Function at 0x8cd153
Capabilities:
Parse pe header

Disassembly:
call eax
mov edi, eax
cmc
test di, 0x3cfa
test edi, edi
jmp 0x91c0f7
push ebp
xchg ecx, ebp
mov ebp, esp
shl ecx, 0x11
mov ecx, dword [ebp + 8]
test edi, esp
test cx, 0x6db8
lea esp, [esp - 0x114]
cmp dl, 0xe1
test eax, ebp
push esi
cmp ecx, 0x61561f03
cmc
clc
test ecx, ecx
jmp 0xfbb2a7
push edi
jmp 0xf9c79f
mov ecx, esi
sub ecx, eax
cmc
cmp si, 0x1b82
cmp ecx, 0x104
jmp 0xbc97a8
mov byte [esi], cl
jmp 0xa58cbc
ja 0x9ae677
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
mov dword [ebp - 8], eax
jmp 0xacf791
je 0x8fc30a
cmp eax, edx
jmp 0xa2c85f
inc edi
inc eax
test bl, ah
cmp edi, ecx
jmp 0xba4989
jne 0xbb407a
pop edi
pop ebx
bts si, dx
xor eax, eax
cmovb si, di
jmp 0xa7a0c3
mov eax, dword [ecx + 0x3c]
jmp 0xa1542e
je 0x8fc30a
mov edx, dword [ebp + 8]
cmp edi, edx
jne 0xa0253a
cmp byte [ebp + 0x10], 0
jmp 0xb31f09
ret
je 0x9934d1
mov eax, 0x5a4d
cmp word [ecx], ax
jmp 0x9934cb
jns 0xb24cb3
lea edi, [esi - 1]
jmp 0xbc82b6
ret
je 0x8fcd3c
sub eax, eax
mov esi, ebx
jmp 0xa1fc57
mov edi, dword [edx + ecx + 0x18]
test dh, 0x69
test edi, edi
je 0xacf791
mov eax, dword [edx + ecx + 0x20]
add eax, ecx
xor ebx, ebx
dec edi
jmp 0xa208c9
je 0xba498f
lea ebx, [ebp - 0x114]
ror dl, 0xea
jmp 0xfa4f65
test edi, edi
jne 0x91c0fd
lea edx, [ebp - 0x114]
push edx
bswap ax
movzx eax, cx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x8c6f3b
ret
js 0xacf791
jmp 0xbb9f99
cmp byte [esi + 1], 0x23
movsx ecx, dx
setb ch
lea ecx, [esi + 1]
je 0xa7479c
push 0
jmp 0xa85b36
cmp dword [eax + ecx], 0x4550
jmp 0xbaa9b7
mov esp, ebp
pop ebp
jmp 0x9331b3
pop esi
jmp 0xa44d56
mov dword [ebp - 0xc], eax
jmp 0x9ff3d2
mov eax, dword [eax + esi*4]
test cl, 0xb7
push edx
mov edx, dword [ebp + 0xc]
cmp esi, 0x6bb53fc8
clc
add eax, ecx
jmp 0xb5f42a
cmp ebx, edi
jmp 0xa86788
jb 0xaa6ae8
mov esi, dword [ebp - 0x10]
clc
cmc
test esi, 0x73f22da6
add esi, edx
cmp eax, esi
jmp 0xbb405e
cmp eax, 0x104
jb 0xb31f2e
lea eax, [ebp - 0x114]
push eax
cwde
push edx
bswap ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xb5278d
mov esp, ebp
movsx ebp, ax
mov bp, 0x135
pop ebp
jmp 0xa5c3cf
je 0xa3d918
inc eax
stc
clc
jmp 0xa3d90d
ret
ret
mov cl, byte [esi + 2]
cmp edi, ebp
stc
lea esi, [esi + 2]
clc
cmc
stc
xor edx, edx
stc
test cl, cl
je 0xb91d8e
lea eax, [ecx - 0x30]
jmp 0xfa707f
pop esi
jmp 0xa154ce
push ecx
jmp 0xa8dabd
jle 0xbb9f96
jmp 0xacf78b
push edi
call fcn.008cd153
add esp, 0xc
movzx edi, bx
xchg bx, di
pop edi
not bl
movzx ebx, bx
jmp 0xb549df
pop edi
rcr si, 0xee
pop ebx
add eax, ecx
pop esi
mov esp, ebp
xchg ebp, ebp
movsx ebp, ax
pop ebp
jmp 0x9e0a5f
jae 0x8fc30a
mov esi, dword [edx + ecx + 0x1c]
cmc
lea eax, [esi + eax*4]
stc
test ax, di
mov eax, dword [eax + ecx]
test eax, eax
jmp 0x8f5536
mov eax, dword [ebp + 8]
sub ecx, ebp
stc
mov ecx, dword [ebp - 4]
adc dx, bx
xor dh, 0xe2
mov edx, dword [ecx + eax + 0x24]
btc cx, si
btc ecx, 0xdd
cmove cx, cx
lea ecx, [edx + esi*2]
rcl dh, 0xbf
bts dx, ax
test sp, si
movzx edx, word [ecx + eax]
mov dword [ebp - 8], edx
mov ecx, eax
dec ax
bswap dx
mov edx, dword [ebp - 4]
add ax, cx
mov eax, dword [ebp - 8]
cmc
cmp eax, dword [edx + ecx + 0x14]
jmp 0xaaf854
jle 0xacf750
lea ebx, [esi + 1]
movsx ecx, si
mov ecx, dword [ebp + 8]
test ax, bp
jmp 0xa2b51a
je 0xba498f
mov byte [ebx + eax], dl
jmp 0x8fa1b5
mov esp, ebp
cmova bp, cx
not bp
pop ebp
ret
je 0x8b97a4
mov edi, dword [ebp + 0xc]
not cl
lea ecx, [ebp - 0x114]
bsf ebx, esi
xor eax, eax
sub edi, ecx
lea esp, [esp]
not si
movzx esi, cx
mov cl, al
cmc
mov ebx, 0x78e54540
rol ebx, cl
add esi, eax
lea esi, [ebp + eax - 0x114]
neg cl
lea ecx, [eax + ebx]
cmc
test ebp, 0x2d9c7607
cmp ch, 0xca
xor cl, byte [edi + esi]
jmp 0x8e51d1
call eax
pop edi
mov ebx, ebp
bswap esi
setnp bl
pop ebx
not si
cmovo esi, esp
movzx esi, sp
pop esi
jmp 0xb31ee3
pop ebx
pop esi
jmp 0xb5da46
mov esp, ebp
bswap bp
pop ebp
jmp 0x96d5db
call fcn.00b656fa
add esp, 4
cmp al, 0x61
stc
test eax, eax
jmp 0x9609e8
mov byte [ebp + edi - 0x114], 0
lahf
bswap eax
mov al, cl
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
mov edi, eax
jmp 0x9da896
je 0x8daf7c
mov cl, byte [esi + 1]
jmp 0xbb36ca
jne 0xa747b3
push 0
jmp 0xbb169d
jb 0xfa4f68
lea ecx, [ebp - 0x114]
xchg ah, ah
push ecx
setp al
jmp 0xb62996
jne 0x9934d1
mov edx, dword [eax + ecx + 0x78]
cmp eax, 0x14b37016
cmc
mov dword [ebp - 4], edx
test bx, si
test edx, edx
je 0x9934d1
mov eax, dword [eax + ecx + 0x7c]
push ebx
cmp bp, cx
push edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0xffffffff
cmp esi, 0xffff
jmp 0x8eac81
push edx
jmp 0x8d63ff
inc esi
test cl, cl
jmp 0x8fc304
jae 0xaa6ae8
lea eax, [eax + ecx]
sar cl, cl
btc esi, ecx
mov cl, byte [eax]
clc
mov esi, eax
cmc
test cl, cl
je 0x8fc30a
cmp cl, 0x2e
jmp 0xb68058
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
lea esi, [edi + ebx]
clc
sar esi, 1
jmp 0xa24e8d
jmp 0xb24cbf
jae 0x8fc30a
xor edi, edi
test ecx, ecx
jmp 0x9d565e
call fcn.008cd153
add esp, 0xc
mov bx, 0x5f68
not bl
pop edi
bswap si
pop ebx
mov si, cx
pop esi
mov esp, ebp
not bp
pop ebp
jmp 0xa732e3
sub ebx, eax
cmc
mov dl, byte [eax]
test dl, dl
jmp 0xb2805d
inc esi
cmp ebp, 0x17be1e88
cmp al, 9
ja 0xb91d8e
movsx eax, cl
xchg cl, cl
mov cl, byte [esi]
test bp, dx
lea edx, [edx + edx*4]
jmp 0xfbddd1
je 0x9934d1
mov esi, dword [ebp + 0xc]
test ecx, esp
cmp ebx, 0x1b7c3253
stc
test esi, esi
jmp 0x94166d
lea edx, [eax + edx*2 - 0x30]
cmc
stc
test cl, cl
jmp 0xb91d88