Function at 0x27be76f
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop ebp
jmp 0x1fea0c7
mov dword [ebp - 0xc], eax
js 0x210d834
jmp 0x217ffdc
mov eax, dword [ebp + 0xc]
jmp 0x211f589
call eax
pop edi
cmovg si, sp
movsx ebx, sp
mov ebx, esi
pop ebx
mov esi, esp
movsx esi, dx
pop esi
jmp 0x27f6260
ret
push edi
jmp 0x27f5078
mov byte [esi], cl
jmp 0x210298d
mov eax, dword [ecx + 0x3c]
test esi, 0x3b440226
cmp dword [eax + ecx], 0x4550
jmp 0x212f69d
push ecx
push edi
jmp 0x1fdfa7a
je 0x2721b45
mov cl, byte [esi + 1]
jmp 0x27c7006
call fcn.027be76f
add esp, 0xc
mov bx, 0x27e5
movzx ebx, si
bswap ebx
pop edi
mov bx, bx
bswap ebx
pop ebx
not si
pop esi
jmp 0x209db1e
pop esi
mov esp, ebp
pop ebp
jmp 0x1f8beb7
ret
inc esi
cmp sp, 0x2929
clc
test al, 0xcd
cmp al, 9
jmp 0x20eacb4
je 0x215ae1a
lea ebx, [ebp - 0x114]
sub ebx, eax
cmp dx, 0xef1
rcl dl, cl
mov dl, byte [eax]
test dl, dl
jmp 0x212d64e
mov esp, ebp
mov ebp, ecx
mov bp, 0x1f43
cmovle ebp, ebp
pop ebp
jmp 0x2170ce7
jae 0x27c7013
sub edi, edi
cmp dx, sp
test ecx, ecx
jmp 0x20237a9
mov eax, dword [ebp + 8]
stc
cdq
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + eax + 0x24]
neg cx
shld cx, sp, 0x43
lea ecx, [edx + esi*2]
dec dh
shr dh, 0x4f
movzx edx, word [ecx + eax]
rol ch, 1
mov dword [ebp - 8], edx
stc
jmp 0x210d82c
cmp eax, 0x104
jb 0x2717456
lea eax, [ebp - 0x114]
jmp 0x20efc48
mov esp, ebp
not bp
pop ebp
ret
call eax
pop edi
cmovle bx, sp
mov bx, 0x5ec
movsx bx, dh
pop ebx
mov si, bx
pop esi
mov esp, ebp
movsx ebp, si
pop ebp
jmp 0x2132dff
mov cl, byte [esi + 2]
stc
lea esi, [esi + 2]
stc
test esp, 0x4edd467a
sub edx, edx
test edi, 0x2db55adf
test cl, cl
jmp 0x27a70b6
ret
pop edi
pop ebx
add esi, esp
or si, 0x4af8
add eax, ecx
pop esi
jmp 0x27aa5fe
test eax, eax
jmp 0x214a0f1
test edi, edi
jmp 0x27c76c0
je 0x27c7013
cmp cl, 0x2e
jmp 0x1fca965
ja 0x2822333
movsx eax, cl
and cl, 0x84
mov cl, byte [esi]
stc
test esi, esi
lea edx, [edx + edx*4]
test ecx, 0x15b243f2
clc
cmc
lea edx, [eax + edx*2 - 0x30]
test cl, cl
jmp 0x282232d
push eax
push edx
movzx eax, bp
cbw
not al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x20a184d
je 0x2745640
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x2745640
mov eax, 0x5a4d
cmp ebx, esp
cmp word [ecx], ax
jmp 0x274563a
je 0x209c47c
inc eax
jmp 0x209c471
mov ecx, eax
mov edx, dword [ebp - 4]
rcl ah, 0x51
mov eax, dword [ebp - 8]
cmp eax, dword [edx + ecx + 0x14]
jmp 0x277d090
push eax
cwde
push edx
bswap eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1f8ae5f
jb 0x20cb896
mov esi, dword [ebp - 0x10]
cmp edi, eax
add esi, edx
cmp eax, esi
jmp 0x271d099
je 0x215ae1a
mov byte [ebx + eax], dl
jmp 0x278ba63
jne 0x2745640
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
cmp edi, 0x78f641e1
cmc
test edx, edx
jmp 0x27cc69b
ret
jns 0x2746d90
lea edi, [esi - 1]
jmp 0x2791742
mov esp, ebp
jmp 0x1bd5d11
jb 0x20237be
lea ecx, [ebp - 0x114]
movsx ax, dh
not ax
nop
push ecx
cwde
cmovo ax, di
not eax
mov byte [ebp + edi - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
mov edi, eax
test edi, edi
jmp 0x217ff8e
push edx
jmp 0x1f97c6d
ret
jne 0x27c76c6
lea edx, [ebp - 0x114]
mov ax, si
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x27c2593
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
neg esi
sar si, 0x2d
lea esi, [edi + ebx]
sar esi, 1
mov eax, dword [eax + esi*4]
cmp al, 0xc0
push edx
ror dh, cl
bsr dx, dx
mov edx, dword [ebp + 0xc]
test ax, 0x6504
add eax, ecx
jmp 0x278b366
je 0x1f88497
mov edi, dword [ebp + 0xc]
lea ecx, [ebp - 0x114]
sbb ebx, esp
xchg si, si
sub eax, eax
cmovae si, cx
shl bl, 0xb
sbb si, 0x653d
sub edi, ecx
lea esp, [esp]
btc ebx, esp
mov cl, al
mov ebx, 0x49874850
rol ebx, cl
add esi, esp
lea esi, [ebp + eax - 0x114]
shl ch, cl
setbe cl
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
jmp 0x1f9c2bc
jae 0x20cb896
add eax, ecx
mov cl, byte [eax]
bsf esi, ebp
rcl esi, 0x28
shr si, 0x35
mov esi, eax
clc
test cl, cl
jmp 0x20e3caf
mov ecx, esi
clc
test bp, 0x4751
cmp si, 0x4a60
sub ecx, eax
cmp ecx, 0x104
jmp 0x202e566
je 0x1fc06dd
xor eax, eax
xchg si, si
jmp 0x1fea057
jle 0x2090e07
lea ebx, [esi + 1]
cmovge ecx, esi
mov ecx, dword [ebp + 8]
cmp ebx, edi
jmp 0x27ddd88
mov dword [ebp - 8], eax
jmp 0x210d834
je 0x210d834
mov eax, dword [edx + ecx + 0x20]
cmc
cmp di, 0x24f1
add eax, ecx
cmc
sub ebx, ebx
jmp 0x27f1654
ja 0x27b1cf1
mov eax, esi
cmp bl, 8
test sp, bp
clc
sub eax, dword [edx + ecx + 0x10]
jmp 0x274c31f
jae 0x27c7013
mov esi, dword [edx + ecx + 0x1c]
test ebp, ebp
cmp sp, 0x447d
clc
lea eax, [esi + eax*4]
clc
cmc
mov eax, dword [eax + ecx]
test eax, eax
jmp 0x2825f0c
call fcn.01fac47e
lea esp, [esp + 4]
jmp 0x20dab4e
inc edi
jmp 0x27ce5e5
jmp 0x2746d9c
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
je 0x20c4944
push 0
jmp 0x1fc7638
je 0x2822333
lea eax, [ecx - 0x30]
jmp 0x1fed6e3
mov esp, ebp
bswap ebp
pop ebp
jmp 0x20c58f7
mov edi, dword [edx + ecx + 0x18]
clc
cmp bx, sp
test edi, edi
jmp 0x275bb46
push ebp
mov ebp, esp
bswap ecx
sar ch, cl
mov ecx, dword [ebp + 8]
test cx, sp
stc
sub esp, 0x114
cmc
test edi, 0x7da81d24
push esi
cmc
cmp bl, cl
test ecx, ecx
jmp 0x20f05de
call eax
mov edi, eax
test si, dx
jmp 0x20e21bf
inc esi
cmc
test dx, ax
test cl, cl
jne 0x20e3cb5
pop edi
bts bx, di
pop ebx
xor eax, eax
pop esi
jmp 0x2024b82
je 0x27c7013
mov edx, dword [ebp + 8]
cmp ebp, 0x10d90880
jmp 0x2802b33
je 0x2745640
mov eax, dword [eax + ecx + 0x7c]
stc
push ebx
push edi
mov dword [ebp - 0x10], eax
test di, sp
cmp di, 0x3eed
mov dword [ebp - 8], 0xffffffff
test esi, esi
cmp esi, 0xffff
jmp 0x276f0c0
inc eax
test cl, 0xd
cmp edi, ecx
jmp 0x215ae14
jle 0x217ffd9
jmp 0x210d82e
dec edi
jmp 0x1bdcde8
call fcn.027be76f
add esp, 0xc
pop edi
xchg bl, bh
mov esi, 0x29ba0ffa
pop ebx
pop esi
jmp 0x214c9b5
mov esp, ebp
mov bp, 0x38e3
pop ebp
ret
cmp edi, edx
jne 0x2791cb7
cmp byte [ebp + 0x10], 0
jmp 0x2717428
jne 0x27a70bc
push 0
jmp 0x216ce94
je 0x27c7013
cmp eax, edx
jmp 0x21283b9