Function at 0x1cd95ec
Capabilities:
Parse pe header

Disassembly:
pop esi
mov al, 0x53
movsx bx, al
pop ebx
not ax
lea eax, [ecx + edi]
cmova di, dx
pop edi
mov esp, ebp
movzx ebp, ax
cmovl ebp, ebp
pop ebp
ret
mov edx, dword [edi + 0x3c]
test ebx, 0x56002218
cmp sp, dx
add edx, edi
test sp, 0x3f80
cmp dword [edx], 0x4550
jne 0x1cd9632
mov eax, dword [edx + 0x78]
stc
test ebp, 0x714f3557
mov dword [ebp - 4], eax
test eax, eax
je 0x1cd9632
mov edx, dword [edx + 0x7c]
cmc
clc
push ebx
cmp ax, 0x7f06
push esi
cmp esi, 0xcaf7dae
clc
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp edx, 0x7c471f46
cmp ecx, 0xffff
ja 0x12a2275
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jae 0x129c6b8
mov edx, dword [eax + edi + 0x1c]
cmc
lea ecx, [edx + ecx*4]
cmp edx, 0x7b0c5e7c
test dx, bx
clc
mov ecx, dword [ecx + edi]
test ah, 0x8d
test ecx, ecx
jne 0x129c65d
pop esi
pop ebx
sar di, 0x8f
xor eax, eax
xchg edi, edi
mov di, dx
movsx edi, cx
pop edi
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
movsx edx, si
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
movzx dx, ch
movzx ecx, sp
mov dx, di
movzx ecx, word [eax + edi]
bswap dx
movsx dx, al
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x129c61f
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jle 0x1c82573
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
stc
cmp esi, dword [eax + edi + 0x14]
jae 0x129c6b8
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
test bp, 0x7b64
bts cx, bx
bswap cx
mov ecx, dword [edx + edi]
cmp ecx, 0x1a26173e
test ecx, ecx
je 0x129c6b8
cmp ecx, eax
jb 0x10ed553
mov edx, dword [ebp - 0x10]
cmc
stc
lea edx, [edx + eax]
cmp ecx, edx
jae 0x10ed553
lea eax, [ecx + edi]
xadd cl, cl
add si, si
mov cl, byte [eax]
add si, ax
mov esi, eax
cmc
stc
test ebx, 0x48686f9d
test cl, cl
je 0x129c6b8
mov edi, edi
cmc
test edx, ebx
clc
cmp cl, 0x2e
je 0x1c82835
mov cl, byte [esi + 1]
inc esi
test bp, 0x2dc6
test dx, bp
test cl, cl
jne 0x129c69b
pop esi
shl bh, 0xd0
movzx ebx, dx
pop ebx
bsf di, bx
sub eax, eax
pop edi
mov esp, ebp
mov bp, bx
cmovnp bp, sp
pop ebp
ret
mov ebx, dword [eax + edi + 0x18]
clc
test ebx, ebx
je 0x129c62f
mov edx, dword [eax + edi + 0x20]
dec ebx
test si, 0x27bf
lea edx, [edx + edi]
stc
cmp ah, 0xe0
mov dword [ebp + 8], 0
cmp cl, 0x89
test ebx, esp
mov dword [ebp - 0xc], edx
test ebx, ebx
jl 0x129c62f
jmp 0x1c82584
mov ecx, dword [ebp + 0xc]
bts eax, esi
sbb dx, di
mov edx, dword [ebp - 0xc]
setp al
shr al, cl
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
test edi, 0xfa510a6
push eax
sar esi, 1
shr eax, cl
mov ah, ah
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.01299fe6
lea esp, [esp + 4]
cmc
cmp eax, 0xffffffff
je 0x129c61c
test eax, eax
je 0x129be1f
cmp eax, 1
jne 0x129c61f
inc esi
mov dword [ebp + 8], esi
jmp 0x129c61f
mov ebx, esi
cmp ebp, 0x5f7a1a9a
test si, cx
sub ebx, eax
test dx, cx
cmp ebx, 0x104
jae 0x129c6b8
xor ecx, ecx
cmp di, bp
test ebx, ebx
jbe 0x1c82889
lea edi, [ebp - 0x114]
clc
xchg dl, dl
sub edi, eax
mov dl, byte [eax]
test dx, di
cmp ebp, esp
test dl, dl
je 0x1c82889
mov byte [edi + eax], dl
inc ecx
inc eax
test esi, esp
cmp ebx, esp
cmp ecx, ebx
jb 0x1c82869
lea eax, [ebp - 0x114]
push eax
mov byte [ebp + ecx - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
mov edi, eax
test edi, edi
jne 0x1c828d0
lea ecx, [ebp - 0x114]
mov ah, ah
not eax
push ecx
movzx eax, dx
bswap ax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_1]
call eax
mov edi, eax
test edx, ebp
cmp ah, 0x95
test edi, edi
je 0x129c6b8
cmp byte [esi + 1], 0x23
movzx cx, bl
mov cx, ax
lea ecx, [esi + 1]
je 0x1c8bcaa
push 0
push ecx
push edi
call fcn.01cd95ec
add esp, 0xc
cmovno bx, di
pop esi
not ebx
xchg edi, edi
pop ebx
cmova edi, ebx
mov di, cx
pop edi
mov esp, ebp
mov bp, 0x7b97
movsx ebp, ax
movzx ebp, cx
pop ebp
ret
mov cl, byte [esi + 2]
lea esi, [esi + 2]
cmp bp, 0x62b5
sub edx, edx
test cl, cl
je 0x1c8bcf8
mov al, cl
cmp cx, si
cmp edi, 0x211d27b2
sub al, 0x30
inc esi
cmp al, 9
ja 0x1c8bcf8
movsx eax, cl
mov cl, byte [esi]
test esi, ebp
lea edx, [edx + edx*4]
cmc
cmp ch, 0xe2
lea edx, [eax + edx*2 - 0x30]
stc
cmp di, 0x7ced
test ch, 8
test cl, cl
jne 0x1c8bcbf
push 0
push edx
push edi
call fcn.01cd95ec
add esp, 0xc
pop esi
cmovae edi, ebp
xchg edi, edi
pop ebx
mov edi, ecx
bswap edi
pop edi
mov esp, ebp
xchg ebp, ebp
pop ebp
ret
push ebp
sal ebp, 4
and bp, cx
mov ebp, esp
test bh, dl
cmp bp, 0x230e
sub esp, 0x114
clc
cmc
test ecx, ebp
push edi
mov edi, dword [ebp + 8]
cmc
test edi, edi
je 0x1cd9632
mov ecx, dword [ebp + 0xc]
cmp ebx, 0x7a13060c
test ecx, ecx
je 0x1cd9632
mov eax, 0x5a4d
cmp word [edi], ax
je 0x129a597
sub eax, eax
pop edi
mov esp, ebp
mov ebp, 0x7c837dd4
pop ebp
ret