Function at 0xfeba72
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push eax
movzx eax, dx
push edi
cbw
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
call eax
pop esi
pop ebx
mov edi, 0x1a1d609d
not edi
pop edi
mov esp, ebp
pop ebp
jmp 0xfb7d0d
je 0x140f5b7
inc edx
cmc
cmp edx, 0x104
jmp 0x140f5b1
jne 0xea4f3f
inc esi
jmp 0xe99467
push eax
jmp 0xed6aa1
cmp byte [esi + 1], 0x23
jmp 0xe8ef47
call eax
pop esi
pop ebx
bswap edi
xchg di, di
pop edi
jmp 0xf0b609
ret
inc esi
stc
clc
test ax, 0x1132
test cl, cl
jmp 0xf0e230
pop esi
pop ebx
movzx eax, cx
cwde
nop
lea eax, [ecx + edi]
pop edi
jmp 0xf4b496
lea ecx, [esi + 1]
jmp 0xf53f71
ret
mov edx, dword [ecx + edi + 0x24]
movsx eax, di
jmp 0xf9e853
mov dword [ebp + 8], esi
jmp 0xfb64f1
jne 0xeb9c32
pop esi
bts di, si
seto bh
movsx ebx, si
pop ebx
adc edi, 0x662248d9
xor eax, eax
cmovl edi, edx
bswap edi
jmp 0xfb75dd
lea ebx, [esi - 1]
cmp cl, 0x51
test bp, 0x5d81
cmp dword [ebp + 8], ebx
jmp 0xf41b46
jne 0xedc9f2
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
clc
test eax, eax
jmp 0x140f2f9
mov esp, ebp
pop ebp
jmp 0xfdc5d3
je 0xf0e236
cmp ecx, eax
jmp 0xfa2291
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
clc
cmp dword [edx], 0x4550
jmp 0xeaa707
call fcn.00feba72
add esp, 0xc
pop esi
bswap edi
not edi
movsx bx, bl
pop ebx
jmp 0xf5a5e9
je 0xed2a5f
sub eax, eax
mov di, 0x7194
pop edi
jmp 0xf0bf0b
cmp ecx, dword [eax + edi + 0x14]
jmp 0xf3bd29
push eax
cmovo eax, edi
cwde
push edi
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0xdba319
mov cl, byte [esi + 2]
jmp 0xfac59a
push eax
call fcn.00feba72
add esp, 0xc
pop esi
xchg ebx, edi
movsx edi, dx
pop ebx
pop edi
jmp 0xf48c79
mov esp, ebp
not bp
movsx ebp, sp
mov bp, bp
pop ebp
jmp 0xe937f3
mov esp, ebp
pop ebp
jmp 0xfb768b
jne 0xf5e569
pop esi
cmc
movzx ebx, cx
btr ebx, edi
pop ebx
sub edi, edi
sub eax, eax
movzx edi, ax
pop edi
jmp 0xf747f9
je 0xfde4cf
mov ebx, dword [ebp + 0xc]
sbb esi, 0x50252549
lea eax, [ebp - 0x114]
and cl, 0xe7
xor edx, edx
movsx esi, bp
sub ebx, eax
cwde
mov edi, edi
rol ax, 0x50
bswap esi
mov eax, 0xf782647
mov cl, dl
btr esi, ebp
movsx esi, ax
rol eax, cl
adc esi, edx
lea esi, [ebp + edx - 0x114]
stc
add al, dl
test dx, cx
xor al, byte [ebx + esi]
jmp 0x11b8a4d
jl 0xf41b5b
jmp 0x11a26fc
push edx
jmp 0xf06c37
jae 0xf0e236
mov edx, dword [eax + edi + 0x1c]
test sp, ax
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0xe9de74
jle 0x11a26f4
mov eax, dword [ebp - 4]
btr si, 0x46
mov si, cx
mov esi, dword [ebp - 8]
cmc
cmp esi, dword [eax + edi + 0x14]
jae 0xf0e236
mov ecx, dword [eax + edi + 0x1c]
clc
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0xeb9c2c
jae 0xf0e236
mov dword [ebp + 8], 0
clc
test ecx, ecx
jbe 0xfc8395
lea ebx, [ebp - 0x114]
sub dl, cl
sub ebx, eax
or dl, 0x80
dec dl
mov dl, byte [eax]
test edx, esi
jmp 0x118dcac
mov esp, ebp
movzx ebp, dx
pop ebp
ret
mov esp, ebp
cmovl bp, bp
xchg bp, bp
bswap bp
pop ebp
jmp 0xfd5e79
je 0xef2be1
push 0
push ecx
jmp 0xdb4c67
push ecx
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA]
jmp 0x1191e4d
pop edi
mov esp, ebp
mov ebp, edi
pop ebp
jmp 0xdc30b9
cmp cl, 0x2e
je 0xfb6045
mov cl, byte [esi + 1]
jmp 0xdcb48b
mov dword [ebp + 8], 0
stc
mov dword [ebp - 0xc], edx
test bp, cx
jmp 0xfb302c
mov cl, byte [esi]
test cl, cl
jmp 0xf99e2a
je 0xf41b5b
mov edx, dword [eax + edi + 0x20]
dec ebx
test ch, 0x74
cmc
add edx, edi
test bp, di
jmp 0xf71ba0
mov esp, ebp
mov bp, bp
pop ebp
ret
je 0xf0e236
cmp eax, edi
jmp 0xfac744
jne 0xfac5ab
push 0
jmp 0xf393e1
lea eax, [edx + esi*2]
setge cl
bswap edx
movzx ecx, word [eax + edi]
mov dh, cl
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0xea4f3f
jb 0xe841d0
mov edx, dword [ebp - 0x10]
add edx, eax
stc
cmc
cmp ecx, edx
jae 0xe841d0
lea eax, [ecx + edi]
mov cl, byte [eax]
bts esi, ebx
test ah, dh
mov esi, eax
test cl, cl
jmp 0xfd0a7e
add esi, 2
cmp bp, bp
cmc
sub edx, edx
test cl, cl
je 0xf99e30
mov bl, cl
stc
cmp cx, bx
sub bl, 0x30
jmp 0x11a870e
jne 0xdb8073
cmp byte [ebp + 0x10], 0
jmp 0xf22cb3
test ebx, ebx
jmp 0xf24063
mov ecx, esi
cmp edi, 0x6e5a6089
sub ecx, eax
test esp, edx
cmp ecx, 0x104
jmp 0xf47404
jmp 0xea4f3f
pop edi
jmp 0xeb1e93
ret
ret
mov ebx, dword [eax + edi + 0x18]
test bl, bh
test ebx, ebx
jmp 0xf73430
inc eax
test si, 0x162c
mov dword [ebp + 8], edx
cmp edi, edi
cmp edi, 0x20c540e9
stc
cmp edx, ecx
jb 0xf47429
mov eax, dword [ebp + 8]
movzx ecx, cx
mov cx, bp
movsx ecx, bx
lea ecx, [ebp - 0x114]
jmp 0xf55046
je 0xf0e236
mov edi, edi
jmp 0xf5e569
ja 0xf99e30
movsx ecx, cl
lea edx, [edx + edx*4]
cmp bh, 0x67
lea edx, [ecx + edx*2 - 0x30]
jmp 0xf7318d
ret
ret
mov eax, dword [ebp + 0xc]
jmp 0xd90035
push ebp
mov ebp, esp
test edi, esi
clc
sub esp, 0x114
push edi
btc di, di
movzx edi, ax
sal di, 0x3c
mov edi, dword [ebp + 8]
test edi, edi
je 0xedc9f2
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x11a349d
je 0xfc8395
mov byte [ebx + eax], dl
xchg dx, dx
mov edx, dword [ebp + 8]
inc edx
jmp 0xfc837b
test dl, dl
jmp 0xff026f
mov ecx, dword [ebp - 4]
jmp 0xe95ed1
call eax
test eax, eax
jmp 0x11991a7
jne 0xf7e569
lea edx, [ebp - 0x114]
movsx eax, dx
not ax
push edx
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA]
call eax
test eax, eax
jmp 0xf7e563
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
or eax, esp
mov eax, dword [ebp + 8]
or esi, 0x225f58c4
mov si, 0x4faf
lea esi, [ebx + eax]
rcr ah, 0xd1
bts eax, esi
mov eax, dword [ebp + 0x10]
cmc
stc
push eax
sar esi, 1
test esi, 0x585c5349
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.00ec7f1a
add esp, 4
stc
cmc
cmp eax, 0xffffffff
je 0xea4f34
test eax, eax
je 0x118ed93
cmp eax, 1
jmp 0xdae765
je 0xedc9f2
mov eax, 0x5a4d
cmc
test edi, 0x77e34425
cmp word [edi], ax
jmp 0xedc9ec
inc esi
test dl, dl
cmp bl, 9
jmp 0xfd5947
mov byte [esi], al
jmp 0xda3eaf
je 0xedc9f2
mov edx, dword [edx + 0x7c]
push ebx
cmc
stc
test ebx, 0x21ae05f1
push esi
clc
cmp ecx, ebp
or esi, 0xffffffff
clc
mov dword [ebp - 0x10], edx
cmc
mov dword [ebp - 8], esi
clc
cmp ecx, 0xffff
ja 0xfc61ce
sub ecx, dword [eax + edi + 0x10]
cmp sp, 0x387a
jmp 0xee4178
jb 0xf22cdb
lea eax, [ebp - 0x114]
jmp 0xee50a0