Function at 0xe5f08f
Capabilities:
Parse pe header

Disassembly:
ja 0xdd56ad
movsx ecx, cl
lea edx, [edx + edx*4]
cmc
cmp esi, eax
stc
lea edx, [ecx + edx*2 - 0x30]
adc cl, 0xc8
mov cl, byte [esi]
test ebx, edi
cmc
cmp bl, 0x17
test cl, cl
jmp 0xdd56a7
pop ebp
ret
je 0xa91f8b
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
bt esi, ebx
sub edx, edx
sub ebx, eax
clc
mov edi, edi
cmovp esi, edi
rcl cl, 0x50
cwde
mov eax, 0x56df7f05
setle cl
mov cl, dl
rol eax, cl
movsx esi, bx
lea esi, [ebp + edx - 0x114]
clc
add al, dl
clc
jmp 0xda0683
ret
jmp 0xe69590
je 0xe0e81c
mov cl, byte [esi + 1]
inc esi
stc
test si, 0x1958
test cl, cl
jmp 0xe31b6d
je 0xe81e57
mov byte [ebx + eax], dl
mov dl, 0x2a
bswap edx
cwd
mov edx, dword [ebp + 8]
inc edx
jmp 0xa9f3c8
jne 0xe6d31d
mov eax, dword [edx + 0x78]
clc
stc
mov dword [ebp - 4], eax
test eax, eax
je 0xe6d31d
mov edx, dword [edx + 0x7c]
clc
push ebx
push esi
test bl, 0xe
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
test di, cx
cmp ecx, 0xffff
jmp 0xda170d
push eax
call fcn.00e5f08f
add esp, 0xc
not esi
setae bl
movzx ebx, bx
pop esi
pop ebx
xchg edi, edi
pop edi
mov esp, ebp
cmovne ebp, ebp
pop ebp
ret
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
call eax
pop esi
xchg di, bx
mov ebx, ebx
movsx edi, bp
pop ebx
bswap edi
not edi
movsx edi, bp
pop edi
mov esp, ebp
mov bp, di
cmovg bp, ax
xchg ebp, ebp
pop ebp
jmp 0xa6c339
je 0xe6d31d
mov eax, 0x5a4d
cmc
cmp word [edi], ax
jmp 0xe6d317
ret
je 0xe31b73
cmp eax, edi
jmp 0xe4088e
je 0xe6958d
test eax, eax
jmp 0xfdf3b0
je 0xe695a0
mov edx, dword [eax + edi + 0x20]
jmp 0x99b9bf
ret
dec ebx
cmp esi, ebx
lea edx, [edx + edi]
test sp, 0x440
cmp bl, al
mov dword [ebp + 8], 0
clc
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0xe90bef
ret
jae 0xe31b73
mov ecx, dword [eax + edi + 0x1c]
test eax, edx
shld edx, ebx, 0x49
lea edx, [ecx + esi*4]
bts cx, sp
mov ecx, dword [edx + edi]
cmp esi, ecx
stc
test ecx, ecx
jmp 0xd9917c
pop esi
setg ah
pop ebx
bswap ax
mov ax, sp
cmovbe eax, eax
lea eax, [ecx + edi]
pop edi
mov esp, ebp
pop ebp
jmp 0x99c253
ret
je 0xe6d31d
mov ecx, dword [ebp + 0xc]
test si, bx
cmc
test ecx, ecx
jmp 0x971622
mov eax, dword [ebp + 0xc]
jmp 0xd9dddb
inc eax
mov dword [ebp + 8], edx
cmp edx, ecx
jmp 0xe81e51
jne 0xe69590
inc esi
mov dword [ebp + 8], esi
jmp 0xe69590
jae 0xe31b73
mov dword [ebp + 8], 0
cmp ax, bp
test ecx, ecx
jbe 0xe81e57
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0x95b64d
cmp ecx, dword [eax + edi + 0x14]
jae 0xe31b73
mov edx, dword [eax + edi + 0x1c]
cmp dl, 0x17
clc
test ebp, ebx
lea ecx, [edx + ecx*4]
cmp ax, dx
mov ecx, dword [ecx + edi]
cmp bp, sp
test ecx, ecx
jmp 0xe07c8b
je 0xe31b73
cmp ecx, eax
jmp 0xddcaad
push eax
lahf
movzx ax, bl
push edi
movsx eax, di
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
call eax
pop esi
mov ebx, esi
cmovb edi, eax
pop ebx
pop edi
jmp 0xda3949
xor al, byte [ebx + esi]
jmp 0xe75b1c
ja 0xdda40b
sub ecx, dword [eax + edi + 0x10]
jmp 0xd96064
push edx
jmp 0x96532b
mov esp, ebp
not ebp
pop ebp
ret
push ecx
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_1]
jmp 0xffdce2
mov ecx, dword [ebp + 0xc]
cmc
setno dl
cmovae edx, esi
mov edx, dword [ebp - 0xc]
sar si, 0x9a
or esi, edi
mov eax, dword [ebp + 8]
cmp bp, di
lea esi, [ebx + eax]
cbw
not al
shrd eax, edx, 0xe2
mov eax, dword [ebp + 0x10]
cmc
push eax
adc ah, 0x2a
adc ax, sp
sar esi, 1
rcl eax, 0xb5
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0xe21419
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jmp 0x962db3
jne 0xdf02f9
push 0
jmp 0xda31cd
mov ebx, dword [eax + edi + 0x18]
clc
test ebx, ebx
jmp 0x98f349
jb 0xa64401
mov edx, dword [ebp - 0x10]
cmc
lea edx, [edx + eax]
test bx, di
clc
cmp ecx, edx
jmp 0xde1a5c
jae 0xa64401
lea eax, [ecx + edi]
or cl, 0x59
neg cl
shl cl, cl
mov cl, byte [eax]
shrd si, si, 0x20
btr si, bp
mov esi, eax
test cl, cl
jmp 0xe2ac46
je 0xdd56ad
mov bl, cl
sub bl, 0x30
inc esi
cmp bl, 9
jmp 0x8bcc46
call fcn.00e5f08f
add esp, 0xc
movzx ebx, si
pop esi
pop ebx
cmovae di, bx
movsx edi, ax
pop edi
jmp 0xfed50d
mov dword [ebp + 8], edx
jmp 0x92fea6
jne 0xd99182
pop esi
sub ebx, ebp
pop ebx
xor eax, eax
bswap edi
not edi
pop edi
jmp 0xe0d2b4
mov esp, ebp
cmovno bp, bp
pop ebp
jmp 0x991d03
mov ecx, esi
test cx, si
sub ecx, eax
test ax, bx
cmp cx, sp
cmp ah, 0x9c
cmp ecx, 0x104
jmp 0xaa9e90
mov esp, ebp
xchg bp, bp
cmovl ebp, esi
pop ebp
jmp 0x972ce9
call fcn.00aaa86b
lea esp, [esp + 4]
stc
cmp di, bx
cmp eax, 0xffffffff
jmp 0x98b0c3
je 0xe31b73
mov edi, edi
test sp, 0x2b83
cmp cl, 0x2e
jmp 0x93844a
mov esp, ebp
pop ebp
jmp 0x92f8a5
jne 0xe2ac53
pop esi
sal ebx, 0x93
pop ebx
xor eax, eax
pop edi
jmp 0xe10245
lea eax, [edx + esi*2]
movsx dx, bh
jmp 0xe7fef6
jne 0xfe5d85
cmp byte [ebp + 0x10], 0
jmp 0x92d0ec
mov cl, byte [esi + 2]
cmc
test dx, 0x5824
test di, cx
add esi, 2
stc
cmp dl, 0x61
sub edx, edx
test cl, cl
jmp 0xdf02f3
mov dword [ebp - 8], ecx
jmp 0xe050df
push ebp
rcl bp, 0xcc
shld bp, bp, 0x55
mov ebp, esp
cmc
clc
lea esp, [esp - 0x114]
stc
push edi
dec edi
cmp eax, 0x7b190282
add di, 0x795e
mov edi, dword [ebp + 8]
test ax, bp
cmp esi, ebp
test edi, edi
jmp 0xa77fe0
call eax
test eax, eax
jmp 0x9732f6
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jle 0xdc53aa
mov eax, dword [ebp - 4]
dec esi
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0xa62e43
je 0xdcb54c
xor eax, eax
movsx edi, ax
bswap di
pop edi
jmp 0xe2ad90
mov byte [esi], al
je 0xe75b36
inc edx
test si, 0x7e39
cmp edx, 0x104
jb 0x92d10c
lea eax, [ebp - 0x114]
push eax
push edi
lahf
jmp 0x96740a
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
cbw
cwde
jmp 0xe3c9fb
push eax
jmp 0xe04f85
movzx ecx, word [eax + edi]
cdq
not dh
lea edx, [ebx + 1]
jmp 0xe5e783
jb 0xaa9eb0
mov eax, dword [ebp + 8]
mov cx, sp
movsx ecx, bp
movsx cx, ch
lea ecx, [ebp - 0x114]
jmp 0xdbc5f8
jl 0xe695a0
jmp 0xdc53bd
je 0xe769ae
cmp eax, 1
jmp 0xa9f4bf
cmp byte [esi + 1], 0x23
movzx cx, bh
cmovp cx, cx
movsx cx, bh
lea ecx, [esi + 1]
je 0xe56127
push 0
push ecx
jmp 0xe7c405
mov esp, ebp
jmp 0x92b870
call eax
test eax, eax
jne 0x9732fc
lea edx, [ebp - 0x114]
not ax
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_1]
jmp 0xe6616d