Function at 0xce3b82
Capabilities:
Parse pe header

Disassembly:
mov byte [ebp + eax - 0x114], 0
lahf
not al
cbw
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x8778de
sub bl, 0x30
jmp 0xc25f39
jb 0xd395a8
lea eax, [ebp - 0x114]
jmp 0xc350b9
call eax
test eax, eax
jmp 0x8b0161
push esi
test dl, 0x47
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp si, ax
cmp ecx, 0xffff
jmp 0xd020c9
jne 0x8c76c5
mov eax, dword [edx + 0x78]
cmp dx, si
mov dword [ebp - 4], eax
cmc
test ebp, 0x79511018
test eax, eax
jmp 0xd513d9
pop esi
movsx ebx, bx
mov eax, 0x6e354896
cmovbe ax, bp
pop ebx
setae al
lea eax, [ecx + edi]
pop edi
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0xd1e85b
jne 0xc5e952
lea edx, [ebp - 0x114]
xchg ah, ah
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xcea9e5
lea ecx, [esi + 1]
jmp 0xcefcd5
je 0xd5056b
xor eax, eax
movsx edi, di
cmovne di, bp
jmp 0x8d440b
test ecx, ecx
jbe 0xc80ea2
lea ebx, [ebp - 0x114]
rcl dl, cl
sub ebx, eax
clc
ror dl, 0x12
mov dl, byte [eax]
jmp 0xd137e2
ret
pop edi
jmp 0xc4e2eb
push eax
lahf
push edi
cmovno eax, ebx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xce52f7
mov dword [ebp + 8], edx
jmp 0xcc8da3
ret
inc esi
test cl, cl
jmp 0xc18a44
ret
call fcn.00d12e73
lea esp, [esp + 4]
jmp 0xce7cb6
mov ecx, dword [ebp - 4]
cwd
movzx edx, dx
cmove ax, dx
mov edx, dword [ecx + edi + 0x24]
bswap eax
movsx eax, ax
lea eax, [edx + esi*2]
movsx edx, bp
movzx ecx, word [eax + edi]
xchg edx, edx
lea edx, [ebx + 1]
jmp 0xce52cb
push ecx
jmp 0x869924
mov esp, ebp
mov bp, 0x1f44
pop ebp
ret
jne 0xc77345
pop esi
not edi
btr bx, 0xc7
cmc
pop ebx
sal edi, 0x13
xor eax, eax
movsx edi, dx
not di
pop edi
jmp 0xc962a5
inc esi
jmp 0xd45538
jae 0xc18a4a
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
mov ch, 9
and cx, si
sar ecx, 0x81
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0xc44f1b
push eax
cmovno ax, dx
movsx eax, si
jmp 0xd227c1
mov esp, ebp
mov bp, bp
pop ebp
jmp 0xd3f209
ret
je 0xc18a4a
cmp ecx, eax
jmp 0xc827f0
mov esp, ebp
pop ebp
jmp 0xc3fbeb
jmp 0xd135e7
mov cl, byte [esi + 2]
add esi, 2
xor edx, edx
cmp bx, di
cmc
test cl, cl
jmp 0xdd53ba
je 0xc18a4a
cmp eax, edi
jmp 0xd3d15d
mov ecx, dword [ebp + 0xc]
not ax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
and esi, esp
lea esi, [ebx + eax]
shl ah, 0x7f
mov eax, esi
mov eax, dword [ebp + 0x10]
clc
cmc
push eax
shrd eax, edx, 0x36
test bx, 0x6162
rcl al, cl
sar esi, 1
btc eax, 0x79
shr ax, cl
btr ax, 0xf1
mov eax, dword [edx + esi*4]
cmp esi, ebp
cmc
add eax, edi
jmp 0x8efedd
je 0xd513ee
mov cl, byte [esi + 1]
jmp 0x8e7f26
jae 0x8a0f23
lea eax, [ecx + edi]
shr cl, cl
mov si, 0x790a
mov cl, byte [eax]
mov si, 0x1b
mov esi, eax
cmp ch, 0xf4
cmp sp, cx
test cl, cl
je 0xc18a4a
mov edi, edi
cmp eax, esp
stc
cmp cl, 0x2e
jmp 0xc756f2
inc eax
test esi, ebx
cmp sp, 0x4b5b
mov dword [ebp + 8], edx
clc
stc
cmp edx, ecx
jb 0x8c9fa4
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
jmp 0xc153e5
jb 0x8a0f23
mov edx, dword [ebp - 0x10]
add edx, eax
cmp ecx, edx
jmp 0xc7731b
dec ebx
cmp esp, edx
lea edx, [edx + edi]
clc
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
stc
cmc
cmp al, 0xd2
test ebx, ebx
jl 0xca6daf
jmp 0xc69f72
mov esp, ebp
movzx ebp, di
pop ebp
jmp 0x8e97bb
mov esp, ebp
xchg bp, bp
pop ebp
jmp 0x8ce9cf
push ecx
jmp 0xd4ac61
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0xdae10a
je 0x86c17d
inc edx
cmp si, 0x1e95
test sp, 0x21b0
cmp dx, cx
cmp edx, 0x104
jmp 0x86c177
jle 0xc69f69
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmc
cmp ebx, esp
cmp esi, dword [eax + edi + 0x14]
jmp 0xc26202
jmp 0xd135e7
call fcn.00ce3b82
add esp, 0xc
pop esi
pop ebx
bswap edi
mov edi, 0x1c2f6299
pop edi
jmp 0xc38c45
jae 0xc18a4a
mov edx, dword [eax + edi + 0x1c]
clc
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
stc
test ecx, ecx
jmp 0xd42cde
push ebp
adc ebp, 0x55b676c3
mov ebp, esp
clc
lea esp, [esp - 0x114]
push edi
mov edi, dword [ebp + 8]
test edi, edi
jmp 0xdcd2fe
mov dword [ebp - 8], ecx
jmp 0x8e4093
call eax
pop esi
cmovl ebx, edx
pop ebx
pop edi
jmp 0xc9bd55
mov byte [esi], al
jmp 0xc9cebf
cmp eax, 0xffffffff
jmp 0xd5baa2
call eax
test eax, eax
jmp 0xc5e94c
je 0xc52643
push 0
jmp 0xc9c61b
push eax
jmp 0xccf6ab
ret
mov esp, ebp
xchg bp, bp
pop ebp
jmp 0xcfb3ef
ja 0xc9c693
sub ecx, dword [eax + edi + 0x10]
cmp bh, 0x2e
cmp ecx, dword [eax + edi + 0x14]
jmp 0xce0dc2
jne 0xd135e7
inc esi
mov dword [ebp + 8], esi
jmp 0xc51b6b
lea ebx, [esi - 1]
stc
cmp dword [ebp + 8], ebx
jmp 0xca6da0
test dl, dl
jmp 0xdbe9c7
ja 0xd22319
movsx ecx, cl
cmc
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
cmp ax, si
test cl, cl
jmp 0xd22313
ret
call eax
pop esi
pop ebx
pop edi
jmp 0xc16be3
jne 0xdd53c0
push 0
push edx
jmp 0xcf22fe
push edi
movsx ax, bh
movzx eax, di
mov ah, 0x4f
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xd220ce
je 0x8c76c5
mov eax, 0x5a4d
stc
cmp sp, 0x1cdc
cmp word [edi], ax
jmp 0x8c76bf
je 0xde9c9a
mov ebx, dword [ebp + 0xc]
sub si, dx
stc
or eax, ecx
lea eax, [ebp - 0x114]
test edi, ebp
or esi, 0x1ce42532
xor edx, edx
or esi, 0x244d7490
sub ebx, eax
mov edi, edi
btc eax, 0xc5
mov eax, 0x58f117df
mov esi, ebx
mov cl, dl
rol eax, cl
stc
shrd si, cx, 0x98
lea esi, [ebp + edx - 0x114]
add al, dl
xor al, byte [ebx + esi]
jmp 0xce7c45
jne 0xdbab30
cmp byte [ebp + 0x10], 0
jmp 0xd3957b
ret
jne 0xc44f21
pop esi
cmc
movzx ebx, si
pop ebx
sub eax, eax
cmovbe di, di
jmp 0xdda6be
cmp bl, 9
jmp 0xd14d64
push eax
jmp 0xdb2c1f
mov edx, dword [edi + 0x3c]
add edx, edi
stc
cmp dword [edx], 0x4550
jmp 0x889cd5
je 0x8c76c5
mov edx, dword [edx + 0x7c]
test ecx, esi
cmp esi, esi
push ebx
cmp edx, edi
jmp 0x87d6d1
mov ecx, esi
sub ecx, eax
cmp esp, edx
cmp ecx, 0x104
jmp 0xddf68f
je 0x8f0225
cmp eax, 1
jmp 0xd0da22
je 0xd135e3
test eax, eax
jmp 0xd5b8a9
je 0xca6daf
mov edx, dword [eax + edi + 0x20]
jmp 0xc9278e
call fcn.00ce3b82
add esp, 0xc
pop esi
xchg edi, edi
mov bx, di
pop ebx
pop edi
mov esp, ebp
cmovle ebp, ebp
pop ebp
jmp 0x8e642b
cmp byte [esi + 1], 0x23
movsx ecx, sp
movsx cx, dh
jmp 0x8c158b
je 0xc80ea2
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
inc edx
jmp 0xc80e8d
je 0x8c76c5
mov ecx, dword [ebp + 0xc]
stc
clc
test ecx, ecx
jmp 0xd366c6
je 0xd22319
mov bl, cl
jmp 0x86b0e9
pop edi
jmp 0xcfe771
jae 0xc18a4a
mov dword [ebp + 8], 0
jmp 0x8c9f8e
mov eax, dword [ebp + 0xc]
jmp 0x8d60fc