Function at 0x106f17d0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop ebp
ret
jmp 0x1060885c
jae 0x10570241
xor edi, edi
cmp esp, 0x31a7c3bb
test dx, 0x7516
test ecx, ecx
jmp 0x10495af6
mov edx, dword [ebp - 4]
cmovae ecx, edx
mov eax, dword [ebp + 8]
not cx
mov ecx, dword [edx + eax + 0x24]
bswap edx
movzx edx, ax
add dl, 3
lea edx, [ecx + esi*2]
add ch, ah
and ch, 0xb4
movzx eax, word [edx + eax]
sub edx, 0x2620769c
mov ecx, dword [ebp - 4]
rol edx, 0xe
mov edx, dword [ebp + 8]
mov dword [ebp - 8], eax
shrd eax, ebp, 0x2c
mov eax, dword [ebp - 8]
test sp, 0x81a6
clc
cmp eax, dword [ecx + edx + 0x14]
jmp 0x105dfaee
mov esp, ebp
cmovl ebp, esi
pop ebp
jmp 0x106e26f0
mov eax, dword [ebp + 0xc]
push eax
push ebx
movsx eax, dx
nop
mov eax, 0x603cd698
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x10ac5bce
je 0x106df34d
inc edx
cmp edx, 0x104
jmp 0x106df347
pop esi
jmp 0x10461fa3
test edi, edi
jmp 0x105d01da
call fcn.106f17d0
add esp, 0xc
xchg di, bx
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
mov esp, ebp
movzx ebp, sp
pop ebp
ret
mov esp, ebp
mov ebp, 0x6ba2dab2
jmp 0x10486603
pop ebp
ret
jl 0x10421a9a
jmp 0x1068dc18
jbe 0x10603ee2
lea ebx, [ebp - 0x114]
add dl, 0x8e
ror dl, 0x86
cmp di, bx
sub ebx, eax
mov dl, byte [eax]
test dl, dl
je 0x10603ee2
mov byte [ebx + eax], dl
inc edi
jmp 0x10603ed9
jne 0x10ac8863
push 0
jmp 0x1063edba
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0xffffffff
cmp esp, edx
cmp bx, 0x33aa
jmp 0x106345fe
lea eax, [eax + edx]
clc
cmp dword [eax], 0x4550
jmp 0x105992ae
pop ebx
mov si, 0x3c9c
pop esi
jmp 0x105e0006
lea esi, [esi + ecx]
cmp esi, ecx
stc
cmp eax, esi
jmp 0x1052871d
je 0x10571bbb
mov eax, 0x5a4d
test bx, bp
cmc
jmp 0x10732969
push edi
jmp 0x1045c338
jae 0x1060b053
mov cl, byte [eax + edx]
inc si
lea eax, [eax + edx]
mov esi, eax
cmp edi, 0xa5aa17a0
test cl, cl
je 0x10570241
cmp cl, 0x2e
jmp 0x10708d33
jmp 0x10421a9a
inc esi
test di, bx
stc
cmp al, 9
jmp 0x107079fd
cmp byte [esi + 1], 0x23
movsx cx, dl
movzx ecx, dx
setns cl
lea ecx, [esi + 1]
jmp 0x105a7c38
call eax
mov edi, eax
test edi, edi
jmp 0x1069821a
mov cl, byte [esi + 2]
cmc
add esi, 2
cmc
clc
test edi, edx
sub edx, edx
test cl, cl
jmp 0x10ac885d
jne 0x1052873c
pop edi
xor bl, bh
rol bx, cl
sub bh, cl
pop ebx
btc esi, 0x20
xadd si, si
sub eax, eax
movsx esi, di
bswap esi
pop esi
jmp 0x10460764
je 0x106cc943
xor eax, eax
mov esi, 0x60073411
pop esi
jmp 0x1059bf07
inc esi
jmp 0x10638006
jne 0x1054ba96
cmp byte [ebp + 0x10], 0
je 0x1042e67d
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
rcl cl, 0xa9
xor edx, edx
rol esi, 0x81
sub edi, eax
stc
mov esi, edx
xchg esi, esi
mov edi, edi
cmc
mov eax, 0x7956992
rcl cl, 0x3c
btr si, sp
mov cl, dl
btr esi, edi
xchg si, si
rol eax, cl
xadd esi, esi
shr esi, 0x11
lea esi, [ebp + edx - 0x114]
test edi, edx
add al, dl
xor al, byte [edi + esi]
mov byte [esi], al
jmp 0x1044798e
jne 0x10571bbb
mov ecx, dword [eax + 0x78]
test ecx, edx
mov dword [ebp - 4], ecx
test ecx, ecx
jmp 0x1066b6db
mov esp, ebp
jmp 0x10415dc4
je 0x10561c8e
push 0
jmp 0x1062fcf8
pop edi
bswap esi
pop ebx
mov si, 0x598c
pop esi
jmp 0x10421d91
mov ecx, esi
sub ecx, eax
cmp sp, bp
cmp ecx, 0x104
jmp 0x1041d9fa
ret
test cl, cl
jmp 0x104cc9d4
je 0x10421a9a
mov eax, dword [ecx + edx + 0x20]
jmp 0x105eab45
mov esp, ebp
not ebp
bswap ebp
pop ebp
jmp 0x105cd2ff
jae 0x10570241
mov esi, dword [ecx + edx + 0x1c]
lea eax, [esi + eax*4]
mov eax, dword [eax + edx]
jmp 0x10720ccc
mov esp, ebp
mov ebp, ebx
pop ebp
jmp 0x1070d0c3
dec edi
cmc
test ah, 0x96
lea eax, [eax + edx]
cmc
cmp edx, 0x86a6aca3
clc
sub ebx, ebx
mov dword [ebp - 0xc], eax
test edi, edi
jmp 0x1048d482
inc eax
cmp edi, ecx
jb 0x10495b0d
lea ecx, [ebp - 0x114]
nop
jmp 0x1064d0bd
jle 0x10421a60
lea ebx, [esi + 1]
sub dl, 0x31
sar dl, 0xd
cmp ebx, edi
movzx edx, sp
mov edx, dword [ebp + 8]
jle 0x1068dc0e
mov ecx, dword [ebp - 4]
jmp 0x10529b7a
pop edi
bsf ebx, esp
not esi
xor bl, dh
pop ebx
or esi, 0xdb159135
bt si, si
cmp edi, 0xa18bf96
add eax, edx
jmp 0x1044aa87
mov edx, dword [ebp + 8]
cmp ecx, 0x190baaba
lea esp, [esp - 0x114]
cmp ah, dh
push esi
stc
test edx, edx
jmp 0x106d9298
push ecx
jmp 0x10514ef2
cmp esi, 0xffff
ja 0x106c8bff
mov eax, esi
cmp ah, 0x2c
cmp ecx, ecx
sub eax, dword [ecx + edx + 0x10]
jmp 0x10421a93
je 0x10570241
cmp eax, ecx
jmp 0x1067a45e
test cl, cl
jmp 0x1057023b
push edx
jmp 0x106e33a3
push ecx
not ah
movsx eax, dx
mov byte [ebp + edi - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x10705598
call eax
pop edi
movzx bx, dh
pop ebx
cmovb si, dx
pop esi
jmp 0x105dc918
je 0x10571bbb
mov eax, dword [eax + 0x7c]
push ebx
clc
push edi
cmp bh, 0xb5
jmp 0x104e8ea9
jb 0x1060b053
mov esi, dword [ebp - 0x10]
jmp 0x104fd7d4
mov eax, dword [ebp - 0xc]
rcr ecx, 0x31
shrd ecx, eax, 0x30
mov ecx, dword [ebp + 0x10]
lea esi, [edi + ebx]
cmp ebp, 0xe2acd023
sar esi, 1
mov eax, dword [eax + esi*4]
cmc
cmp esp, 0x4539d3ae
push ecx
inc cl
btr cx, 0xb3
mov ecx, dword [ebp + 0xc]
stc
cmp ebx, esi
add eax, edx
jmp 0x106d192a
je 0x10570241
mov ebx, dword [ebp + 8]
cmc
cmp edi, ebx
jmp 0x10591f0a
call fcn.106f17d0
add esp, 0xc
movzx edi, di
mov edi, ecx
jmp 0x105ab6c3
mov edi, dword [ecx + edx + 0x18]
jmp 0x1044db9d
mov eax, dword [edx + 0x3c]
jmp 0x104f206a
call fcn.105ccc62
lea esp, [esp + 4]
cmp bh, 0x28
test si, cx
test eax, eax
jmp 0x10ac0bff
je 0x10571bbb
mov esi, dword [ebp + 0xc]
test esi, esi
jmp 0x10501fc5
jb 0x10591f35
lea eax, [ebp - 0x114]
push eax
seto al
cbw
push ebx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1064eba8
ret
push edi
jmp 0x106a0740
push ebp
mov ebp, esp
shr edx, cl
jmp 0x10620cdc
call eax
mov edi, eax
test edi, edi
jne 0x10698220
lea edx, [ebp - 0x114]
movsx eax, bx
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x105584ee
ja 0x104cc9da
movsx eax, cl
mov cl, byte [esi]
cmc
test ax, sp
lea edx, [edx + edx*4]
test ecx, esp
lea edx, [eax + edx*2 - 0x30]
jmp 0x105cf151
je 0x105b1283
mov cl, byte [esi + 1]
jmp 0x1058a98a
ret
test eax, eax
jmp 0x10635d51
cmp word [edx], ax
jmp 0x10571bb5
jge 0x1060884d
lea edi, [esi - 1]
jmp 0x1041a9bb
call eax
pop edi
jmp 0x104f3177
je 0x104cc9da
mov al, cl
clc
sub al, 0x30
jmp 0x105449a4