
pop ebp
jmp 0xe805cd
je 0xf4f6b2
mov esi, dword [ebp + 0xc]
cmc
test esi, esi
jmp 0xf4ba8e
call fcn.00f22879
add esp, 4
test eax, eax
jns 0xf59135
lea edi, [esi - 1]
jmp 0xe68dfa
mov esp, ebp
cmovae bp, ax
movzx ebp, bp
pop ebp
ret
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
jmp 0xf16b28
jmp 0x1337732
je 0xf4f6b2
mov eax, dword [eax + ecx + 0x7c]
cmp ebx, eax
cmp bp, 0x4a1
push ebx
clc
push edi
mov dword [ebp - 0x10], eax
stc
mov dword [ebp - 8], 0xffffffff
cmp ax, 0xa1a
cmp esi, 0xffff
ja 0xe14bb5
mov eax, esi
cmc
sub eax, dword [edx + ecx + 0x10]
mov dword [ebp - 8], eax
jmp 0xecff2a
call fcn.00f4fbff
add esp, 0xc
pop edi
pop ebx
pop esi
jmp 0x1612b2d
ret
mov esp, ebp
jmp 0xe9feb5
push ecx
jmp 0xee3b78
jb 0xf64fe0
mov esi, dword [ebp - 0x10]
add esi, edx
test bx, 0x1b1b
stc
cmp eax, esi
jmp 0xf549c2
inc edi
jmp 0xf46147
mov eax, dword [ebp + 0xc]
jmp 0x161e2cb
call eax
mov edi, eax
test edi, edi
jmp 0xe3b244
inc esi
clc
cmc
test cl, cl
jmp 0x167a4d7
ret
call eax
pop edi
cmovae bx, bx
not bl
movzx esi, cx
pop ebx
not si
mov si, ax
pop esi
jmp 0xf77105
pop ebp
ret
je 0x167a4dd
mov edx, dword [ebp + 8]
stc
cmp edi, edx
jne 0x16800b4
cmp byte [ebp + 0x10], 0
jmp 0xf8133b
mov eax, dword [ebp - 0xc]
xor edx, 0x5f2e0772
mov esi, ebx
mov edx, dword [ebp + 0x10]
mov esi, 0x3e1036c4
xor esi, esi
mov si, di
lea esi, [edi + ebx]
jmp 0xf5f4f0
ret
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + eax + 0x24]
lea ecx, [edx + esi*2]
shrd dx, si, 0x79
movzx edx, word [ecx + eax]
mov dword [ebp - 8], edx
mov ecx, eax
mov edx, dword [ebp - 4]
ror ax, cl
cmova ax, dx
mov eax, dword [ebp - 8]
test esp, edx
clc
cmp eax, dword [edx + ecx + 0x14]
jmp 0x166c3a9
cmp ebx, edi
jle 0xec25f3
jmp 0xecff20
push edx
movsx eax, di
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_1]
jmp 0xf50b10
push edi
jmp 0xef49fc
test dl, dl
jmp 0xef6f4c
jb 0xf7dc5c
lea ecx, [ebp - 0x114]
lahf
push ecx
cbw
not eax
mov al, 0x3a
mov byte [ebp + edi - 0x114], 0
mov eax, 0x72436f9f
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_1]
jmp 0xe9a498
call fcn.00f4fbff
add esp, 0xc
not si
movzx edi, sp
pop edi
pop ebx
mov esi, edi
xchg esi, esi
not esi
pop esi
jmp 0xe3ec3c
je 0xef0a09
mov byte [ebx + eax], dl
jmp 0xe8ea5e
call eax
pop edi
mov si, 0x128
pop ebx
mov si, 0x44c9
pop esi
jmp 0xf443c9
mov esp, ebp
not ebp
pop ebp
ret
jb 0xf81368
lea eax, [ebp - 0x114]
jmp 0xf6d51f
mov esp, ebp
pop ebp
jmp 0xec3ceb
inc eax
cmc
clc
cmp edi, ecx
jmp 0xef0a03
je 0x167a4dd
cmp eax, edx
jmp 0xe8b3ab
je 0xf4f6b2
mov eax, 0x5a4d
cmp word [ecx], ax
jmp 0xf4f6ac
lea esp, [esp - 0x114]
push esi
test ecx, ecx
jmp 0xe47ad9
jae 0x167a4dd
sub edi, edi
test ecx, ecx
jmp 0xf7dc4a
je 0x133dd6c
xor eax, eax
mov si, 0x503f
movzx esi, di
pop esi
jmp 0xe805eb
push ebp
mov ebp, esp
mov ecx, dword [ebp + 8]
jmp 0xf4ec89
call eax
mov edi, eax
cmp sp, cx
cmc
test edi, edi
jmp 0xebaf4f
sub ecx, eax
test cx, ax
cmp cl, 0xaa
cmp ecx, 0x104
jmp 0xf4f536
jae 0xf64fe0
add eax, ecx
test dx, bp
test esi, 0x5e357513
mov cl, byte [eax]
bts si, cx
test si, dx
xor si, 0x4eb9
mov esi, eax
cmp ecx, ebx
cmc
test cl, cl
jmp 0x133825c
jle 0xecff05
lea ebx, [esi + 1]
jmp 0x1337732
sar esi, 1
mov eax, dword [eax + esi*4]
test bp, cx
push edx
mov edx, dword [ebp + 0xc]
add eax, ecx
jmp 0xe4901d
inc esi
cmp al, 9
ja 0xf64f6c
movsx eax, cl
ror cl, 0x42
mov cl, byte [esi]
lea edx, [edx + edx*4]
test cl, 0xab
lea edx, [eax + edx*2 - 0x30]
clc
test cl, cl
jne 0xe19be2
push 0
jmp 0x104b5e8
mov cl, byte [esi + 2]
lea esi, [esi + 2]
test di, ax
jmp 0xe19bd8
pop edi
pop ebx
not si
dec si
add eax, ecx
movsx esi, si
pop esi
jmp 0xf250b6
push eax
movsx eax, bx
not al
nop
push edx
mov ax, di
jmp 0xe55baf
mov esp, ebp
mov ebp, 0x4ae4323
movsx ebp, bx
pop ebp
jmp 0xe9d213
je 0xef0a09
lea ebx, [ebp - 0x114]
add dl, cl
sub ebx, eax
rcr dl, cl
mov dl, byte [eax]
jmp 0xee400e
je 0xe93a5d
mov edi, dword [ebp + 0xc]
dec ecx
movzx ebx, cx
lea ecx, [ebp - 0x114]
shl bl, cl
adc si, di
xor eax, eax
mov si, dx
sub edi, ecx
clc
rcr bx, 0xce
rcl ebx, cl
lea esp, [esp]
mov cl, al
xchg si, bx
mov bh, dl
mov ebx, 0x14d06f88
rol ebx, cl
lea esi, [ebp + eax - 0x114]
sets ch
test ebx, ecx
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
jmp 0x103cf60
mov ecx, esi
jmp 0xf53d0a
push edi
jmp 0xe7bf62
je 0xecff2a
mov eax, dword [edx + ecx + 0x20]
clc
add eax, ecx
sub ebx, ebx
jmp 0x166f3b2
jne 0xf4f6b2
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
cmp cx, bp
test edx, edx
jmp 0xe78362
mov byte [esi], cl
jmp 0xe28c5e
push edx
jmp 0xf99505
je 0xf64f7e
push 0
jmp 0xe811c1
mov ecx, dword [ebp + 8]
jmp 0xedf235
je 0x167a4dd
cmp cl, 0x2e
je 0xf894ce
mov cl, byte [esi + 1]
jmp 0xe9cbb8
mov eax, dword [ecx + 0x3c]
test eax, ebp
cmc
cmp dx, bp
cmp dword [eax + ecx], 0x4550
jmp 0x103b763
mov esp, ebp
pop ebp
ret
push eax
cbw
push edx
cbw
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
jmp 0xe9dc19
jae 0x167a4dd
mov esi, dword [edx + ecx + 0x1c]
stc
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
cmp cx, 0x724b
stc
test eax, eax
jmp 0xf4b6eb
dec edi
mov dword [ebp - 0xc], eax
jmp 0x1675b1f
js 0xecff2a
jmp 0xec25fe
jne 0x1338262
pop edi
pop ebx
shld esi, eax, 0x73
sub eax, eax
movzx esi, ax
pop esi
jmp 0xe54c5a
cmp byte [esi + 1], 0x23
cmovne ecx, ecx
not ch
lea ecx, [esi + 1]
jmp 0x1333466