Function at 0x1c79caa
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0x1cdabc0
push 0
jmp 0x1bdc2c8
mov esp, ebp
bswap bp
not bp
pop ebp
ret
push eax
rcl al, 0xc7
neg al
cmp ecx, 0x11fd13e4
sar esi, 1
sal ah, 0x2c
and ax, 0x6a36
bsr ax, ax
mov eax, dword [edx + esi*4]
cmc
clc
stc
add eax, edi
call fcn.01c7b181
add esp, 4
clc
cmp eax, 0xffffffff
jmp 0x120e0fb
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
movzx eax, bx
bswap ax
lea eax, [edx + esi*2]
bswap dx
movzx ecx, word [eax + edi]
xchg dh, dl
mov dl, dh
lea edx, [ebx + 1]
jmp 0x121417c
jl 0x1215e50
jmp 0x12159ed
jne 0x120f298
mov eax, dword [edx + 0x78]
cmp edi, ecx
mov dword [ebp - 4], eax
test eax, eax
jmp 0x131137f
je 0x1216255
test eax, eax
jmp 0x1c79d51
push edi
mov ah, ch
movsx eax, bp
mov ah, 0x46
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
jmp 0x1c8684e
test ebx, ebx
jmp 0x120ba71
je 0x1cde5c5
xor eax, eax
mov edi, 0x48c63fff
pop edi
jmp 0x1bcd51a
ja 0x120f4bb
movsx ecx, cl
test ecx, 0x3f1f0980
cmp cx, bx
lea edx, [edx + edx*4]
cmp dh, 0x62
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
test cl, cl
jne 0x1bd8651
push 0
jmp 0x1cedf2b
jne 0x131080d
cmp byte [ebp + 0x10], 0
je 0x1bd3288
mov ebx, dword [ebp + 0xc]
bt eax, ebx
shld si, di, 0xe8
sar cl, 0x42
lea eax, [ebp - 0x114]
test ax, 0x30af
xor edx, edx
not si
bsr si, di
sub ebx, eax
mov edi, edi
btr esi, ebx
movzx eax, si
btr eax, 0x2f
mov eax, 0x15d24da2
mov cl, dl
rol esi, 0xcf
rol eax, cl
jmp 0x1cd86b5
jne 0x1212ca6
lea edx, [ebp - 0x114]
movzx eax, dx
push edx
setae ah
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x1bd6c25
je 0x1c79b9d
cmp eax, edi
jmp 0x120fd15
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x130701d
push edi
rcl di, 0x36
btr edi, 0xa7
mov edi, dword [ebp + 8]
stc
jmp 0x12151dc
test edi, edi
jmp 0x1cec3c4
cmp ecx, 0xffff
jmp 0x130f312
mov ecx, dword [ebp + 0xc]
sbb eax, ebp
movzx ax, ch
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
ror esi, 0xc1
lea esi, [ebx + eax]
or al, ch
or ah, 0xf9
mov eax, dword [ebp + 0x10]
jmp 0x120543f
je 0x1c79b9d
mov edi, edi
jmp 0x130eff1
jle 0x12159e1
mov eax, dword [ebp - 4]
bts si, dx
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jae 0x1c79b9d
mov ecx, dword [eax + edi + 0x1c]
sbb dx, 0x2d7f
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
stc
clc
test ecx, ecx
jmp 0x1bd48ed
lea ebx, [esi - 1]
cmc
cmp dword [ebp + 8], ebx
jmp 0x1215e40
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
je 0x1215e50
mov edx, dword [eax + edi + 0x20]
jmp 0x1bda068
ret
mov dword [ebp - 8], esi
jmp 0x1215511
ret
jmp 0x1216259
lea ecx, [edx + ecx*4]
test bp, 0x5edc
mov ecx, dword [ecx + edi]
cmp edi, esi
cmp dh, 5
test ecx, ecx
jne 0x1bd48f3
pop esi
pop ebx
sub eax, eax
mov edi, edi
mov di, 0x2aa4
pop edi
jmp 0x1307da5
ret
mov esp, ebp
jmp 0x1bdaba0
push eax
setnp ah
push edi
mov eax, esi
not al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1ce6b9d
ret
cmp cl, 0x2e
jmp 0x1cd9401
ja 0x1216d98
sub ecx, dword [eax + edi + 0x10]
jmp 0x1311bb9
cmp byte [esi + 1], 0x23
not ch
lea ecx, [esi + 1]
jmp 0x1202f4b
je 0x120f298
mov edx, dword [edx + 0x7c]
stc
cmp bx, bx
cmc
push ebx
cmc
push esi
or esi, 0xffffffff
cmp dh, ah
mov dword [ebp - 0x10], edx
test edx, 0x68d500ce
jmp 0x1302de7
cmp ecx, dword [eax + edi + 0x14]
jae 0x1c79b9d
mov edx, dword [eax + edi + 0x1c]
jmp 0x1307370
pop esi
movsx eax, cx
pop ebx
lea eax, [ecx + edi]
xchg edi, edi
jmp 0x1ce96bd
jbe 0x1ce80b3
lea ebx, [ebp - 0x114]
shr dl, 0xc4
sub ebx, eax
xchg dl, dl
mov dl, byte [eax]
stc
cmp bp, ax
test eax, eax
test dl, dl
jmp 0x1cdabd4
mov esp, ebp
pop ebp
jmp 0x1cdb17d
jb 0x1313d78
mov edx, dword [ebp - 0x10]
cmp ebx, edx
lea edx, [edx + eax]
test ebp, 0xf997ad9
cmp ecx, edx
jmp 0x1c7b201
mov eax, dword [ebp + 0xc]
jmp 0x1ce3c20
mov ecx, esi
stc
sub ecx, eax
cmp al, dl
cmp ecx, 0x104
jmp 0x1bda04d
je 0x1c79b9d
cmp ecx, eax
jmp 0x1bd0528
call eax
test eax, eax
jmp 0x1212ca0
je 0x120f4bb
mov bl, cl
cmc
sub bl, 0x30
inc esi
stc
cmp bl, 9
jmp 0x120f495
push eax
jmp 0x1cd8f9c
mov esp, ebp
bswap bp
cmova bp, di
pop ebp
jmp 0x1c857ff
jae 0x1c79b9d
mov dword [ebp + 8], 0
clc
test esp, 0x51c95025
test ecx, ecx
jmp 0x1314423
dec ebx
cmc
lea edx, [edx + edi]
mov dword [ebp + 8], 0
stc
mov dword [ebp - 0xc], edx
stc
jmp 0x120e616
pop ebp
jmp 0x13032ad
push ecx
push eax
jmp 0x1cddcb9
je 0x1c799dd
inc edx
cmp edx, 0x104
jb 0x120fd54
lea eax, [ebp - 0x114]
jmp 0x1309b13
jne 0x130eff1
pop esi
ror bl, cl
add di, ax
pop ebx
test edi, ecx
not edi
sub eax, eax
xchg di, di
pop edi
jmp 0x1cee257
push ebp
or bp, 0x1fec
mov ebp, esp
sub esp, 0x114
jmp 0x12141b0
je 0x1209fb3
cmp eax, 1
jmp 0x1ce8859
jae 0x1313d78
lea eax, [ecx + edi]
cmc
setl cl
mov cl, byte [eax]
sub si, di
sbb si, 0x3402
mov esi, eax
test cl, cl
jmp 0x1215a03
ret
pop ebx
not di
movsx edi, ax
pop edi
jmp 0x1cde01f
lea esi, [ebp + edx - 0x114]
jmp 0x1ceed05
call fcn.01c79caa
add esp, 0xc
pop esi
movsx edi, si
pop ebx
pop edi
jmp 0x120475c
push ecx
mov byte [ebp + eax - 0x114], 0
xchg al, al
setbe ah
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
test eax, eax
jmp 0x1211e4e
je 0x1bd37b5
mov cl, byte [esi + 1]
jmp 0x1ce0f44
je 0x120f298
mov eax, 0x5a4d
cmp bh, 0x8b
cmp ax, sp
cmp word [edi], ax
jmp 0x120f292
mov cl, byte [esi + 2]
lea esi, [esi + 2]
xor edx, edx
cmp edx, ebx
test dl, 0x55
test cl, cl
jmp 0x1bd864b
je 0x1ce80b3
mov byte [ebx + eax], dl
cdq
mov edx, dword [ebp + 8]
jmp 0x1ce4e36
mov dword [ebp + 8], esi
jmp 0x1216259
ret
call fcn.01c79caa
add esp, 0xc
pop esi
bswap bx
movsx edi, dx
pop ebx
pop edi
jmp 0x1bd9411
mov esp, ebp
bswap bp
movsx ebp, dx
cmovs ebp, eax
pop ebp
jmp 0x1216dad
mov edx, dword [edi + 0x3c]
test di, 0x25ed
add edx, edi
cmc
cmp cx, 0x6710
cmp dword [edx], 0x4550
jmp 0x120d459
inc esi
test cl, cl
jmp 0x1c79b97
push eax
jmp 0x120e227
mov esp, ebp
movsx ebp, si
pop ebp
ret
inc edx
inc eax
mov dword [ebp + 8], edx
cmc
cmp sp, dx
cmp edx, ecx
jmp 0x1ce80ad
call eax
pop esi
pop ebx
pop edi
jmp 0x1ce3f72
jb 0x1314436
mov eax, dword [ebp + 8]
movsx ecx, ax
lea ecx, [ebp - 0x114]
jmp 0x1cd900b
jne 0x1216259
inc esi
jmp 0x1cdafb0
pop edi
mov esp, ebp
cmovns ebp, ebx
not bp
movzx ebp, ax
pop ebp
jmp 0x130e1dd
je 0x120f298
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x1cda4e7
push edx
jmp 0x1bd8d30
mov esp, ebp
pop ebp
jmp 0x1307d43
mov byte [esi], al
jmp 0x1c799ca
add al, dl
xor al, byte [ebx + esi]
jmp 0x1cee29c