Function at 0xf276eb
Capabilities:
Parse pe header

Disassembly:
ret
je 0xee8a06
inc eax
cmp eax, 0x104
jb 0x1169080
lea eax, [ebp - 0x114]
jmp 0x102f8e0
ret
je 0x1056f8d
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
cmp ax, di
test eax, edi
test edi, 0x5f040ff8
test dl, dl
jmp 0x10208eb
ret
push eax
cwde
cmovnp ax, ax
setb al
push edx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
jmp 0xf4e2da
jle 0x11d7cc2
jmp 0xf2e66d
push edi
call fcn.00f276eb
add esp, 0xc
jmp 0xfa0955
jae 0x1165488
xor edi, edi
stc
test ecx, ecx
jmp 0xeee1c2
push ebp
add ebp, ecx
rol ebp, 0x5a
mov ebp, esp
rcl cx, cl
mov ecx, dword [ebp + 8]
stc
sub esp, 0x114
test di, bx
push esi
cmp dl, 2
stc
test ecx, ecx
jmp 0x100d593
mov eax, dword [ebp + 8]
sub dx, 0x2697
btr cx, 0xb9
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + eax + 0x24]
lea ecx, [edx + esi*2]
movzx edx, word [ecx + eax]
xchg ecx, ecx
bsr ecx, eax
mov dword [ebp - 8], edx
mov ecx, eax
adc ax, dx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
cmp eax, dword [edx + ecx + 0x14]
jmp 0xf33238
push edx
jmp 0x105513e
jae 0x1165488
mov esi, dword [edx + ecx + 0x1c]
clc
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
test eax, eax
jmp 0x1902389
ret
mov esp, ebp
xchg bp, bp
pop ebp
jmp 0xef898f
cmp word [ecx], ax
jmp 0xffcf1c
call eax
pop edi
bswap bx
pop ebx
pop esi
mov esp, ebp
mov bp, di
pop ebp
jmp 0xf7e799
cmp byte [esi + 1], 0x23
mov cx, si
lea ecx, [esi + 1]
jmp 0xf99eb4
cmp al, 9
ja 0x11a8b55
movsx eax, cl
mov cl, byte [esi]
clc
lea edx, [edx + edx*4]
stc
cmp sp, 0x1273
clc
lea edx, [eax + edx*2 - 0x30]
jmp 0x1901ae7
ret
push edx
jmp 0xf12b09
je 0x101dcfc
push 0
push ecx
jmp 0x11bc7d0
mov dword [ebp - 0xc], eax
js 0xf2e670
jmp 0x11d7cc5
pop edi
setne bh
pop ebx
pop esi
jmp 0x11d3bb7
jne 0xfff6ed
lea edx, [ebp - 0x114]
jmp 0x10035d8
mov edi, dword [edx + ecx + 0x18]
test edi, edi
jmp 0xff378d
inc esi
jmp 0xf7b168
mov eax, dword [ecx + 0x3c]
cmp cx, sp
cmp dword [eax + ecx], 0x4550
jne 0xffcf22
mov edx, dword [eax + ecx + 0x78]
stc
cmc
mov dword [ebp - 4], edx
cmc
jmp 0x101d1b3
je 0x11a8b55
lea eax, [ecx - 0x30]
jmp 0xfae439
inc eax
clc
stc
cmp edi, ecx
jmp 0x1056f87
ret
je 0xf2e670
mov eax, dword [edx + ecx + 0x20]
test di, 0x3a01
cmc
add eax, ecx
sub ebx, ebx
jmp 0x11b9e2c
pop edi
clc
bswap esi
pop ebx
add eax, ecx
jmp 0x1003eee
je 0xfd39bb
xor eax, eax
movsx esi, di
bswap si
pop esi
jmp 0x18f69b5
mov dword [ebp - 8], eax
jmp 0x1919afe
je 0x1165488
mov edx, dword [ebp + 8]
cmp ax, bp
cmp dh, 0xca
cmp edi, edx
jmp 0x18f6a3f
mov esp, ebp
bswap ebp
pop ebp
jmp 0xee901f
jb 0xff6e6d
mov esi, dword [ebp - 0x10]
cmc
add esi, edx
stc
clc
cmp eax, esi
jmp 0x18efa7e
push edx
movsx eax, bx
bswap eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_1]
jmp 0x1007757
pop esi
jmp 0xf37daf
pop ebp
jmp 0xfec421
call eax
mov edi, eax
test edi, edi
jmp 0xfff6e7
je 0xffcf22
mov esi, dword [ebp + 0xc]
test esi, esi
je 0xffcf22
mov eax, 0x5a4d
jmp 0xf479f7
mov dword [ebp - 0x10], eax
test esp, 0x10652cfd
cmp esi, 0x43635b86
mov dword [ebp - 8], 0xffffffff
cmp esi, 0xffff
jmp 0x191b519
test edx, edx
je 0xffcf22
mov eax, dword [eax + ecx + 0x7c]
jmp 0x191ebbe
mov cl, byte [esi + 2]
lea esi, [esi + 2]
sub edx, edx
test cl, cl
jmp 0xfe963f
je 0x1056f8d
mov byte [ebx + eax], dl
jmp 0x18e4ea8
jns 0x105eece
lea edi, [esi - 1]
jmp 0x1911d96
pop esi
jmp 0x1001105
push eax
mov al, al
jmp 0xf2f944
test edi, edi
jmp 0xfa682f
call fcn.00ef2ee0
lea esp, [esp + 4]
test eax, eax
jmp 0x102193c
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_1]
call eax
pop edi
setg bl
xchg bh, bl
pop ebx
cmova esi, esp
pop esi
mov esp, ebp
mov bp, 0x2213
movzx ebp, cx
pop ebp
jmp 0xee7f61
jb 0xeee1d0
lea ecx, [ebp - 0x114]
mov al, cl
lahf
push ecx
movsx eax, bp
setns al
mov byte [ebp + edi - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_1]
call eax
mov edi, eax
jmp 0x104c2dc
mov eax, dword [ebp + 0xc]
jmp 0xf034e4
jle 0xf2e645
lea ebx, [esi + 1]
add ecx, esi
mov ecx, dword [ebp + 8]
cmp edi, 0x55c755c7
cmp ebx, edi
jmp 0xf09d59
jne 0x11bace0
pop edi
sbb si, 0x185b
shr si, 0x54
or ebx, esp
pop ebx
btc si, bp
xadd si, si
xor eax, eax
jmp 0x102ad25
je 0x10595aa
mov edi, dword [ebp + 0xc]
movzx bx, al
lea ecx, [ebp - 0x114]
xor esi, 0x543c2274
sub eax, eax
bts si, bx
btc esi, 0x82
sub edi, ecx
lea esp, [esp]
rcl cl, cl
mov cl, al
mov ebx, 0x68e006ec
stc
btc si, ax
rol ebx, cl
shr esi, 0x92
lea esi, [ebp + eax - 0x114]
lea ecx, [eax + ebx]
jmp 0x18fbb50
mov ecx, esi
sub ecx, eax
cmp sp, ax
cmp ecx, 0x104
jmp 0xf1c211
mov esp, ebp
movzx ebp, sp
mov bp, 0x434e
cmove bp, bp
pop ebp
ret
jne 0xfe9645
push 0
jmp 0xf8f3f4
dec edi
jmp 0xf9c70a
test cl, cl
je 0x1165488
cmp cl, 0x2e
je 0x116c01a
mov cl, byte [esi + 1]
inc esi
clc
stc
test cl, cl
jmp 0x1165482
push edi
jmp 0x1960ab9
mov esp, ebp
pop ebp
jmp 0xf376bf
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
lea esi, [edi + ebx]
test ebp, esi
sar esi, 1
cmp al, 0x94
mov eax, dword [eax + esi*4]
test dl, 0xb1
push edx
cdq
test edx, 0x15cd1587
mov edx, dword [ebp + 0xc]
clc
add eax, ecx
jmp 0x104e07e
inc edi
jmp 0xfec047
jae 0xff6e6d
add eax, ecx
mov cl, byte [eax]
mov esi, eax
jmp 0x11bacd8
mov esp, ebp
jmp 0x100556b
jne 0xf586b3
cmp byte [ebp + 0x10], 0
jmp 0x1169052
xor cl, byte [edi + esi]
mov byte [esi], cl
jmp 0xee89f4
test cl, cl
jmp 0x11a8b4f
je 0x1165488
cmp eax, edx
jmp 0x1001c0a
jmp 0x105eed9
jmp 0xf2e670
ja 0xfabf8c
mov eax, esi
test di, bp
cmp eax, 0x624d6d9e
sub eax, dword [edx + ecx + 0x10]
jmp 0xffdd03
push ebx
cmp ch, 0xfb
test dx, bp
push edi
test esi, 0x4c496ce4
jmp 0x101a0f1
call fcn.00f276eb
add esp, 0xc
not bl
pop edi
not esi
mov esi, 0x1b3495
movsx ebx, sp
pop ebx
movsx esi, bp
bswap esi
pop esi
jmp 0x1170307