Function at 0x8e4e2d
Capabilities:
Parse pe header

Disassembly:
add byte [eax], al
stosd dword es:[edi], eax
push eax
call fcn.008ed0e3
in eax, 0xc9
ret
jns 0x8e4e49
jmp 0x8e4e49
pushal
jae 0x8e4e65
jb 0x8e4e65
cli
popfd
insb byte es:[edi], dx
scasb al, byte es:[edi]
insb byte es:[edi], dx
in al, dx
bound eax, qword [0x60e120f4]
not byte [ecx + 0x138bb360]
and esi, 0x15
xchg esp, eax
ror byte [ebx + 0x177c2404], cl
mov eax, dword [esp]
jl 0x8e4e81
jge 0x8e4e81
aam 0xb3
dec esi
sahf
mov eax, dword [0x22d7b022]
loopne 0x8e4ec9
rol byte [eax + 0x27], cl
rol byte [esi], cl
out 0x66, eax
hlt
xchg esi, ebp
jl 0x983a24
jge 0x983a24
jge 0x8e4e7e
je 0x8e4e1a
push ebp
dec ecx
retf 0x3f58
xor ecx, dword [ebx - 0x74f7dbbc]
dec eax
or byte [ebx], dh
enter 0xffffffffffffc8e8, 0xffffffffffffffde
add dword [eax], eax
push ebp
mov ebp, dword [eax + 0x18]
push dword [eax + 0xc]
push dword [eax + 0x10]
push dword [eax + 0x14]
call fcn.00902d78
add esp, 0xc
pop ebp
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [edx], eax
mov eax, 3
ret
pop esi
mov eax, 1
jle 0x982948
jmp 0x982948
push edx
mov edx, ebp
lea edx, [edx + 8]
mov esi, dword [edx]
pop edx
lea ecx, [ecx + ecx*2]
lea ebx, [esi + ecx*4]
jge 0x9857ed
jl 0x9857ed
push ds
cwde
push cs
imul ebx, dword [eax - 0x64f47de1], 0xc58c0dfe
pushal
pop dword [esp + 0x16]
pop word [esp + 5]
push dword [esp + 0xe]
pop word [esp + 0x12]
mov word [esp + 5], cx
mov dword [esp + 0x18], esi
pushfd
push dword [esp + 2]
lea esp, [esp + 1]
pop word [esp + 2]
push word [esp]
lea esp, [esp + 3]
lea esp, [esp + 0x1c]
push edi
call fcn.008e4a74
add esp, 8
test eax, eax
je 0x9820ec
test dword [eax + 0x24], 0x20000000
je 0x9820ec
jmp 0x98206e
mov edx, esi
jmp 0x982160
pushal
xchg ecx, eax
mov ebp, dword [esp]
mov ebp, 0x5c293767
mov cx, word [esp]
jge 0x9836b0
jl 0x9836b0
ficomp word [esi - 0x34]
stosd dword es:[edi], eax
mov dl, 0x10
xchg edi, eax
pop es
bound edx, qword [ecx + 0x66fdcb4c]
push ebp
push bp
push word [esp + 1]
je 0x98213a
jne 0x98213a
or eax, 0x8b781989
push cs
out dx, al
outsd dx, dword [esi]
call [edx - 0x74990f97]
or eax, dword [ebx - 0x7af00007]
or al, 0xff
invalid
mov ecx, dword [ebx]
cmp ecx, 0xffffffff
jne 0x981fd8
jmp 0x981f78
pop esi
xor eax, eax
pop ebx
pop ebp
ret
push dword [esp]
pushfd
pushfd
mov dword [esp + 0xc], esi
ja 0x9840ff
jbe 0x9840ff
fistp dword [edi - 0x31]
stosb byte es:[edi], al
pop ecx
mov bh, 0x5b
fmul dword [esi + 0x29]
fcomp dword [edx]
push 2
mov word [eax - 0x7699dbd4], cs
add al, 0x24
mov byte [esp], ch
mov word [esp], ax
mov word [esp + 1], dx
jl 0x982116
jge 0x982116
jmp 0x6a3320be
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x9820c1
pushal
sub ecx, edi
lea esp, [esp + 0x20]
and ecx, 0xfffff000
mov esi, ecx
cmp esi, edx
je 0x9820c1
mov ecx, dword [eax + 0xc]
push ax
add esp, 0
mov word [esp], dx
add esp, 1
mov byte [esp], ch
cmc
add esp, 0
sub esp, 0
lea esp, [esp + 1]
cmp esi, ecx
pushfd
lea esp, [esp + 4]
jb 0x9820a1
push edi
pushal
bswap ebp
bswap edx
mov dword [esp], eax
pushfd
push word [esp + 3]
push word [esp + 5]
lea esp, [esp + 4]
lea esp, [esp + 3]
lea esp, [esp + 1]
popal
lea edi, [edi + 8]
mov edx, dword [edi]
pop edi
sub esp, 1
push esp
mov byte [esp], ah
push dword [esp + 4]
push word [esp + 8]
clc
lea esp, [esp + 3]
add edx, ecx
lea esp, [esp + 8]
cmp esi, edx
jb 0x982077
jmp 0x9820a1
pushal
bswap dx
bswap ebx
popal
pushal
mov byte [esp + 7], bh
push word [esp + 6]
mov word [esp + 0x19], sp
lea esp, [esp + 0x20]
push word [esp]
mov byte [esp + 2], bh
push word [esp]
mov byte [esp + 3], dh
lea esp, [esp + 2]
lea esp, [esp + 4]
pushal
mov ecx, eax
mov dword [esp], edi
push edx
pop ebx
pop ebp
ret
cmp edi, ecx
push sp
mov word [esp], si
pushfd
lea esp, [esp + 5]
je 0x98320a
jne 0x98320a
inc ebp
invalid
xor eax, eax
jmp 0x9833a0
pushfd
push word [esp + 4]
lea esp, [esp]
lea esp, [esp + 3]
jo 0x98330f
jno 0x98330f
lahf
sbb al, 0xb2
aad 0x24
out 0x4b, al
leave
pop ecx
cmp bl, cl
sbb eax, 0x8d6168f2
jbe 0x983271
mov ecx, dword [esi]
pop esi
stc
add ecx, eax
movzx eax, word [ecx + 0x14]
push ebx
push esi
push dword [esp + 1]
mov dword [esp + 1], edx
lea esp, [esp + 5]
lea esp, [esp + 1]
lea esp, [esp + 2]
push esi
movzx esi, word [ecx + 6]
xor edx, edx
pushfd
mov byte [esp], dh
mov byte [esp], dh
mov dword [esp], edi
push di
mov word [esp], dx
lea esp, [esp + 2]
lea eax, [eax + ecx + 0x18]
inc esp
or byte [eax], bl
test esi, esi
jbe 0x9831ee
mov edi, dword [ebp + 0xc]
push ebp
mov ebp, eax
lea ebp, [ebp + 0xc]
mov ecx, dword [ebp]
pop ebp
pushfd
lea esp, [esp + 2]
clc
mov word [esp], di
push dx
mov dword [esp], esi
mov byte [esp], dl
mov byte [esp + 1], bl
mov byte [esp + 1], bh
jne 0x9831c6
je 0x9831c6
in ax, 0x75
sbb al, 0xef
inc esp
ret 0x3750
push ebx
mov ebx, ecx
lea ebx, [ebx + 0x3c]
mov eax, dword [ebx]
pop ebx
add eax, ecx
cmp dword [eax], 0x4550
jne 0x98336e
xor edx, edx
push ebx
mov word [esp + 1], si
mov byte [esp + 1], cl
push word [esp]
pop word [esp]
mov dword [esp], edi
mov dword [esp], ecx
lea esp, [esp + 4]
mov ecx, 0x10b
cmp word [eax + 0x18], cx
sete dl
mov eax, edx
pop ebp
ret
lea esp, [esp + 8]
and al, 8
jb 0x98355a
jae 0x9833be
ja 0x983311
add ax, si
ja 0x98333f
cdq
or dword [eax - 0x65], ebp
dec ecx
insb byte es:[edi], dx
leave
and bh, byte [ecx + 0x3e]
mov byte [esp + 2], ah
mov byte [esp + 4], ah
pop word [esp]
lea esp, [esp + 8]
mov edi, edi
pushal
pop word [esp + 0x12]
or byte [ebx - 0x70999f01], cl
inc esp
and al, 0x12
pop dword [esp + 0x12]
pop word [esp + 0xb]
mov dword [esp + 0x14], ebp
push esp
lea esp, [esp + 0x18]
mov ebp, esp
mov ecx, dword [ebp + 8]
mov eax, 0x5a4d
cmp word [ecx], ax
je 0x9832be
sub esp, 0x1c
pop dword [esp + 1]
lea esp, [esp + 0x14]
add esp, 0
mov byte [esp + 1], cl
push dword [esp + 3]
mov byte [esp + 3], ah
pop word [esp + 1]
push word [esp + 5]
xor eax, eax
lea esp, [esp + 8]
pop ebp
ret
pop edi
pop esi
pop ebx
jne 0x983441
je 0x983441
push ds
mov dword [0x61a55633], eax
cli
jp 0x9833a0
invalid
push esi
pushal
mov edi, 0x49347869
lea ebp, [ebx + 0x6e]
mov bl, byte [esp]
xchg ebp, edi
xchg cx, di
mov dword [esp + 4], eax
push ebp
push si
mov word [esp + 2], sp
lea esp, [esp + 3]
mov word [esp], si
mov byte [esp + 1], dh
push si
push dword [esp + 2]
mov byte [esp + 5], al
lea esp, [esp + 1]
lea esp, [esp + 8]
popal
lea esi, [esi + 8]
mov ebx, dword [esi]
pop esi
add ebx, ecx
pushfd
stc
push dword [esp + 3]
sub esp, 3
sub esp, 8
push word [esp + 0xb]
mov byte [esp + 2], dl
lea esp, [esp + 1]
cmp edi, ebx
pushfd
push word [esp + 3]
lea esp, [esp + 2]
lea esp, [esp + 0x18]
jb 0x9833a0
jmp 0x98355a
mov ebp, 0x17186b84
lea ebp, [0x325365fc]
bswap bp
bswap bp
mov ebp, 0x584c3e3e
lea ebp, [esp + ecx]
mov bp, 0x27c3
lea ebp, [0x63b74958]
mov ebp, dword [esp]
push edx
lea esp, [esp + 2]
mov word [esp], bx
lea esp, [esp]
push bp
lea esp, [esp + 8]
ret
pushal
mov dx, word [esp]
popal
pushal
jb 0x98359c
jae 0x98359c
aad 0x55
lds ebp, [edi + ebx*2 + 0x67f7728d]
add dh, cl
cmp eax, 0xf2970781
add ebx, ebx
or dword [edx], ecx
inc eax
push ds
jo 0x98359d
inc edx
add eax, 0x28
cmp edx, esi
jb 0x98327f
jmp 0x9831ee
popal
pushal
mov dword [esp + 0x1a], ebp
mov dword [esp + 0x1c], ebp
jmp 0x98360f
mov byte [esp + 0x17], bl
pop esp
and al, 0x17
pushal
mov byte [esp + 3], cl
push si
pop word [esp + 0x18]
lea esp, [esp + 0x3f]
lea esp, [esp + 1]
pushal
mov dh, 0xf8
xchg esi, eax
mov dword [esp], edi
push ecx
mov byte [esp], dh
push word [esp]
pop word [esp + 1]
pop word [esp]
pushfd
lea esp, [esp + 2]
lea esp, [esp + 4]
jne 0x983579
je 0x983579
loope 0x983643
not dword [edx - 0x31b0449f]
pop esp
cmp edx, esi
add eax, 0x1374e660
out dx, al
imul edx, edx, 0xe44c7e5a
push dword [esp + 3]
push word [esp + 0xf]
lea esp, [esp + 2]
lea esp, [esp + 0x10]
jmp 0x98223d
pushal
mov word [esp + 5], si
pushfd
mov word [esp + 9], ax
push word [esp + 0x17]
push dword [esp + 0x1b]
lea esp, [esp + 8]
lea esp, [esp + 2]
lea esp, [esp + 0x3c]
mov ebp, esp
push 0xfffffffffffffffe
push 0x8e84c4
push 0x8e4b94
jae 0x9836fd
add cl, ch
mov ah, 0
add byte [eax], al
sbb dword [ecx + 0x499b6809], ebx
loop 0x9836b8
jmp 0x9836fd
not dword [edx + 0x4347ad61]
inc ebx
pushal
bswap ebp
bswap dx
mov ecx, 0x7d31528b
jne 0x984066
je 0x984066
test byte [edx + ebx*4], al
std
or al, 0xd8
push cs
lea ebx, [0xb5469764]
jo 0x983656
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push ebp
mov ebp, ecx
mov eax, dword [ebp]
pop ebp
xor edx, edx
cmp eax, 0xc0000005
sete dl
jnp 0x98387f
jp 0x98387f
ret 0xda44
lea ecx, [edi + 0x22fd]
mov bl, byte [esp]
mov ebp, dword [esp]
and al, 0x8b
sub al, 0x24
setle dh
mov dword [esp + 0x14], esi
pushfd
lea esp, [esp + 4]
popal
jmp 0x9820c1
mov dword [ebp - 4], 0xfffffffe
jo 0x98381d
jno 0x98381d
xor dword [edi + 0x6bb14227], esi
int 0x3b
das
invalid
mov eax, dword fs:[0]
push eax
sub esp, 8
pushal
mov word [esp + 0x1a], bx
mov word [esp + 0xa], ax
mov dword [esp + 0x1c], ebx
push cx
lea esp, [esp + 2]
lea esp, [esp + 0x1c]
push edi
push word [esp + 1]
mov byte [esp + 1], dl
push word [esp]
lea esp, [esp + 4]
push word [esp]
push word [esp]
mov dword [esp + 4], esi
push sp
push word [esp + 1]
lea esp, [esp + 8]
push edi
call fcn.008fb707
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 4], 0
push 0x8d9ad4
call fcn.00902559
add esp, 4
test eax, eax
je 0x9836e0
mov eax, dword [ebp + 8]
sub eax, 0x8d9ad4
push eax
push 0x8d9ad4
call fcn.00902504
add esp, 8
test eax, eax
je 0x9836e0
push ebp
mov ebp, eax
lea ebp, [ebp + 0x24]
mov eax, dword [ebp]
pop ebp
shr eax, 0x1f
not eax
and eax, 1
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
setb bh
lea ebx, [ecx - 0x2579]
mov ebx, 0x7245972
xchg bh, bl
mov ebx, dword [esp]
mov ebx, dword [esp]
push ebx
lea esp, [esp + 8]
mov esp, ebp
mov bp, 0x1941
mov ebp, 0x45a11700
mov ebp, dword [esp]
mov ebp, dword [esp]
bswap bp
bswap bp
mov bp, 0x2936
mov ebp, dword [esp]
pushfd
mov word [esp], bp
pop word [esp]
lea esp, [esp + 1]
lea esp, [esp + 1]
lea esp, [esp + 4]
ret
sub esp, 0x1a
add esp, 5
push word [esp + 0x13]
cmc
push esp
pop dword [esp + 2]
lea esp, [esp + 3]
xor eax, eax
push di
lea esp, [esp + 2]
lea esp, [esp + 0x14]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
mov ecx, 0x25dd5b79
mov cl, dh
mov ch, 0x2f
mov ecx, dword [esp]
push cx
mov byte [esp], ch
lea esp, [esp + 2]
lea esp, [esp + 4]
pop edi
jge 0x983885
jmp 0x983885
mov eax, edx
ret
bswap esi
pushal
pop word [esp + 0x12]
jg 0x9838ce
jle 0x9838ce
mov ah, 0x2a
dec ebp
mov esp, 0x6fff7a6c
or bh, cl
lds ebx, [esi - 0x22]
dec esp
sub esp, esi
xor dl, byte [edi + 0x7c]
pushal
mov esi, esp
mov ah, 0xae
xchg dl, bl
mov bp, word [esp]
popal
push ecx
push dword [esp + 1]
pushfd
pop word [esp + 6]
mov word [esp + 3], di
lea esp, [esp + 2]
lea esp, [esp + 8]
jmp 0x9838fb
xchg word [esp + 8], si
mov dword [esp + 0x10], esi
lea esp, [esp + 2]
mov esi, dword [esp + 0x1c]
push esi
jb 0x983eea
jae 0x983eea
push 0xffffffffffffffe9
jns 0x983908
jmp 0x98392c
mov esp, dword [ebp - 0x18]
jmp 0x9836e0
scasb al, byte es:[edi]
xchg ecx, eax
mov fs, word [0x58f64a7]
add byte [eax], al
add byte [eax], al
salc
sal byte [edx - 0x1689cb73], 1
sub al, byte [ecx]
add byte [eax], al
invalid
popal
push ebx
pushal
mov word [esp + 0x1e], bx
jmp 0x983bde
push ebx
pop word [esp + 0xb]
mov word [esp + 1], dx
mov byte [esp + 0x17], al
pushfd
lea esp, [esp + 1]
lea esp, [esp + 0x1c]
lea esp, [esp + 4]
jae 0x983cc3
jb 0x983cc3
fistp word [ebp - 0x33]
xchg esp, eax
mov cl, 0xe2
popal
int1
nop
arpl word [edx + 0x24648dd9], si
add dword [esi - 1], esp
xor al, 0x24
lea esp, [esp + 1]
push word [esp]
lea esp, [esp + 4]
jno 0x983c0b
jo 0x983c0b
pushfd
sbb cl, byte [eax + 0x549d1aef]
invalid
xor ebx, ebx
push bx
push word [esp]
jbe 0x983b16
jmp 0x983b16
pop word [esp]
push word [esp + 1]
push word [esp + 4]
push dword [esp + 2]
push word [esp + 7]
push dword [esp + 1]
lea esp, [esp + 1]
lea esp, [esp + 0x10]
push ebp
push esi
pushfd
mov dword [esp], ecx
lea esp, [esp + 3]
push cx
lea esp, [esp + 3]
push edi
push ebx
mov ebp, edx
xor eax, eax
jne 0x983b3a
je 0x983b3a
add byte [eax + 0x54807116], al
cmp edi, dword [edx + 0x69ba4f28]
adc byte [esi + 0x199e6304], dl
jae 0x983bdd
push ebp
neg byte [edi + 0x60]
pushal
mov bp, 0x5aee
pushfd
lea esp, [esp + 4]
popal
push ecx
lea esp, [esp + 1]
push dx
mov dword [esp], esp
jbe 0x983b5a
ja 0x983b5a
hlt
xchg esi, eax
lea esp, [esp + 0xb]
push cx
pop dword [esp + 6]
jb 0x983ae1
jae 0x983ae1
xchg ecx, eax
pop ss
xchg edx, esp
adc ebx, ecx
mov eax, dword [0x20d1b620]
push edx
fsub st(1), st(0)
cli
push cs
idiv bh
fisub word [ebp + 0x1c88d3d9]
and al, 0x8d
and al, 0x24
mov byte [esp], bl
lea esp, [esp]
push di
lea esp, [esp + 3]
xor edx, edx
xor esi, esi
xor edi, edi
call ecx
setl bl
mov ebx, dword [esp]
push esp
pop word [esp]
push word [esp + 1]
mov word [esp], si
push esi
pop dword [esp]
pop word [esp]
lea esp, [esp + 2]
lea esp, [esp + 4]
pop edi
lea esi, [esi + esi]
bswap si
mov si, 0x6213
lea esi, [eax + edx]
lea esi, [esp + 0x580c3138]
mov esi, dword [esp]
push dx
mov byte [esp], bl
push word [esp]
pop word [esp]
mov byte [esp], bl
jae 0x983d02
jb 0x983d02
xchg esi, eax
adc byte [esi + 0x9710e1], al
test dword [0x8c0a8f7c], edx
test dword [eax + 0x66], ebx
mov ebp, esp
popal
push ax
lea esp, [esp]
mov byte [esp], cl
mov word [esp], bx
mov word [esp], ax
mov word [esp], si
push word [esp]
mov dword [esp], edi
push ecx
mov dword [esp + 1], esi
mov dword [esp + 1], edi
mov word [esp], bx
mov byte [esp + 2], dh
push esi
lea esp, [esp + 0xc]
jmp 0x983538
pushal
mov bp, 0x40ad
xchg esi, edx
popal
push cx
mov word [esp], sp
mov byte [esp], bl
push word [esp + 1]
mov word [esp + 1], si
lea esp, [esp]
push word [esp + 3]
jnp 0x983d98
jp 0x983d98
sub al, 0xae
cmp al, 0x5b
mov dh, 0x66
mov edi, 0x44b5d23c
xchg byte [edx + 0x665233af], ch
mov dword [esp], eax
push edx
mov word [esp], ax
lea esp, [esp + 2]
lea esp, [esp + 8]
pop ebp
ret
mov dword [esp], esp
mov dword [esp], esi
push word [esp]
mov dword [esp + 3], esi
push word [esp + 5]
lea esp, [esp + 2]
lea esp, [esp + 8]
jmp 0x983bae
push dword [esp]
mov word [esp], di
lea esp, [esp + 7]
lea esp, [esp + 1]
lea esp, [esp + 0x20]
pop ebx
mov esp, ebp
pop ebp
ret
not al
popal
push bx
mov word [esp], ax
lea esp, [esp]
mov word [esp], si
pushal
push dword [esp + 0x16]
pop dword [esp + 0x16]
pop dword [esp + 6]
mov word [esp + 0x11], bp
lea esp, [esp + 0x1b]
mov word [esp], ax
push word [esp + 2]
lea esp, [esp + 1]
lea esp, [esp + 4]
jmp 0x98367e
lea esp, [esp + 0xc]
push bx
lea esp, [esp + 2]
push edi
call fcn.008e4a74
add esp, 8
test eax, eax
je 0x9820ec
test dword [eax + 0x24], 0x20000000
je 0x9820ec
jmp 0x982077
mov esi, dword [ebx + 8]
push eax
stc
push word [esp]
pushal
lea esp, [esp + 2]
sub esi, edi
pushal
mov dword [esp + 0x14], ebx
mov word [esp + 2], bp
lea esp, [esp + 0x44]
and esi, 0xfffff000
cmp esi, edx
je 0x982160
test eax, eax
je 0x982000
mov ecx, dword [eax + 0xc]
cmp esi, ecx
jb 0x982000
mov edx, dword [eax + 8]
add edx, ecx
cmp esi, edx
jb 0x98206e
jmp 0x982000