Function at 0x104698c5
Capabilities:
Parse pe header

Disassembly:
ret
jne 0x10252ae1
cmp byte [ebp + 0x10], 0
jmp 0x105525e2
ret
je 0x102e0cc2
push 0
jmp 0x104b7e5e
je 0x102adf69
mov edi, edi
cmp cl, 0x2e
jmp 0x1051d8e9
jne 0x10254015
pop esi
dec di
pop ebx
inc edi
xor eax, eax
xchg edi, edi
not di
pop edi
jmp 0x10273a27
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x102404d7
lea ebx, [esi - 1]
test ax, dx
cmp dword [ebp + 8], ebx
jle 0x104a65f1
mov eax, dword [ebp - 4]
sar esi, 0xa9
movzx esi, dx
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jae 0x102adf69
mov ecx, dword [eax + edi + 0x1c]
rcl dh, cl
bswap edx
add edx, edi
lea edx, [ecx + esi*4]
rcl cl, cl
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0x1025400f
je 0x102adf69
cmp ecx, eax
jmp 0x104ad12e
ret
inc eax
test esi, 0x2b0a5e51
cmc
test bx, cx
mov dword [ebp + 8], edx
test ch, 0xf9
cmp bp, 0x51cc
cmp edx, ecx
jb 0x104a632b
mov eax, dword [ebp + 8]
not ecx
cmovne cx, ax
mov cx, bp
lea ecx, [ebp - 0x114]
push ecx
jmp 0x102e5132
mov esp, ebp
bswap bp
mov ebp, 0x1b51071b
pop ebp
jmp 0x1023d505
inc edx
jmp 0x10260594
mov esp, ebp
jmp 0x102c507f
ret
pop ebx
movsx edi, ax
movzx edi, bp
pop edi
jmp 0x10264621
ret
mov esp, ebp
pop ebp
jmp 0x102e8c53
je 0x102a6696
mov ecx, dword [ebp + 0xc]
test di, 0x421e
cmp bp, 0x1260
test ecx, ecx
jmp 0x102a6680
call eax
test eax, eax
jne 0x10511428
lea edx, [ebp - 0x114]
jmp 0x102b53b8
je 0x102a6696
mov eax, 0x5a4d
test edx, ebp
cmp word [edi], ax
je 0x104aeb8e
sub eax, eax
pop edi
jmp 0x10474eaf
call eax
test eax, eax
jmp 0x10511422
mov dword [ebp + 8], edx
jmp 0x10560063
jne 0x10243e20
pop esi
movsx ebx, dx
pop ebx
adc di, sp
and edi, 0x1e432e68
xor eax, eax
pop edi
jmp 0x105033d9
push edx
movsx ax, ch
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_1]
jmp 0x102a93b7
jb 0x10552604
lea eax, [ebp - 0x114]
push eax
push edi
mov eax, 0x6b407c67
movzx eax, di
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
jmp 0x104c5a2b
pop ebp
ret
mov esp, ebp
pop ebp
jmp 0x10274507
inc esi
test cl, cl
jmp 0x102adf63
push eax
jmp 0x104cf5af
cmp ecx, dword [eax + edi + 0x14]
jae 0x102adf69
mov edx, dword [eax + edi + 0x1c]
jmp 0x10524dbe
mov cl, byte [esi + 2]
cmc
add esi, 2
xor edx, edx
clc
stc
jmp 0x1050d0f4
mov byte [ebp + eax - 0x114], 0
cbw
jmp 0x10503f0c
ret
pop esi
jmp 0x1027f0c9
add al, dl
cmc
test edi, ecx
xor al, byte [ebx + esi]
jmp 0x1056b793
mov ecx, esi
sub ecx, eax
test di, 0x1a0c
cmp ecx, 0x104
jae 0x102adf69
mov dword [ebp + 8], 0
cmp cx, bp
test ecx, ecx
jmp 0x104a6316
push eax
jmp 0x10468cc5
push eax
sar esi, 1
bts ax, di
bt ax, 0x26
dec al
mov eax, dword [edx + esi*4]
test dx, 0x330a
stc
add eax, edi
jmp 0x104e025c
jl 0x10253101
jmp 0x104a65fb
call fcn.104698c5
add esp, 0xc
jmp 0x10435c2c
push ebp
sbb ebp, edx
rol ebp, 0xec
mov ebp, esp
sub esp, 0x114
push edi
mov di, cx
mov edi, dword [ebp + 8]
test dh, 0xe3
jmp 0x1055b234
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
movzx dx, al
not al
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
mov edx, esi
movzx ecx, word [eax + edi]
cdq
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
jmp 0x102abd56
jne 0x102a6696
mov eax, dword [edx + 0x78]
clc
mov dword [ebp - 4], eax
stc
cmc
test eax, eax
je 0x102a6696
mov edx, dword [edx + 0x7c]
test bx, bx
stc
push ebx
cmp edi, edx
push esi
or esi, 0xffffffff
cmp ax, 0xda2
cmp si, bx
mov dword [ebp - 0x10], edx
clc
cmp si, 0x1d32
test si, bp
mov dword [ebp - 8], esi
cmc
stc
cmp ecx, 0xffff
jmp 0x1049cb21
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0x102474a5
ja 0x104bea0a
sub ecx, dword [eax + edi + 0x10]
cmp sp, bp
jmp 0x102ded6c
lea eax, [ecx + edi]
cmovg di, cx
pop edi
jmp 0x102c517c
je 0x10253101
mov edx, dword [eax + edi + 0x20]
jmp 0x104a5bc2
dec ebx
lea edx, [edx + edi]
mov dword [ebp + 8], 0
cmp sp, bx
mov dword [ebp - 0xc], edx
cmp dx, 0x3433
test ebx, ebx
jmp 0x10461b22
jbe 0x102605b2
lea ebx, [ebp - 0x114]
cmc
sbb dl, 0x5b
sub ebx, eax
xadd dl, dl
mov dl, byte [eax]
cmc
test dh, 0x77
test dl, dl
jmp 0x1052862a
mov ecx, dword [ebp + 0xc]
btr eax, 0x48
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
add si, bx
ror esi, 0xef
lea esi, [ebx + eax]
sar ax, 0x65
btc eax, ebp
mov eax, dword [ebp + 0x10]
jmp 0x1045f1b9
push eax
xchg al, al
setb al
push edi
jmp 0x104d7655
jb 0x10553441
mov edx, dword [ebp - 0x10]
clc
cmc
cmp ebp, 0x43403fc0
add edx, eax
clc
stc
cmp ecx, edx
jmp 0x104db5cf
mov edx, dword [edi + 0x3c]
cmc
test ebp, 0x10048ac
lea edx, [edx + edi]
stc
clc
cmp dword [edx], 0x4550
jmp 0x1048108b
push ecx
jmp 0x1045c991
mov ebx, dword [eax + edi + 0x18]
jmp 0x1053f960
je 0x1050e955
mov bl, cl
sub bl, 0x30
jmp 0x1050e932
push edx
jmp 0x102de89f
call eax
pop esi
pop ebx
pop edi
jmp 0x102900cc
call fcn.104698c5
add esp, 0xc
not esi
movsx bx, bl
bswap edi
pop esi
bswap ebx
pop ebx
not di
mov di, cx
pop edi
mov esp, ebp
jmp 0x104e5c74
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
jmp 0x105535aa
jae 0x10553441
lea eax, [ecx + edi]
stc
mov cl, byte [eax]
mov esi, eax
cmp edi, 0x5fff14a8
test cl, cl
jmp 0x10243e18
call fcn.10468f43
add esp, 4
test si, cx
cmp ax, 0x415d
cmp eax, ebp
cmp eax, 0xffffffff
jmp 0x104fee80
pop ebp
jmp 0x102583a3
je 0x102530e6
test eax, eax
je 0x1047d8f8
cmp eax, 1
jmp 0x1056903c
mov esp, ebp
movsx ebp, bp
pop ebp
jmp 0x10289071
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_1]
jmp 0x1029f6bb
test cl, cl
jmp 0x104bf93c
inc esi
cmp bl, 9
ja 0x1050e955
movsx ecx, cl
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
ror cl, cl
mov cl, byte [esi]
test edx, edi
clc
test cl, cl
jne 0x104bf942
push 0
jmp 0x104c5322
je 0x102adf69
cmp eax, edi
jmp 0x1023986c
je 0x10458a1d
mov cl, byte [esi + 1]
jmp 0x102d0773
lea ecx, [edx + ecx*4]
jmp 0x10487018
je 0x102605b2
mov byte [ebx + eax], dl
dec edx
mov edx, dword [ebp + 8]
jmp 0x10268938
test ebx, ebx
jmp 0x104a3e89
je 0x105531b2
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
sub edx, edx
or si, 0x4e88
sar cl, 0x28
sub ebx, eax
lahf
mov edi, edi
btr eax, 0x56
mov eax, 0x5cf55a51
mov cl, dl
rol eax, cl
shrd si, bp, 0x86
lea esi, [ebp + edx - 0x114]
clc
jmp 0x10456f49
mov eax, dword [ebp + 0xc]
jmp 0x104a6b38
pop esi
not al
movzx ax, bl
cbw
pop ebx
jmp 0x1049e37c
call eax
pop esi
pop ebx
bswap di
pop edi
mov esp, ebp
jmp 0x1055a4ae
pop ebp
jmp 0x1022f6ff
test edi, edi
jmp 0x1029d7cb
jmp 0x102530ec
jmp 0x102530ec
jne 0x102530ec
inc esi
mov dword [ebp + 8], esi
jmp 0x1056713e
mov byte [esi], al
jmp 0x1056f3a8
je 0x102b8ef3
inc edx
stc
cmp edx, 0x104
jmp 0x102b8eed