Function at 0x13c89fa
Capabilities:
Parse pe header

Disassembly:
push edx
xor al, byte [ecx + eax]
movzx ecx, dl
xor edx, edx
add dx, ax
dec ecx
movsx eax, word [esp + ecx - 0xfe]
neg dword [esp + ecx - 0xfe]
movzx eax, byte [ebp + ecx - 0x100]
inc dword [esp + ecx - 0xfe]
adc ecx, 0xf338a7ad
lea ecx, [ecx + 0x50b0e14]
xor al, bl
or ecx, 0x9497168a
pop ecx
inc al
ror al, 1
sar cx, 0xe
xor cx, cx
sal cl, 0x61
dec al
not cx
xor al, cl
ror al, 1
add ecx, 0x1cb85b3c
xor al, 0x29
and ecx, ecx
or cl, ch
neg al
xor bl, al
add eax, esp
mov word [eax + ecx*4 - 0x72e56dec], dx
movsx eax, cl
xor ecx, 0xd90420b8
push ecx
mov edx, dword [ebp + eax - 0x81]
xchg dword [esp + eax - 0x7b], eax
sbb ebp, 6
xor edx, ebx
bswap edx
sar dword [esp], 0x10
sar dword [esp], 0xdf
rol edx, cl
sub edx, 0x383e96b9
shr eax, 0x61
sbb dword [esp + eax - 0x62debde1], 0xc529f20d
rol edx, 1
xor ebx, edx
add esi, edx
movzx edx, al
mov dword [esp + eax - 0x62debde1], esi
ret
inc esp
or dword [esp + ebp*2 - 0x7f36], esi
inc ecx
push eax
dec esp
adc esp, ecx
rol ebp, 0x49
dec esp
mov dword [esp + ebp*4 - 0x1fce000], esp
ret 0x10
lea ecx, [ecx + eax*2 + 0x70a7a535]
inc ecx
shl cl, 0xe5
inc ecx
mov eax, 0x318aff02
shl byte [esp + ebp*2 - 0x7f32], 0x63
dec eax
mov dword [esp + ebp*2 - 0x7f30], esi
mov esi, 0x53fb5bf
movsx ebx, al
xor dword [esp + ebp*4 - 0xfe68], ecx
inc al
sub al, 0xb3
dec eax
mov esi, dword [esp + ebp*4 - 0xfe68]
dec eax
sal ebx, 0x2d
dec eax
arpl cx, cx
jns 0x126b23d
add esi, eax
mov eax, 0x6c38e838
call fcn.012417b7
inc ecx
mov ebx, 0xa8a8d2a4
inc ecx
movsx eax, bl
inc ecx
bswap ebx
dec ecx
sub edi, 4
dec esp
lea esi, [eax*4 - 0xefee0c2]
inc ecx
mov eax, dword [edi]
call fcn.01237805
pop edx
mov dword [edi + 4], eax
movzx ecx, dx
lea ebp, [ebp + ecx*2 - 0x18d78]
mov eax, dword [ecx + ebp - 0xc6ba]
xor eax, ebx
ror dx, 0xcd
shr edx, cl
call fcn.01243ef5
xor ecx, esi
dec eax
and dword [esp + ebp - 0x3f95], 0x9f16261d
jb 0x139ffca
not ecx
mov edx, ebp
dec esp
lea esi, [edx + edi*4 + 0x459a030f]
inc eax
setbe bh
inc ecx
xor ecx, 0x2938891f
dec ecx
inc sp
sub dword [esp + ebp - 0x3f9c], esi
bswap ecx
xadd dword [esp + ebp*8 - 0x1fcd7], edi
jne 0x133b9d6
dec cl
sub edx, edx
movzx eax, dl
shr dl, 0x64
neg cl
not edx
xor bl, cl
add ecx, esp
xor dl, al
jno 0x1225010
call fcn.012586cf
sub ah, al
adc dword [ebp + 0x11], edx
push ecx
inc ecx
scasb al, byte es:[edi]
nop
loop 0x137b77d
test dword [ebp - 0x6a], esi
nop
loop 0x137b783
lodsd eax, dword [esi]
insd dword es:[edi], dx
lcall 0x8e9d, 0x596be290
imul ebx, dword [ecx - 0x63], 0xffffff8e
nop
loop 0x137b78f
lds edi, [0x6be290d2]
adc dword [edx + 0xd7d18ec], ebp
loope 0x137b71d
fdivr dword [eax - 0x55]
cmp esp, ebx
and ebp, edx
inc esi
push ecx
cmpsd dword [esi], dword es:[edi]
mov ds, word [ecx - 0x6a]
mov ah, 0x32
dec edi
fxch st(4)
lahf
and edx, 0xffffffd6
jmp 0xc8270b2a
mov bl, ah
in eax, dx
push dword [ebx]
ret
lea eax, [ecx + eax + 0xf7463a]
lea edx, [ecx + ecx - 0x6ce894c3]
pop ss
xchg ebx, eax
add cx, cx
xor eax, 0xd89a97a6
call fcn.013809ee
movzx ecx, ax
ror eax, cl
mov edx, dword [ebp + ecx*4 - 0x38f24]
lea ebp, [ecx + ebp - 0xe3cc]
rol ecx, cl
sar cx, 9
je 0x131cd62
xor edx, ebx
add eax, ecx
jno 0x1270aae
out 9, eax
mov esi, 0x11a412fd
mov cl, 0x8a
scasb al, byte es:[edi]
jecxz 0x137b80f
inc esp
xor edx, esi
dec edx
lea ebx, [ebx*8 - 0x33650c4d]
dec esp
lea ecx, [ebx + ecx*4 + 0x4a9516b7]
dec eax
mov dword [esp + ecx - 0x6f25bf16], 0x6c0ac098
inc ecx
dec edx
dec ecx
ror ebx, 0xfc
jae 0x12257d5
dec ecx
sub edi, 4
inc ecx
mov esi, 0xeb10ca3a
inc ecx
mov ebx, esi
inc ecx
mov edx, dword [edi]
movsx edi, bl
mov eax, edi
inc ecx
neg esi
xor edx, esi
ror edx, 3
dec esp
lea ecx, [edi + edi*8 + 0x4f0d2613]
not edx
jmp 0x133bbee
and dword [esp + eax*8 - 0x11546524], 0x1bdf72b
xor dword [esp + eax - 0x22a8c9d], ecx
dec esp
or edx, dword [esp + eax*2 - 0x455194a]
sal ebx, 0x50
sar dword [esp + eax - 0x22a8ca1], 0xb1
dec eax
mov esi, dword [esp + eax - 0x22a8c9d]
push eax
inc ebp
movzx ebx, cl
push ebx
dec eax
arpl cx, cx
inc esp
mov esi, ebx
inc ecx
mov edi, edx
dec esp
adc esp, ecx
sar ax, 0x83
add word [esp + eax*4 - 0x8abc63a], 0xfcb4
inc ecx
sal dl, 0x43
inc cx
movzx ebp, byte [ebp + eax*2 - 0x455e328]
pop ebx
inc ecx
and al, dh
inc ecx
add al, byte [ebp + eax*4 - 0x8abc3fe]
inc edx
dec dword [esp + ecx - 0x8cd1]
inc ecx
neg ebx
dec edi
lea ebp, [ecx + ebp - 0x8cda]
inc ecx
mov ecx, esi
rol di, 0x8e
inc eax
and ch, al
inc esp
movzx eax, di
call fcn.017895cd
lea edx, [esp + edx + 4]
mov eax, dword [edx]
lea edx, [ecx + ecx*2 + 0x7a93df98]
rol dl, 1
shr ecx, 0x35
mov dword [ecx + edi - 0x5b2], eax
mov ecx, dword [ebp + ecx*8 - 0x2d75]
pop eax
xor ecx, ebx
rol edx, 0x61
not dx
rol ecx, 2
and dx, 0x2fa5
call fcn.0179dec9
inc ecx
mov esi, 0xad9e6205
not edx
jle 0x134cff5
dec cx
inc ecx
mov ebx, ebx
dec eax
mov dword [esp + ebp*4 - 0x10], esi
inc cx
inc edx
xor dword [esp + ebp + 8], edx
inc ecx
pop ebx
inc esp
movsx ecx, bl
dec edx
and ebx, dword [esp + edx*2 - 0x12]
dec eax
mov esi, dword [esp + ebp]
inc esp
movzx ebx, bx
dec eax
arpl dx, dx
dec eax
mov dword [esp + ebp], 0xdf8521aa
dec eax
sar dword [esp + ebp], 0x81
dec esp
sbb ecx, ecx
dec esp
adc esp, edx
sub word [esp + ebp - 5], cx
inc ebp
movzx esi, byte [edi + ebp*2 - 0x15]
dec ebp
lea edi, [edi + ebp - 0xd]
dec eax
inc ebx
jb 0x1377ebd
movsx eax, word [esp + ebp*2 - 0x7f36]
dec ebp
lea edi, [edi + ebp - 0x3fa0]
inc esp
mov ecx, dword [esp + ebp - 0x3f97]
inc ecx
mov ecx, dword [edi + ebp*2 - 0x7f38]
jae 0x137b6a1
shr ecx, cl
ror eax, 1
shl edx, cl
bswap eax
sub ecx, 0x5e8c96ba
rol eax, 2
and edx, edx
ror edx, cl
xor ebx, eax
jmp 0x1359309