Function at 0xfb4324
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
jne 0x12740b4
lea edx, [ebp - 0x114]
push edx
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA]
jmp 0xf15d46
je 0xea3432
mov ebx, dword [ebp + 0xc]
bsf ax, dx
and ax, di
lea eax, [ebp - 0x114]
test di, 0x3f08
xor edx, edx
rcl cl, cl
test si, dx
or cl, 6
sub ebx, eax
mov edi, edi
bt eax, eax
mov eax, 0x5bf80ed0
rcl cl, 0x58
mov cl, dl
bts esi, ecx
rol eax, cl
mov si, 0x3fa2
lea esi, [ebp + edx - 0x114]
add al, dl
xor al, byte [ebx + esi]
jmp 0xf77d4e
je 0xfb4c88
test eax, eax
je 0xfb2ddd
cmp eax, 1
jmp 0xe70611
jne 0xfb4c8b
inc esi
jmp 0x142ff7b
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0xea7983
inc esi
clc
jmp 0xf5eda3
je 0xeb5a32
mov ecx, dword [ebp + 0xc]
cmp di, 0x4783
test ebx, 0x683058e
test esp, ecx
test ecx, ecx
jmp 0xeb5a19
ret
call eax
test eax, eax
jmp 0xe6f1eb
push eax
movzx eax, dx
not al
mov ax, 0x28a8
push edi
lahf
setno al
movsx eax, dx
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0xfd9951
mov dword [ebp + 8], edx
jmp 0x1235097
push ecx
jmp 0x126c24c
pop edi
jmp 0xebe3f1
ret
pop ebx
movzx edi, bp
bswap di
pop edi
jmp 0xf77443
push edx
push eax
call fcn.00fb4324
add esp, 0xc
pop esi
mov edi, 0x19b54b18
movzx bx, cl
pop ebx
bswap edi
movsx edi, ax
mov di, bx
pop edi
jmp 0xfc0fb4
mov ecx, dword [ecx + edi]
cmp ecx, 0x75a12d50
jmp 0xfa4f15
cmp ecx, dword [eax + edi + 0x14]
jae 0xf8ea13
mov edx, dword [eax + edi + 0x1c]
test si, sp
lea ecx, [edx + ecx*4]
jmp 0xe9f0d8
mov eax, dword [ebp + 0xc]
jmp 0x127be10
je 0x124d6fe
push 0
push ecx
jmp 0xf6ebd0
je 0xeb5a32
mov eax, 0x5a4d
cmp sp, 0x7c5c
cmp word [edi], ax
je 0xf0f7c8
xor eax, eax
pop edi
jmp 0x142af56
jbe 0xefcc29
lea ebx, [ebp - 0x114]
ror dl, 0x4f
sub ebx, eax
mov dl, byte [eax]
jmp 0xfc3eaa
mov esp, ebp
pop ebp
jmp 0xf097cf
mov dword [ebp + 8], 0
cmp edi, esi
mov dword [ebp - 0xc], edx
stc
cmc
test ebx, ebx
jl 0xefbbbc
jmp 0x1231d0a
ret
call fcn.00fb4324
add esp, 0xc
mov esi, 0x586050b
pop esi
movzx bx, ah
pop ebx
mov edi, 0x3d37169f
xchg edi, edi
pop edi
jmp 0x124440f
pop ebp
jmp 0xe98837
push edi
xor edi, esi
mov edi, dword [ebp + 8]
test edi, edi
jmp 0xe75c88
jb 0xe6f967
lea eax, [ebp - 0x114]
jmp 0xe7d25f
dec ebx
cmp si, 0x74e
jmp 0xfa0357
mov ecx, esi
clc
sub ecx, eax
cmp ecx, 0x104
jmp 0xf7354a
jle 0x1231cfa
mov eax, dword [ebp - 4]
rol si, 0xeb
bts si, bp
mov esi, dword [ebp - 8]
test ah, 0xaf
stc
cmp esi, dword [eax + edi + 0x14]
jmp 0xfa7d73
jb 0xebd87f
mov eax, dword [ebp + 8]
movsx ecx, ax
lea ecx, [ebp - 0x114]
jmp 0xe93aec
je 0x125ca0e
mov bl, cl
cmc
test ch, 0xc4
test ecx, edx
sub bl, 0x30
jmp 0xe750ef
mov esp, ebp
movsx ebp, dx
jmp 0xed7841
ret
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jne 0xeb5a32
mov eax, dword [edx + 0x78]
clc
test bp, bx
mov dword [ebp - 4], eax
cmp bl, bh
cmc
test eax, eax
je 0xeb5a32
mov edx, dword [edx + 0x7c]
jmp 0xf7a12f
call eax
test eax, eax
jmp 0x12740ae
sub esp, 0x114
jmp 0xedb4a8
je 0xefbbbc
mov edx, dword [eax + edi + 0x20]
jmp 0xee8b85
jb 0xf6b4a9
mov edx, dword [ebp - 0x10]
stc
add edx, eax
cmp ecx, edx
jmp 0x122a71b
je 0xedbf92
inc edx
test si, 0x6b69
cmp edx, 0x104
jmp 0xedbf8c
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA]
jmp 0xe7a316
call fcn.00eee949
add esp, 4
test bh, 0x37
cmp eax, 0xffffffff
jmp 0xe70353
cmp bl, 9
jmp 0x124fea6
pop esi
pop ebx
movsx eax, sp
lea eax, [ecx + edi]
xchg edi, edi
not edi
pop edi
jmp 0xf01250
ja 0x14295cf
sub ecx, dword [eax + edi + 0x10]
cmp di, 0x5b87
jmp 0xea20f8
push eax
jmp 0xed3c52
inc eax
jmp 0xf8fe01
je 0xefcc29
mov byte [ebx + eax], dl
movsx edx, dx
mov edx, dword [ebp + 8]
jmp 0xfb496a
jae 0xf8ea13
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0xebd86e
mov esp, ebp
mov bp, dx
movzx ebp, sp
pop ebp
jmp 0xe6ec77
mov byte [esi], al
jmp 0xf35a8d
push ebx
cmc
test ebp, 0x4e6a208f
push esi
or esi, 0xffffffff
test ebp, eax
stc
mov dword [ebp - 0x10], edx
clc
mov dword [ebp - 8], esi
cmp ebp, eax
cmc
test al, bl
cmp ecx, 0xffff
jmp 0xf6de7e
inc esi
cmc
test ebp, 0x42d05312
stc
test cl, cl
jne 0x122a73f
pop esi
movsx ebx, di
mov ebx, 0x31c3566a
cmovbe ebx, edi
pop ebx
sub eax, eax
pop edi
jmp 0x12687fc
mov dword [ebp + 8], edx
stc
test bl, 0xbf
clc
cmp edx, ecx
jmp 0xefcc23
sub edx, edx
test edi, 0x3e831216
test cl, cl
jmp 0xefdda8
add edx, edi
jmp 0xebeb41
test ecx, ecx
jne 0x1233b41
pop esi
pop ebx
xor eax, eax
xchg edi, edi
pop edi
mov esp, ebp
bswap bp
mov ebp, esi
pop ebp
jmp 0x1228c9b
jae 0xf8ea13
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
xor ecx, ebp
mov ecx, dword [edx + edi]
cmp bx, si
clc
test ecx, ecx
jmp 0x1233b3b
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
mov ah, 0xe
cbw
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
jmp 0xe8d469
push ebp
mov ebp, esp
jmp 0xf19201
inc edx
jmp 0xf70211
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0xefbba4
mov esp, ebp
mov bp, bx
pop ebp
ret
test dl, dl
jmp 0xf71e9b
call eax
pop esi
jmp 0xe9c96b
ret
jae 0xf6b4a9
lea eax, [ecx + edi]
adc esi, ebx
mov cl, byte [eax]
shr si, 0x39
bsf esi, ebx
cmc
mov esi, eax
cmp ah, 0xe9
test cl, cl
je 0xf8ea13
mov edi, edi
cmp cl, 0x2e
jmp 0x1263905
ret
mov ecx, dword [ebp + 0xc]
sal ax, 0xa3
mov edx, dword [ebp - 0xc]
bt eax, 0x78
cbw
mov eax, dword [ebp + 8]
cmc
rol esi, 0x13
bt si, 0x32
lea esi, [ebx + eax]
shld eax, ecx, 0x61
cwde
mov eax, dword [ebp + 0x10]
clc
cmp di, 0x721
cmc
push eax
sal ax, cl
rcl eax, 0x52
bt eax, esi
sar esi, 1
cmovle eax, ebx
dec ah
xor al, ah
mov eax, dword [edx + esi*4]
clc
add eax, edi
jmp 0xf46bc2
je 0xf8ea13
cmp ecx, eax
jmp 0xf355fb
jmp 0xfb4c8b
mov esp, ebp
pop ebp
jmp 0xebee73
mov cl, byte [esi + 2]
add esi, 2
jmp 0xf92460
ja 0x125ca0e
movsx ecx, cl
clc
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
jmp 0x125ff38
jne 0xefddae
push 0
jmp 0xe9d46f
call eax
pop esi
cmovne ebx, edx
not di
xchg di, bx
pop ebx
xchg di, di
jmp 0xe96c98
jne 0xe7324c
cmp byte [ebp + 0x10], 0
jmp 0xe6f93b
test cl, cl
jmp 0x125ca08
je 0xef23e3
mov cl, byte [esi + 1]
jmp 0xf8ea02
mov esp, ebp
pop ebp
jmp 0xe7757f
mov byte [ebp + eax - 0x114], 0
jmp 0xf3dc37
je 0xf8ea13
cmp eax, edi
jmp 0x125eb7c
push eax
xchg al, ah
push edi
mov ah, 0x3a
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0x125e328
jmp 0xfb4c8b
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0xf2074e
mov esp, ebp
movzx ebp, si
pop ebp
jmp 0x122cf1b
mov dword [ebp + 8], esi
jmp 0x1428bfa