Function at 0x1027a7ee
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
ret
ret
je 0x10266cc3
cmp eax, edi
jmp 0x102747fd
ret
jne 0x101c5260
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
jmp 0x1027e6c7
jne 0x10190646
pop esi
rcr edi, 0xa1
pop ebx
shr di, 0x97
mov di, 0x2852
sub eax, eax
mov di, 0x2e4b
pop edi
jmp 0x101bac52
jae 0x10266cc3
mov ecx, dword [eax + edi + 0x1c]
bsr edx, eax
or edx, 0x7064741c
add dx, di
lea edx, [ecx + esi*4]
mov ecx, edi
sub cx, sp
mov ecx, dword [edx + edi]
test cx, 0x37e1
cmp bp, ax
test ecx, ecx
jmp 0x10190640
ret
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
cmp bx, sp
test ax, 0x36ae
test ebx, ebx
jmp 0x101c5a52
push eax
not eax
movsx eax, ax
push edi
movsx eax, sp
cbw
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
call eax
pop esi
pop ebx
jmp 0x101b8eb0
je 0x101b8f3c
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
rcl cl, cl
sub edx, edx
sub ebx, eax
rcl cl, 0x7b
btr eax, 0x98
mov si, dx
mov edi, edi
rcl al, cl
rcr cl, 0xc7
movzx esi, sp
mov eax, 0xee56481
rcl cl, cl
bt esi, eax
btc esi, ecx
mov cl, dl
rcl si, 0x3b
rol eax, cl
not si
lea esi, [ebp + edx - 0x114]
add al, dl
test di, 0x3354
cmp bh, 0xa0
xor al, byte [ebx + esi]
jmp 0x1027b662
jmp 0x10270534
mov esp, ebp
pop ebp
jmp 0x101482df
cmp ecx, dword [eax + edi + 0x14]
jae 0x10266cc3
mov edx, dword [eax + edi + 0x1c]
clc
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
stc
test ecx, ecx
jmp 0x1018913b
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
bsf si, si
mov eax, dword [ebp + 8]
rol esi, 0x37
sbb si, 0x3cfd
mov si, dx
lea esi, [ebx + eax]
movzx eax, bx
mov eax, dword [ebp + 0x10]
jmp 0x1027e68d
je 0x10266cc3
cmp ecx, eax
jmp 0x10192cd4
jmp 0x10270534
je 0x10266cc3
mov edi, edi
cmc
clc
cmp cl, 0x2e
jmp 0x101c0e61
jb 0x101c1c6b
mov edx, dword [ebp - 0x10]
clc
cmc
add edx, eax
jmp 0x101ce1bf
jne 0x10270534
inc esi
jmp 0x101c29dd
push edx
jmp 0x1027d74d
jne 0x101494af
lea edx, [ebp - 0x114]
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_1]
jmp 0x101cedb9
jle 0x10190461
mov eax, dword [ebp - 4]
and esi, 0x6a0f27f9
mov esi, dword [ebp - 8]
cmp di, bx
cmp esi, dword [eax + edi + 0x14]
jmp 0x10189b33
mov esp, ebp
pop ebp
jmp 0x10147a8d
mov esi, eax
cmc
test di, dx
test cl, cl
jmp 0x1019217d
jae 0x101c1c6b
lea eax, [ecx + edi]
bt esi, edx
mov cl, byte [eax]
jmp 0x101b208e
mov dword [ebp - 8], ecx
jmp 0x101c32d4
call fcn.1027a7ee
add esp, 0xc
setne bl
mov bl, 0x49
pop esi
bswap ebx
cmovno edi, esp
pop ebx
pop edi
jmp 0x1018d13b
pop edi
jmp 0x101c3135
mov eax, dword [ebp + 0xc]
jmp 0x1018c827
inc esi
cmc
test cl, ch
test cl, cl
jmp 0x10266cbd
ja 0x10267042
movsx ecx, cl
lea edx, [edx + edx*4]
test ah, 4
stc
cmc
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
test cl, cl
jmp 0x1026703c
cmp byte [esi + 1], 0x23
xchg cl, cl
mov ecx, edx
lea ecx, [esi + 1]
jmp 0x10270b62
mov esp, ebp
bswap ebp
pop ebp
ret
je 0x10267042
mov bl, cl
cmc
stc
sub bl, 0x30
jmp 0x101c86f0
call eax
pop esi
bswap ebx
not di
pop ebx
mov edi, esi
mov di, 0x7413
pop edi
jmp 0x101ce01d
mov cl, byte [esi + 2]
stc
jmp 0x1027185d
je 0x101c5260
mov edx, dword [edx + 0x7c]
cmp di, dx
stc
push ebx
test ebx, edi
cmp esi, 0x749a27a2
push esi
test ax, di
jmp 0x101c62aa
je 0x101c63bf
mov byte [ebx + eax], dl
setae dl
inc dh
mov edx, dword [ebp + 8]
inc edx
jmp 0x1027c6d1
je 0x1026e9aa
mov cl, byte [esi + 1]
jmp 0x101b8f63
pop esi
cbw
pop ebx
cbw
lea eax, [ecx + edi]
movsx edi, dx
mov edi, 0x296e1765
pop edi
jmp 0x102731e6
jae 0x10266cc3
mov dword [ebp + 8], 0
cmc
clc
test ecx, ecx
jbe 0x101c63bf
lea ebx, [ebp - 0x114]
sub ebx, eax
rcr dl, 0x5b
mov dl, byte [eax]
test dl, dl
jmp 0x101bf883
mov dword [ebp + 8], esi
jmp 0x1018d0b0
mov esp, ebp
movsx ebp, bx
xchg bp, bp
pop ebp
ret
mov dword [ebp + 8], edx
jmp 0x10191190
cmp word [edi], ax
je 0x10275bef
xor eax, eax
bswap edi
pop edi
mov esp, ebp
xchg bp, bp
bswap ebp
pop ebp
ret
jl 0x10196ff7
jmp 0x1019046b
or esi, 0xffffffff
jmp 0x10269230
jb 0x101c28f5
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
push ecx
mov byte [ebp + eax - 0x114], 0
bswap ax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_1]
jmp 0x10266e91
inc esi
cmp bl, 9
jmp 0x101b9891
mov ebx, dword [eax + edi + 0x18]
cmp ebp, eax
test ebx, ebx
jmp 0x101cede8
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
mov ecx, esi
bswap cx
movsx ecx, sp
lea eax, [edx + esi*2]
cmovae cx, dx
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0x101b7ab9
je 0x10270531
test eax, eax
jmp 0x101cca63
je 0x101c8cbb
cmp eax, 1
jmp 0x101953f2
mov esp, ebp
xchg ebp, ebp
not bp
pop ebp
jmp 0x1018af2f
cmp ecx, edx
jmp 0x101b4a20
call eax
test eax, eax
jmp 0x101494a9
je 0x10196ff7
mov edx, dword [eax + edi + 0x20]
jmp 0x1026f1d8
jne 0x10192187
pop esi
pop ebx
rcl edi, 0x3e
xor eax, eax
cmovnp edi, ebp
mov di, 0x5eff
not edi
pop edi
jmp 0x1027e72c
call eax
test eax, eax
jmp 0x101967b1
jne 0x101bc604
push 0
jmp 0x101966b8
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmc
cmp cx, 0x526e
cmp ecx, 0xffff
ja 0x101c87c1
sub ecx, dword [eax + edi + 0x10]
jmp 0x101903e9
mov ecx, esi
test edi, 0x290d630c
sub ecx, eax
cmp ecx, 0x104
jmp 0x101c28d3
dec ebx
add edx, edi
test ax, di
jmp 0x1018bb4c
push ecx
push eax
jmp 0x101b7b8a
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0x10196fe2
je 0x101bd766
push 0
jmp 0x1026f7af
lea esi, [esi + 2]
sub edx, edx
test cl, cl
jmp 0x101bc5fe
mov esp, ebp
pop ebp
jmp 0x10187e4b
jne 0x101b9b8b
cmp byte [ebp + 0x10], 0
jmp 0x1018d004
mov edx, dword [edi + 0x3c]
cmp ah, bh
cmc
add edx, edi
cmp si, 0x4f45
stc
cmp dword [edx], 0x4550
jmp 0x10188937
push ebp
add bp, 0x51f
cmc
mov ebp, esp
clc
stc
cmp sp, 0x53c8
sub esp, 0x114
stc
push edi
mov edi, dword [ebp + 8]
cmp ebp, 0x4aaa36df
test edi, edi
je 0x101c5260
mov ecx, dword [ebp + 0xc]
test bp, dx
test ecx, ecx
jmp 0x1027e5e0
call fcn.1027a7ee
add esp, 0xc
movsx bx, cl
pop esi
movsx edi, bx
cmovns di, bp
pop ebx
not edi
pop edi
jmp 0x10198e72
mov byte [esi], al
je 0x1027b678
inc edx
stc
cmp edx, 0x104
jb 0x1018d02d
lea eax, [ebp - 0x114]
push eax
movsx eax, sp
cbw
push edi
cwde
not ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
jmp 0x101bcfcf
inc eax
mov dword [ebp + 8], edx
cmp edx, ecx
jmp 0x101c63b9
push eax
jmp 0x1027b122
je 0x101c5260
mov eax, 0x5a4d
cmp cx, 0x1655
jmp 0x101c5257
push eax
sar esi, 1
or ah, 0xef
cmp al, 0x1b
cwde
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.1018e76c
lea esp, [esp + 4]
test eax, 0x6eb66df3
cmp eax, 0xffffffff
jmp 0x101ca2f7
test eax, eax
jmp 0x101bdd06
mov esp, ebp
movsx ebp, bx
pop ebp
jmp 0x10148d85