Function at 0xf05a9d
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
test ecx, ecx
jmp 0xd79a81
mov eax, dword [ebp + 8]
btc cx, 0x90
or dx, 0x229a
rcr dh, cl
mov ecx, dword [ebp - 4]
movsx edx, si
mov edx, dword [ecx + eax + 0x24]
sub ecx, 0x6de52fd7
lea ecx, [edx + esi*2]
movzx edx, word [ecx + eax]
btc cx, 0x3d
rcr cl, 0x70
mov dword [ebp - 8], edx
btr edx, 0x1c
ror edx, 0x74
shrd cx, di, 0x28
mov ecx, eax
shr dx, 0xa4
sub edx, edi
or edx, esp
mov edx, dword [ebp - 4]
sal eax, cl
mov eax, dword [ebp - 8]
cmp bx, 0x1cd3
stc
cmp eax, dword [edx + ecx + 0x14]
jmp 0xee5248
ret
mov dword [ebp - 8], eax
jmp 0xedaba6
test edi, edi
jmp 0xe639e8
mov byte [esi], cl
jmp 0xca5e6e
inc eax
test esp, 0x4f5d67ed
cmp edi, ecx
jmp 0xd75a65
push edi
call fcn.00f05a9d
add esp, 0xc
movzx esi, si
bswap edi
pop edi
pop ebx
movsx esi, di
pop esi
jmp 0xdc27c8
je 0xca5e81
inc eax
clc
cmp eax, 0x104
jb 0xf03ef3
lea eax, [ebp - 0x114]
jmp 0xe53b15
pop esi
jmp 0xf66b8a
je 0xe9b526
mov cl, byte [esi + 1]
jmp 0xef992c
ja 0xde050d
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
jmp 0xc5e51a
mov eax, dword [ecx + 0x3c]
stc
cmp dword [eax + ecx], 0x4550
jmp 0xce8106
pop ebp
ret
jne 0xe900ca
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
test edx, edx
jmp 0xf47e98
je 0xd75a6b
mov byte [ebx + eax], dl
inc edi
jmp 0xc84501
mov byte [ebp + edi - 0x114], 0
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
mov edi, eax
stc
test edi, edi
jmp 0xe20ff4
cmp al, 9
jmp 0xe480bd
pop edi
shrd si, cx, 0xfa
and bl, 0xa0
pop ebx
movzx esi, di
add eax, ecx
jmp 0xecddd2
mov esp, ebp
xchg bp, bp
mov ebp, esp
pop ebp
jmp 0xd9d9df
lea edx, [eax + edx*2 - 0x30]
test cl, cl
jmp 0xd9f734
jb 0xe9b557
lea ecx, [ebp - 0x114]
cmove ax, bx
movsx eax, bp
mov al, 0xfb
push ecx
jmp 0xcf4df9
je 0xe900ca
mov esi, dword [ebp + 0xc]
test esi, esi
jmp 0xe900b1
push edi
jmp 0xf245b7
call eax
mov edi, eax
jmp 0xc64c09
jae 0xcfd7a2
add eax, ecx
sete cl
rcl esi, 0xff
mov cl, byte [eax]
sub esi, esp
mov esi, eax
stc
cmc
test cl, cl
je 0xef9935
cmp cl, 0x2e
jmp 0xcc7448
ret
jne 0xf40b1b
push 0
jmp 0xf04b1b
mov cl, byte [esi + 2]
lea esi, [esi + 2]
sub edx, edx
stc
cmp bp, 0x5ea3
test cl, cl
jmp 0xf40b15
mov esp, ebp
mov ebp, ebp
mov bp, 0x2d6
cmovge bp, sp
pop ebp
ret
jmp 0xdd2059
ret
jle 0x877b83
lea ebx, [esi + 1]
mov ecx, dword [ebp + 8]
test edx, 0x72b80c4d
cmp ebx, edi
jmp 0xeb72aa
mov edi, dword [edx + ecx + 0x18]
test sp, 0x619c
test edi, edi
jmp 0xe5b1c1
cmp byte [esi + 1], 0x23
seto ch
lea ecx, [esi + 1]
jmp 0xe9222d
mov ecx, dword [ebp + 8]
cmp dx, cx
sub esp, 0x114
push esi
cmp edi, eax
cmp edx, 0xb8f6ad2
jmp 0x8745fd
add eax, ecx
jmp 0xf5daa3
je 0xef9935
cmp eax, edx
jmp 0xe7e7a0
ret
jne 0xe639ee
lea edx, [ebp - 0x114]
mov ah, dh
setge ah
xchg al, ah
push edx
not ah
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xd84064
mov eax, dword [ebp + 0xc]
push eax
mov ax, si
push edx
mov ax, 0x206c
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
bswap ebx
xchg si, si
sete bh
pop ebx
mov si, 0x16b2
jmp 0xcc1a4f
call eax
pop edi
pop ebx
bswap esi
mov esi, 0x529f6af4
pop esi
jmp 0xd6e5b7
ja 0xd9f73a
movsx eax, cl
rcr cl, 0x36
mov cl, byte [esi]
lea edx, [edx + edx*4]
stc
jmp 0xd71e94
push eax
mov ax, 0xe1f
nop
cmovo eax, esp
push edx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xe45f02
jns 0xdd2050
lea edi, [esi - 1]
jmp 0xdc2882
je 0x877bcf
mov eax, dword [edx + ecx + 0x20]
cmp bh, 0x54
jmp 0xed8dd1
je 0xef9935
mov edx, dword [ebp + 8]
clc
cmp edi, edx
jne 0xde6225
cmp byte [ebp + 0x10], 0
jmp 0xf03ece
cmp esi, 0xffff
jmp 0xcd7c58
jb 0xcfd7a2
mov esi, dword [ebp - 0x10]
lea esi, [esi + edx]
stc
cmp eax, esi
jmp 0xd86bb6
je 0xe900ca
mov eax, 0x5a4d
test bp, 0x1c59
cmp word [ecx], ax
je 0xcd9f44
sub eax, eax
bswap esi
mov si, dx
pop esi
mov esp, ebp
pop ebp
ret
je 0xda158c
push 0
push ecx
jmp 0xca45d6
mov ecx, esi
cmc
sub ecx, eax
cmp cx, 0x61e
cmp ecx, 0x104
jae 0xef9935
sub edi, edi
test esp, 0x75c24eb7
cmp di, di
test ecx, ecx
je 0xd75a6b
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0xcf1221
mov dword [ebp - 0xc], eax
js 0x877bcf
jmp 0xea2bc9
mov esp, ebp
pop ebp
jmp 0xe0f2cf
mov eax, dword [ebp - 0xc]
not edx
mov edx, dword [ebp + 0x10]
lea esi, [edi + ebx]
sar esi, 1
cmc
cmp ax, 0x2fec
mov eax, dword [eax + esi*4]
push edx
mov edx, dword [ebp + 0xc]
jmp 0xdf079d
jle 0xea2bc4
jmp 0x877bca
pop esi
jmp 0xef70c6
add eax, ecx
sub ebx, ebx
dec edi
jmp 0xe9f21a
jmp 0x877bcf
jae 0xef9935
mov esi, dword [edx + ecx + 0x1c]
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
test eax, eax
jmp 0xdf6bd7
mov esp, ebp
jmp 0xcdc7ae
inc esi
test cl, cl
jne 0xd86bd4
pop edi
test si, cx
pop ebx
bsr si, dx
xchg esi, esi
sub eax, eax
mov si, 0x4270
movzx esi, si
pop esi
jmp 0xf0bc9b
inc esi
cmp bp, 0x8bb
jmp 0xcfc278
je 0xe2ab4a
mov edi, dword [ebp + 0xc]
rcr cx, cl
add ebx, esi
lea ecx, [ebp - 0x114]
btr ebx, esi
sub eax, eax
sub edi, ecx
clc
rol bl, cl
lea esp, [esp]
mov cl, al
mov ebx, 0x1aff75d2
movsx esi, dx
rol ebx, cl
xor cx, 0x474c
inc cx
lea esi, [ebp + eax - 0x114]
xadd cx, cx
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
jmp 0xc8325c
push edx
jmp 0xd82c02
push ebp
mov ebp, esp
jmp 0xdebf24
mov esp, ebp
pop ebp
jmp 0x89a393
call fcn.00f05a9d
add esp, 0xc
xchg edi, ebx
pop edi
not si
movzx esi, bx
movzx bx, bh
pop ebx
pop esi
jmp 0xe9f369
je 0xd9f73a
lea eax, [ecx - 0x30]
jmp 0xf00af6
je 0xe900ca
mov eax, dword [eax + ecx + 0x7c]
cmc
test dx, 0x2800
cmp bh, bh
push ebx
test bl, 0x84
test al, bl
push edi
cmp si, 0x437a
mov dword [ebp - 0x10], eax
cmp eax, eax
cmp al, 0xa2
mov dword [ebp - 8], 0xffffffff
cmc
jmp 0xe66d2c
call fcn.00e1844b
add esp, 4
stc
cmp ebx, ebx
test eax, eax
jmp 0xe59db3
mov esp, ebp
pop ebp
jmp 0xdc9aff