Function at 0xfa87f1
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jle 0xfcae9c
lea ebx, [esi + 1]
mov ecx, dword [ebp + 8]
cmp ecx, 0x55e0367
cmp ebx, edi
jmp 0xf7f662
je 0xfc889c
push 0
jmp 0xbf77b6
je 0xc5e6cc
cmp eax, edx
jmp 0xc43210
je 0xc5e6cc
mov edx, dword [ebp + 8]
cmp edi, edx
jmp 0xde37a4
ret
je 0xb8e704
mov eax, dword [edx + ecx + 0x20]
cmp esi, 0x3738420a
cmp ebp, esi
cmc
lea eax, [eax + ecx]
clc
jmp 0xbd9ed5
ret
inc edi
inc eax
cmp di, dx
cmp edi, ecx
jb 0xc36188
lea ecx, [ebp - 0x114]
not eax
cwde
push ecx
movsx eax, sp
mov byte [ebp + edi - 0x114], 0
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA_3]
call eax
mov edi, eax
cmc
test edi, edi
jmp 0xddda24
ret
jae 0xb7c63d
add eax, ecx
clc
mov cl, byte [eax]
xor esi, 0x3ec72961
mov esi, eax
stc
test ebp, esp
test cl, cl
jmp 0xdde408
mov dword [ebp - 0xc], eax
jmp 0xfd92d9
je 0xbafb40
sub eax, eax
pop esi
jmp 0xc2adc4
mov esp, ebp
xchg bp, bp
mov bp, 0x1af7
pop ebp
ret
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
jmp 0xdf1ba0
pop edi
bts esi, esp
pop ebx
xchg si, si
add eax, ecx
movzx esi, dx
pop esi
jmp 0xf7b32b
jmp 0xb8e704
mov edx, dword [ebp - 4]
movzx eax, sp
sal ah, cl
rcl ah, 0x93
mov eax, dword [ebp - 8]
cmp edx, esp
clc
cmp eax, dword [edx + ecx + 0x14]
jmp 0xbfd3e1
lea esi, [esi + 2]
sub edx, edx
test cl, cl
je 0xfc370e
dec edi
jmp 0xb460b1
mov eax, dword [ecx + 0x3c]
cmp dword [eax + ecx], 0x4550
jmp 0xc2c595
call eax
pop edi
pop ebx
pop esi
jmp 0xfb5578
sub ebx, ebx
jmp 0xbadd6e
mov esp, ebp
bswap bp
mov bp, 0x3b1b
cmovg bp, bx
pop ebp
ret
cmp ecx, 0x104
jmp 0xfb30a5
push ecx
push edi
call fcn.00fa87f1
add esp, 0xc
pop edi
pop ebx
xchg esi, esi
pop esi
jmp 0xc26818
jae 0xc5e6cc
mov esi, dword [edx + ecx + 0x1c]
lea eax, [esi + eax*4]
jmp 0xe04c56
jmp 0x97cf39
mov eax, dword [ebp + 0xc]
jmp 0xc2a51d
mov esp, ebp
bswap bp
mov bp, si
pop ebp
ret
push eax
push edx
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress_2]
jmp 0xdf5a9e
mov esp, ebp
pop ebp
jmp 0x9b9363
jne 0xb512c0
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
test ch, 0xaf
test edx, edx
je 0xb512c0
mov eax, dword [eax + ecx + 0x7c]
push ebx
push edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0xffffffff
cmc
cmp esi, 0xffff
jmp 0xf7d9a0
je 0x9c9bbc
lea ebx, [ebp - 0x114]
sbb dl, 0xc3
sub ebx, eax
mov dl, byte [eax]
cmp bp, si
stc
test dl, dl
je 0x9c9bbc
mov byte [ebx + eax], dl
jmp 0x9c9baf
mov ecx, esi
test ah, 0x24
jmp 0xfca005
jb 0xb7c63d
mov esi, dword [ebp - 0x10]
lea esi, [esi + edx]
clc
jmp 0xe0f81e
jne 0xdde40e
pop edi
pop ebx
inc si
movsx esi, sp
sbb si, 0x62d8
sub eax, eax
not esi
mov si, 0x2c84
pop esi
jmp 0xbde513
jne 0x9a29f0
lea edx, [ebp - 0x114]
not ax
push edx
cwde
bswap ax
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA_1]
call eax
mov edi, eax
stc
test edi, edi
jmp 0x9a29ea
je 0xc5e6cc
cmp cl, 0x2e
je 0xc37f5b
mov cl, byte [esi + 1]
inc esi
test cl, cl
jmp 0xc5e6c6
jne 0xde7e47
cmp byte [ebp + 0x10], 0
jmp 0xdfd09b
cmp byte [esi + 1], 0x23
xchg ch, cl
lea ecx, [esi + 1]
jmp 0x981818
mov byte [esi], cl
jmp 0xe01951
call eax
pop edi
mov esi, 0x36941ffb
pop ebx
cmovnp si, di
movzx esi, cx
movsx esi, bx
pop esi
jmp 0xb51b38
je 0xc0df1b
mov edi, dword [ebp + 0xc]
sar esi, 0x48
lea ecx, [ebp - 0x114]
neg bh
bt esi, 0xea
xor eax, eax
stc
xor si, 0x31f2
sub edi, ecx
rol cl, 0x7a
rol bx, cl
lea esp, [esp]
movzx ebx, dx
mov cl, al
btr bx, ax
btr si, 0x99
rol bl, 0xd7
mov ebx, 0x1e2d5986
rol ebx, cl
lea esi, [ebp + eax - 0x114]
jmp 0xb79814
je 0xe01963
inc eax
cmp eax, 0x104
jb 0xdfd0cd
lea eax, [ebp - 0x114]
jmp 0xe1a76f
mov eax, dword [eax + ecx]
test eax, eax
jmp 0x98a1f9
mov edi, dword [edx + ecx + 0x18]
test edi, edi
jmp 0x9ace69
cmp eax, esi
jmp 0xb3ec87
push eax
cwde
cmovb ax, dx
bswap eax
push edx
bswap eax
not ah
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress_2]
jmp 0xbd85d7
mov esp, ebp
movsx ebp, si
bswap ebp
pop ebp
jmp 0x9cb441
mov dword [ebp - 8], eax
jmp 0xb87ed5
ja 0xe0f174
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
jmp 0xf7b35d
jle 0xfb412c
jmp 0xb8e6f9
call fcn.00fd6465
lea esp, [esp + 4]
test bh, ch
test eax, eax
jns 0x97cf30
lea edi, [esi - 1]
jmp 0xc07101
push ebp
mov ebp, esp
cmp bx, dx
mov ecx, dword [ebp + 8]
cmc
sub esp, 0x114
clc
cmp di, dx
push esi
test ecx, ecx
jmp 0xfb757b
jae 0xc5e6cc
sub edi, edi
test ecx, ecx
jmp 0xc36177
mov eax, dword [ebp - 0xc]
sbb esi, 0x27397041
mov edx, dword [ebp + 0x10]
ror si, 0x64
xchg si, si
lea esi, [edi + ebx]
stc
test ecx, esi
cmp esp, 0xbcb7164
sar esi, 1
mov eax, dword [eax + esi*4]
push edx
rol dh, cl
not edx
mov edx, dword [ebp + 0xc]
add eax, ecx
jmp 0xf8e62a
mov esp, ebp
mov bp, 0x264
pop ebp
jmp 0x9ac301
je 0xb512c0
mov esi, dword [ebp + 0xc]
test edi, eax
test bp, 0x1be1
test esi, esi
je 0xb512c0
mov eax, 0x5a4d
cmc
test di, di
cmp word [ecx], ax
jmp 0xb512ba
mov cl, byte [esi + 2]
jmp 0xb931b7
sub ecx, eax
jmp 0xbe16b7
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
shld edx, edx, 8
bsr edx, esi
mov edx, dword [ecx + eax + 0x24]
lea ecx, [edx + esi*2]
test edi, 0x71501f38
bt edx, 0x9e
movzx edx, word [ecx + eax]
mov dword [ebp - 8], edx
shrd dx, cx, 0xa
movzx ecx, di
or dx, bx
mov ecx, eax
jmp 0xb8e6f9
js 0xb8e704
jmp 0xfb4135