Function at 0x10400fbd
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
jne 0x10421200
cmp byte [ebp + 0x10], 0
jmp 0x10384623
jb 0x108631f3
mov edx, dword [ebp - 0x10]
stc
clc
add edx, eax
stc
jmp 0x10802a77
ret
ja 0x1086f6ae
sub ecx, dword [eax + edi + 0x10]
cmp bp, 0x463f
cmp ecx, dword [eax + edi + 0x14]
jmp 0x1086de00
jae 0x107a14f1
mov dword [ebp + 8], 0
clc
stc
test ecx, ecx
jbe 0x107b52b1
lea ebx, [ebp - 0x114]
xchg dl, dl
sub ebx, eax
test dx, sp
mov dl, byte [eax]
stc
test edx, esi
cmc
test dl, dl
jmp 0x107f282e
je 0x103c4cd3
mov ebx, dword [ebp + 0xc]
cmp ax, 0x4163
sub al, al
lea eax, [ebp - 0x114]
movzx esi, bx
sub edx, edx
sub ebx, eax
cmovne si, si
rcr al, cl
movsx ax, dl
mov edi, edi
bts si, dx
btr eax, 0x75
bt ax, dx
mov eax, 0x433a6d9f
cmc
ror cl, cl
movzx esi, ax
mov cl, dl
btr si, di
rol eax, cl
xor esi, 0x5df760b
lea esi, [ebp + edx - 0x114]
cmp si, bx
add al, dl
cmp ax, 0x6965
xor al, byte [ebx + esi]
jmp 0x1087edcc
je 0x107a14f1
mov edi, edi
test si, di
cmp cl, 0x2e
je 0x1041f418
mov cl, byte [esi + 1]
jmp 0x107a14e7
jne 0x107edbd0
push 0
jmp 0x1086ce95
ret
mov esp, ebp
xchg ebp, ebp
jmp 0x10807b8b
ret
mov esp, ebp
movzx ebp, di
pop ebp
ret
mov eax, dword [ebp + 0xc]
jmp 0x1078400b
je 0x1077ee20
mov edx, dword [edx + 0x7c]
push ebx
clc
cmp bp, 0x20de
push esi
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
cmp di, bx
jmp 0x1073766f
mov dword [ebp + 8], edx
cmp cx, 0x206d
cmp edx, ecx
jmp 0x107b52ab
je 0x107a14f1
cmp eax, edi
jmp 0x1035e1c2
mov dword [ebp - 8], ecx
jmp 0x107f6970
push ebp
mov ebp, esp
stc
jmp 0x107ef1ab
mov dword [ebp + 8], esi
jmp 0x104417b3
pop edi
mov esp, ebp
jmp 0x1088fb3f
dec ebx
stc
cmc
lea edx, [edx + edi]
cmp bp, 0x40f2
clc
mov dword [ebp + 8], 0
stc
test si, 0x6f68
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x1076cca2
mov ecx, esi
cmp cx, 0x586d
sub ecx, eax
stc
cmc
cmp ecx, 0x104
jmp 0x1037f8a8
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
je 0x1074ad4f
push 0
push ecx
jmp 0x1087e3a4
mov esp, ebp
jmp 0x10790ba0
jae 0x108631f3
lea eax, [ecx + edi]
mov cl, byte [eax]
adc esi, 0x48f5774c
sub si, 0x58f2
mov esi, eax
clc
stc
test al, 0x7b
test cl, cl
jmp 0x1039d562
pop ebx
pop edi
jmp 0x10428f30
ret
jmp 0x107c1244
mov dword [ebp - 8], esi
cmp bl, dh
cmp ecx, 0xffff
jmp 0x1037ed43
jne 0x107c1244
inc esi
jmp 0x10407285
mov cl, byte [esi + 2]
test al, 0xfc
lea esi, [esi + 2]
test ah, dl
clc
xor edx, edx
test ax, si
stc
test cl, cl
jmp 0x107edbca
jle 0x10855e20
mov eax, dword [ebp - 4]
not esi
clc
or esi, 0x7d2a119f
mov esi, dword [ebp - 8]
test ebx, edx
cmp sp, bx
cmp esi, dword [eax + edi + 0x14]
jmp 0x1077eea1
jl 0x1075767f
jmp 0x10855e33
mov ecx, dword [ebp - 4]
movzx edx, di
mov edx, dword [ecx + edi + 0x24]
cbw
cmovle eax, ebx
bswap ecx
lea eax, [edx + esi*2]
movzx dx, cl
movzx ecx, word [eax + edi]
setae dl
lea edx, [ebx + 1]
jmp 0x103fb85a
je 0x107bf7c8
xor eax, eax
bswap di
xchg edi, edi
pop edi
jmp 0x10881837
jae 0x107a14f1
mov ecx, dword [eax + edi + 0x1c]
shl edx, 0x84
sar dh, 0x92
lea edx, [ecx + esi*4]
dec cl
rol cx, 0x98
xor cl, 0x3a
mov ecx, dword [edx + edi]
cmp esp, 0x23856aef
jmp 0x107816b2
test ecx, ecx
jmp 0x10828209
push eax
bswap ax
push edi
cwde
movzx ax, bl
movsx eax, bx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
pop ebx
pop edi
jmp 0x107c5ead
pop ebp
jmp 0x103c0a1b
call fcn.10400fbd
add esp, 0xc
bswap bx
not ebx
pop esi
bswap edi
movsx edi, dx
pop ebx
not di
pop edi
jmp 0x103c0c3e
je 0x1077ee20
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x1077ee20
mov eax, 0x5a4d
cmp word [edi], ax
jmp 0x1077ee1a
inc esi
clc
test cl, cl
jne 0x1039d56d
pop esi
cmp si, di
pop ebx
adc di, di
clc
bswap di
sub eax, eax
jmp 0x1083c809
lea ebx, [esi - 1]
test ch, al
jmp 0x107c1244
jb 0x1037f8cc
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
push ecx
mov byte [ebp + eax - 0x114], 0
movzx eax, cx
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x10890583
mov edx, dword [edi + 0x3c]
clc
lea edx, [edx + edi]
clc
test al, 0x82
cmp dword [edx], 0x4550
jmp 0x10891d2a
cmp dword [ebp + 8], ebx
jmp 0x10757665
call fcn.10400fbd
add esp, 0xc
movzx ebx, dx
pop esi
pop ebx
movzx edi, sp
pop edi
jmp 0x107dc12a
mov esp, ebp
not bp
pop ebp
jmp 0x10368cdf
je 0x10779e17
cmp eax, 1
jmp 0x107376a5
mov esp, ebp
pop ebp
jmp 0x107de369
ret
je 0x1088cf15
inc edx
stc
cmp edx, 0x104
jmp 0x1088cf0f
call eax
pop esi
jmp 0x10434ec9
je 0x1039e5f3
mov bl, cl
cmp dx, 0x567b
sub bl, 0x30
inc esi
jmp 0x1081a69e
sub esp, 0x114
clc
test si, 0x3f38
push edi
btc edi, esp
mov edi, dword [ebp + 8]
cmp edi, edi
cmp ebx, 0x369446df
cmc
test edi, edi
jmp 0x1079dc65
je 0x107b52b1
mov byte [ebx + eax], dl
cmovg dx, dx
mov edx, dword [ebp + 8]
inc edx
inc eax
cmp esp, 0x3898281b
jmp 0x103ee982
mov dword [ebp + 8], edx
jmp 0x1080967f
cmp ecx, edx
jmp 0x1042bcc2
pop ebp
jmp 0x1035dc17
jmp 0x107c1244
cmp bl, 9
ja 0x1039e5f3
movsx ecx, cl
cmp ax, 0x5472
test di, 0x300f
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
rcl cl, 0xa2
shr cl, 0x8e
mov cl, byte [esi]
test dh, 0xce
cmc
test cl, cl
jmp 0x1039e5ed
je 0x107a14f1
cmp ecx, eax
jmp 0x1036012b
test ebx, ebx
jmp 0x1088aeaa
call fcn.1089b23f
lea esp, [esp + 4]
clc
stc
cmp eax, 0xffffffff
je 0x107ad3e7
test eax, eax
jmp 0x107d674f
pop edi
jmp 0x103bc739
mov ecx, dword [ebp + 0xc]
sar si, 7
mov edx, dword [ebp - 0xc]
dec al
rcl ah, 0x3e
add ax, 0x6225
mov eax, dword [ebp + 8]
xchg si, si
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
push eax
rcr ax, cl
shl al, cl
bt ax, 0x80
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x1083435b
push eax
movzx eax, cx
push edi
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x107ec055
pop esi
mov al, 0x24
pop ebx
lea eax, [ecx + edi]
pop edi
mov esp, ebp
pop ebp
jmp 0x103ba807
push edx
push eax
jmp 0x107c475d
jae 0x107a14f1
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
cmc
test ecx, ecx
jne 0x1082820f
pop esi
movzx ebx, ax
pop ebx
adc di, di
sub eax, eax
mov di, 0x179b
xchg edi, edi
jmp 0x10419580
mov ebx, dword [eax + edi + 0x18]
test esi, ebx
clc
jmp 0x1082e782
push eax
jmp 0x10794037
call eax
test eax, eax
jmp 0x103f6cb4
mov byte [esi], al
jmp 0x107eb9b5
mov esp, ebp
pop ebp
ret
je 0x1075767f
mov edx, dword [eax + edi + 0x20]
jmp 0x1041ccc2
jb 0x10384657
lea eax, [ebp - 0x114]
jmp 0x10861a28
pop ebp
jmp 0x1043ebd3
call eax
test eax, eax
jne 0x103f6cba
lea edx, [ebp - 0x114]
movzx eax, di
cbw
movsx eax, dx
push edx
mov eax, edi
setp ah
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x1087e9ee
jne 0x1077ee20
mov eax, dword [edx + 0x78]
cmp dl, 0x8d
mov dword [ebp - 4], eax
test cl, 0xbb
test eax, eax
jmp 0x103e06e2