Function at 0x67026ada
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop esi
pop ebx
xchg di, di
pop edi
jmp 0x66fc16a4
je 0x67135221
sub eax, eax
mov di, 0x595c
pop edi
jmp 0x66fc4d1b
jb 0x66ee3da7
mov edx, dword [ebp - 0x10]
add edx, eax
cmp ecx, edx
jmp 0x66edd7d0
call eax
test eax, eax
jne 0x66fe9dd1
lea edx, [ebp - 0x114]
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
test eax, eax
jmp 0x66fe9dcb
mov edx, dword [ecx + edi + 0x24]
bswap ecx
lea eax, [edx + esi*2]
movzx dx, ch
not edx
cdq
movzx ecx, word [eax + edi]
movsx dx, ah
not dh
movsx edx, cx
lea edx, [ebx + 1]
jmp 0x66f03a87
ret
mov ecx, esi
sub ecx, eax
cmp ecx, 0x104
jmp 0x66a9382c
jne 0x6713854b
pop esi
not edi
pop ebx
xor eax, eax
pop edi
jmp 0x66f90153
push eax
cwde
mov ah, 0x6b
movzx ax, ah
push edi
bswap ax
movzx eax, si
movzx ax, ah
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
xchg di, di
pop ebx
movzx edi, sp
pop edi
jmp 0x66fd1528
je 0x66fcaa1d
cmp eax, 1
jmp 0x66f40f25
push eax
jmp 0x671391ff
jae 0x66f81bf9
mov dword [ebp + 8], 0
cmp bx, bp
test cx, 0x6265
test ecx, ecx
jmp 0x6713e03c
jae 0x66f81bf9
mov ecx, dword [eax + edi + 0x1c]
btc edx, esp
not dh
clc
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
cmp esp, esi
test ch, 0x12
test ecx, ecx
jmp 0x67138545
pop ebp
jmp 0x6702d5bb
ret
je 0x670297a0
test eax, eax
jmp 0x66a90e38
mov esp, ebp
movsx ebp, si
bswap ebp
xchg ebp, ebp
pop ebp
jmp 0x66f27893
je 0x67142c6f
mov ebx, dword [ebp + 0xc]
mov si, 0x60ef
dec si
lea eax, [ebp - 0x114]
and si, 0xbac
sub edx, edx
and si, si
sub ebx, eax
ror eax, cl
stc
btc eax, edx
mov edi, edi
rcr si, 0xe3
rcl eax, 0xa7
mov eax, 0x68f46695
mov cl, dl
ror si, 0x45
btc esi, ecx
movzx esi, di
rol eax, cl
cmovnp esi, ebx
lea esi, [ebp + edx - 0x114]
add al, dl
jmp 0x6716ba27
mov cl, byte [esi + 2]
jmp 0x6702ead8
inc eax
mov dword [ebp + 8], edx
cmp di, 0x4505
test si, 0x260d
cmp edx, ecx
jmp 0x66f5ac59
mov dword [ebp + 8], edx
jmp 0x67140222
jae 0x66ee3da7
lea eax, [ecx + edi]
mov cl, byte [eax]
clc
mov esi, eax
test cl, cl
jmp 0x66f0bd40
call fcn.67026ada
add esp, 0xc
movzx esi, cx
jmp 0x66950322
pop esi
not bl
cbw
pop ebx
movsx ax, bl
not ah
lea eax, [ecx + edi]
mov edi, 0x70072489
xchg edi, edi
pop edi
mov esp, ebp
movzx ebp, bx
mov bp, di
mov bp, 0x6351
pop ebp
jmp 0x66a6af33
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x67146991
mov dword [ebp - 8], ecx
jmp 0x66eb6ed2
jne 0x6702eaf3
push 0
jmp 0x670270fa
jle 0x66f1506d
mov eax, dword [ebp - 4]
rol si, 0x3f
shr si, 0x2d
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0x66aa9a56
je 0x66f81bf9
mov edi, edi
cmp cl, 0x2e
jmp 0x66f1cb34
mov ebx, dword [eax + edi + 0x18]
cmp esi, 0xbec5322
jmp 0x67146fc3
inc edx
jmp 0x66ea929d
mov ecx, dword [ebp + 0xc]
shl dl, cl
btr eax, esp
mov edx, dword [ebp - 0xc]
movsx eax, sp
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
shr al, 0xb6
and ah, cl
mov eax, dword [ebp + 0x10]
stc
cmp edi, esi
push eax
xor ah, 0x9f
neg ah
shrd eax, edi, 0x1d
sar esi, 1
xadd ah, al
shld ax, di, 0xc
mov eax, dword [edx + esi*4]
cmp dl, 0x53
add eax, edi
call fcn.66a6ee78
lea esp, [esp + 4]
stc
cmp edx, 0x2e550d18
cmp eax, 0xffffffff
jmp 0x66ac93be
je 0x66a6eb49
mov cl, byte [esi + 1]
jmp 0x66f53018
call eax
pop esi
movzx bx, cl
not bx
pop ebx
pop edi
jmp 0x670271e1
ret
jb 0x66e95470
lea eax, [ebp - 0x114]
jmp 0x66a90133
ret
je 0x66a59935
mov edx, dword [edx + 0x7c]
cmc
clc
push ebx
push esi
test ax, 0x17ee
or esi, 0xffffffff
cmp si, ax
jmp 0x6716f8cf
jne 0x670297a3
inc esi
mov dword [ebp + 8], esi
jmp 0x670297a3
inc esi
test cl, cl
jmp 0x66f81bf3
jae 0x66f81bf9
mov edx, dword [eax + edi + 0x1c]
clc
cmc
lea ecx, [edx + ecx*4]
jmp 0x671468e8
jb 0x6713e04f
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
jmp 0x66fd7716
push eax
jmp 0x66edfecd
jne 0x66f0bd48
pop esi
setbe bl
pop ebx
xor edi, ebp
cmc
xor eax, eax
pop edi
jmp 0x66fcbe43
je 0x66a59935
mov ecx, dword [ebp + 0xc]
jmp 0x67146a35
inc esi
stc
cmp bl, 9
ja 0x66f08c03
movsx ecx, cl
cmp si, di
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
cmc
cmp cx, 0x8e7
test cl, cl
jmp 0x66f08bfd
mov esp, ebp
pop ebp
jmp 0x66abfd93
mov esp, ebp
movsx ebp, cx
jmp 0x66ab7cbd
jl 0x66f09964
jmp 0x66f1507b
mov esp, ebp
cmovne bp, bp
xchg ebp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
jmp 0x66a69522
mov esp, ebp
mov ebp, 0x23f4e57
pop ebp
jmp 0x671468e3
mov esp, ebp
cmovp bp, cx
pop ebp
jmp 0x66f3dccf
push ecx
jmp 0x6716b9e4
je 0x66f81bf9
cmp eax, edi
jmp 0x67036001
je 0x66f5ac5f
mov byte [ebx + eax], dl
cmove dx, bp
not edx
mov edx, dword [ebp + 8]
jmp 0x66f10821
push ebp
mov ebp, esp
sub esp, 0x114
cmp si, bx
push edi
sub edi, 0x5ba006e6
sbb edi, edi
mov edi, dword [ebp + 8]
test edi, edi
jmp 0x66f81d2b
push edx
jmp 0x66a92a97
mov esp, ebp
pop ebp
jmp 0x6714996b
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0x66f09950
ret
add esi, 2
cmp esi, 0x21dd5f43
test bx, ax
cmp ax, sp
xor edx, edx
cmp esp, ebx
test cl, cl
je 0x66f08c03
mov bl, cl
sub bl, 0x30
jmp 0x66f83ead
je 0x66a59935
mov eax, 0x5a4d
stc
cmp eax, 0x3a465261
cmp word [edi], ax
jmp 0x66a5992f
jne 0x66eeb6be
cmp byte [ebp + 0x10], 0
jmp 0x66e9543f
dec ebx
test ecx, 0x3bbc7353
cmp si, ax
cmp esp, 0x3ca0524a
add edx, edi
mov dword [ebp + 8], 0
cmp sp, 0x1603
mov dword [ebp - 0xc], edx
stc
clc
test ebx, ebx
jmp 0x66fc23fd
mov edx, dword [edi + 0x3c]
test sp, cx
test bp, 0x2750
cmc
lea edx, [edx + edi]
stc
clc
cmp dword [edx], 0x4550
jmp 0x6715809c
je 0x66f81bf9
cmp ecx, eax
jmp 0x66a5f90c
call fcn.67026ada
add esp, 0xc
pop esi
setle bl
pop ebx
not edi
jmp 0x6713d6a8
pop edi
jmp 0x66e906e3
jbe 0x66f5ac5f
lea ebx, [ebp - 0x114]
xchg dl, dl
shr dl, 0x4d
sub ebx, eax
mov dl, byte [eax]
test edi, ebp
cmc
test di, 0x2900
test dl, dl
jmp 0x6701a55c
jmp 0x670297a3
mov eax, dword [ebp + 0xc]
push eax
movzx eax, ax
bswap eax
not al
push edi
setae al
not al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x66f25d61
ret
mov ecx, dword [ecx + edi]
test di, 0x3e09
test bp, bx
test ecx, ecx
jmp 0x66a7a3df
je 0x66e990dd
push 0
push ecx
jmp 0x66f6d5d4
test ecx, ecx
jmp 0x6703349d
test ebx, ebx
je 0x66f09964
mov edx, dword [eax + edi + 0x20]
jmp 0x6703b413
ret
ja 0x66f0dc14
sub ecx, dword [eax + edi + 0x10]
stc
cmp ecx, dword [eax + edi + 0x14]
jmp 0x66f53ac6
jne 0x66a59935
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
cmc
cmp bp, 0x3a1f
test eax, eax
jmp 0x66f3df41
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x66a64fb0
xor al, byte [ebx + esi]
mov byte [esi], al
je 0x66f28b87
inc edx
cmp edx, 0x104
jmp 0x66f28b81
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
test ebx, ebx
cmp ecx, 0xffff
jmp 0x6714d487