Function at 0x1ccff99
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop esi
pop ebx
mov eax, 0x49a916da
movzx ax, ch
bswap ax
lea eax, [ecx + edi]
movsx edi, ax
mov di, si
not di
pop edi
mov esp, ebp
pop ebp
ret
ja 0x15279ab
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0x153af15
mov esp, ebp
jmp 0x152d276
mov esp, ebp
jmp 0x152b615
jne 0x116d3b3
lea edx, [ebp - 0x114]
cmovae ax, ax
cwde
push edx
movsx eax, ax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x116d3a9
mov ecx, esi
cmp di, 0x6eba
sub ecx, eax
cmp ax, 0x44fa
cmc
test ax, di
cmp ecx, 0x104
jmp 0x151a27d
jne 0x1521a3a
cmp byte [ebp + 0x10], 0
jmp 0x151aab3
call eax
test eax, eax
jmp 0x116489d
add al, dl
xor al, byte [ebx + esi]
jmp 0x153efd5
mov esp, ebp
pop ebp
jmp 0x152d283
jne 0x154399c
pop esi
shl di, 0xba
pop ebx
inc edi
shld di, bx, 0xdc
xor eax, eax
pop edi
jmp 0x1cd12b2
cmp bl, 9
ja 0x116c276
movsx ecx, cl
cmp ebp, esi
lea edx, [edx + edx*4]
test ebp, 0x128766c2
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
test cl, cl
jne 0x15442e0
push 0
jmp 0x154e01f
ret
call eax
test eax, eax
je 0x1d4eaeb
cmp eax, edi
jmp 0x11680d0
push ecx
jmp 0x1d4e4a0
jne 0x151510e
inc esi
jmp 0x1518939
je 0x15544d8
mov edx, dword [eax + edi + 0x20]
dec ebx
jmp 0x1cce88f
call fcn.01168808
lea esp, [esp + 4]
clc
cmp edi, 0x78f645fc
test ebx, esi
cmp eax, 0xffffffff
je 0x151510a
test eax, eax
jmp 0x1ccaf2a
lea ebx, [esi - 1]
stc
cmp dword [ebp + 8], ebx
jmp 0x15544c7
call eax
pop esi
pop ebx
pop edi
jmp 0x116ad5f
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x151564f
mov dword [ebp + 8], esi
jmp 0x155274b
jae 0x1d4eaeb
mov dword [ebp + 8], 0
cmc
stc
jmp 0x1d503d2
je 0x1542598
mov ebx, dword [ebp + 0xc]
rcr eax, 0xb6
test bh, 0x7b
btc ax, 3
lea eax, [ebp - 0x114]
xor edx, edx
inc esi
sub ebx, eax
btc eax, 0x13
clc
mov edi, edi
stc
mov eax, 0x1bce5219
mov cl, dl
btc esi, edi
rol eax, cl
lea esi, [ebp + edx - 0x114]
clc
jmp 0x116aad8
je 0x1530f1f
mov eax, 0x5a4d
jmp 0x1530f16
cmp ecx, 0xffff
jmp 0x1163159
push eax
cwde
push edi
movzx eax, bp
not eax
jmp 0x15157b1
cmp byte [esi + 1], 0x23
seta ch
mov cl, 0xe6
not ch
lea ecx, [esi + 1]
jmp 0x1ccd45a
mov ebx, dword [eax + edi + 0x18]
test bp, 0x1008
test ecx, ebx
test ebx, ebx
jmp 0x117025b
ret
pop ebp
jmp 0x1ccf61f
push eax
jmp 0x154348d
pop ebp
jmp 0x116c9d7
ret
mov dword [ebp - 8], ecx
jmp 0x1cd0a4e
cmp word [edi], ax
je 0x15505b8
sub eax, eax
movzx edi, ax
pop edi
jmp 0x1164415
pop edi
jmp 0x1531f17
mov esp, ebp
pop ebp
ret
pop ebp
ret
jae 0x1d4eaeb
mov ecx, dword [eax + edi + 0x1c]
bsf edx, edi
add dx, ax
lea edx, [ecx + esi*4]
shl cx, 0xea
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0x1543996
push ecx
jmp 0x152c50e
jmp 0x151510e
jae 0x1d4eaeb
mov edx, dword [eax + edi + 0x1c]
jmp 0x1549e56
mov ecx, dword [ebp - 4]
movsx eax, ax
not dx
cwde
mov edx, dword [ecx + edi + 0x24]
movsx ax, dh
mov cl, dh
lea eax, [edx + esi*2]
bswap cx
movzx ecx, ax
setge cl
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0x152d42d
pop ebx
mov edi, 0xcbd4682
pop edi
jmp 0x116368d
mov byte [esi], al
jmp 0x1cc00d0
jbe 0x1cc6235
lea ebx, [ebp - 0x114]
sbb dl, dl
sub ebx, eax
xor dl, 0xef
mov dl, byte [eax]
test ebp, eax
test dl, dl
jmp 0x1cc356d
mov eax, dword [ebp + 0xc]
jmp 0x152185b
call fcn.01ccff99
add esp, 0xc
cmovp di, bx
pop esi
jmp 0x1d505a3
je 0x1d4eaeb
cmp ecx, eax
jmp 0x15534ed
je 0x116c276
mov bl, cl
sub bl, 0x30
inc esi
cmp bx, bx
jmp 0x116c251
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
shr al, 0x6f
inc esi
sar al, cl
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
cmp bh, 0xdd
mov eax, dword [ebp + 0x10]
push eax
mov ax, di
btr ax, 0xe
xadd ax, ax
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x11702cc
lea ecx, [edx + ecx*4]
cmp eax, ebp
mov ecx, dword [ecx + edi]
cmp bx, sp
test ecx, ecx
jmp 0x116bf5a
push edx
jmp 0x1cc959e
push eax
setge ah
movzx eax, ax
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
jmp 0x153c640
mov edx, dword [edi + 0x3c]
cmp dx, 0xc58
lea edx, [edx + edi]
stc
cmp dword [edx], 0x4550
jmp 0x1554386
cmp ecx, edx
jmp 0x1ccd97a
jmp 0x151510e
jb 0x1162d0f
mov edx, dword [ebp - 0x10]
lea edx, [edx + eax]
cmp edi, 0x172a3321
jmp 0x155096c
jne 0x1530f1f
mov eax, dword [edx + 0x78]
stc
mov dword [ebp - 4], eax
test eax, eax
je 0x1530f1f
mov edx, dword [edx + 0x7c]
stc
test dh, 0xb1
cmp ax, sp
push ebx
cmp esp, 0x25b737e3
push esi
clc
test ebp, 0x43a33543
or esi, 0xffffffff
cmp dx, 0x27ea
mov dword [ebp - 0x10], edx
test dh, 0xd8
mov dword [ebp - 8], esi
stc
jmp 0x151b3af
jle 0x15451e8
mov eax, dword [ebp - 4]
mov esi, edx
btc esi, ebx
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0x1534dd3
je 0x1ccb65e
inc edx
cmp sp, 0x1f2b
cmp edx, 0x104
jmp 0x1ccb658
ret
je 0x1cc6235
mov byte [ebx + eax], dl
cwd
cmovno dx, ax
mov edx, dword [ebp + 8]
inc edx
inc eax
cmc
mov dword [ebp + 8], edx
clc
jmp 0x1cc622d
cmp edx, ecx
jb 0x1540bc6
mov eax, dword [ebp + 8]
jmp 0x1cca56f
je 0x1530f1f
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x151b200
push eax
jmp 0x1ccfcca
lea ecx, [ebp - 0x114]
jmp 0x116d3fe
je 0x153c0b6
cmp eax, 1
jmp 0x116d42e
jb 0x151aada
lea eax, [ebp - 0x114]
jmp 0x154fcac
je 0x1d501ec
push 0
jmp 0x15377d4
jae 0x1162d0f
lea eax, [ecx + edi]
rol cl, 0xf
mov cl, byte [eax]
bt si, cx
mov esi, eax
clc
test cx, si
test cl, cl
je 0x1d4eaeb
mov edi, edi
cmp cl, 0x2e
jmp 0x1cd12bb
lea edx, [edx + edi]
mov dword [ebp + 8], 0
cmc
test esi, eax
mov dword [ebp - 0xc], edx
test ebx, ebx
jl 0x15544d8
jmp 0x15451f4
ret
call fcn.01ccff99
add esp, 0xc
movzx ebx, bx
movsx bx, ah
pop esi
movsx ebx, di
pop ebx
pop edi
mov esp, ebp
bswap ebp
mov bp, di
xchg ebp, ebp
pop ebp
jmp 0x1cc31b6
push ebp
mov ebp, esp
cmp bx, bp
sub esp, 0x114
push edi
mov edi, dword [ebp + 8]
cmp sp, 0x4b3b
test dx, 0x3e0b
test edi, edi
jmp 0x1cc864b
mov dword [ebp + 8], edx
jmp 0x1539621
mov esp, ebp
xchg ebp, ebp
jmp 0x1533965
je 0x1165073
mov cl, byte [esi + 1]
jmp 0x1d4e65a
mov byte [ebp + eax - 0x114], 0
mov al, 0x27
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x11680df
inc esi
test eax, 0x4cda5a78
clc
test cl, cl
jmp 0x1d4eae5
jne 0x1ccd99c
pop esi
pop ebx
sub eax, eax
jmp 0x153148d
mov cl, byte [esi + 2]
cmp esi, 0x190725c8
test ax, di
lea esi, [esi + 2]
test bp, dx
sub edx, edx
test si, di
cmp ebp, 0x6c9635b3
test cl, cl
jmp 0x15442da
test ecx, ecx
jmp 0x1540bb3
pop ebx
cmove di, si
movsx edi, ax
pop edi
mov esp, ebp
movsx ebp, bp
movzx ebp, bx
xchg ebp, ebp
pop ebp
jmp 0x1529f15