Function at 0xc1121d
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp + 8], esi
jmp 0xb26a70
ret
pop ebp
ret
je 0xb26a6d
test eax, eax
je 0xb243de
cmp eax, 1
jmp 0xb3a1bb
je 0xbe8d66
mov ecx, dword [ebp + 0xc]
test edi, 0x580616c3
test ecx, ecx
jmp 0xbe8d4e
ret
mov ecx, dword [ebp + 0xc]
shld edx, eax, 0x15
mov edx, dword [ebp - 0xc]
dec esi
jmp 0xadaa3b
jb 0xbd1b45
mov eax, dword [ebp + 8]
setne ch
lea ecx, [ebp - 0x114]
jmp 0xac1333
inc edx
jmp 0xab39e3
jae 0xb1bde3
mov ecx, dword [eax + edi + 0x1c]
stc
xchg edx, edx
bt dx, 0xee
lea edx, [ecx + esi*4]
shrd cx, sp, 0x68
xadd ecx, ecx
mov ecx, dword [edx + edi]
cmc
cmp edi, esi
test ecx, ecx
jmp 0xbf3660
mov dword [ebp - 0x10], edx
test si, 0x38aa
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0xbf57c0
mov dword [ebp + 8], edx
jmp 0xb6d8d2
jae 0xb1bde3
mov dword [ebp + 8], 0
test si, 0xdb
test ecx, ecx
jmp 0xbd1b34
push eax
push edi
mov ax, bp
nop
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xc099ec
jne 0xb56b6c
cmp byte [ebp + 0x10], 0
jmp 0xbb9755
call eax
test eax, eax
je 0xb1bde3
cmp eax, edi
jmp 0xaa7256
jne 0xbf0072
push 0
jmp 0xaf1fdd
mov esp, ebp
xchg bp, bp
jmp 0xa5f029
pop esi
movzx ebx, si
mov di, 0x492
pop ebx
pop edi
jmp 0xb0af68
inc eax
test esi, ebp
mov dword [ebp + 8], edx
stc
test edx, esi
cmp edx, ecx
jmp 0xa7fe12
sub bl, 0x30
inc esi
cmp bl, 9
ja 0xaa8734
movsx ecx, cl
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
inc cl
mov cl, byte [esi]
cmp ebp, esp
cmc
test cl, cl
jmp 0xaa872e
mov byte [esi], al
jmp 0xac0c23
je 0xac0c36
inc edx
cmp edx, 0x104
jb 0xbb976d
lea eax, [ebp - 0x114]
jmp 0xa964eb
push ecx
jmp 0xb3e183
mov ecx, esi
test di, 0x432c
sub ecx, eax
test bh, dl
cmp ax, di
cmc
cmp ecx, 0x104
jmp 0xa92f49
test dl, dl
jmp 0xadfefb
jne 0xaa8489
lea edx, [ebp - 0x114]
push edx
lahf
mov eax, 0x13c4706e
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xaa847f
inc esi
cmp edx, eax
test cl, cl
jmp 0xb1bddd
push eax
jmp 0xae1a35
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jmp 0xc3cd4b
add al, dl
clc
cmp dx, bp
xor al, byte [ebx + esi]
jmp 0xabe2be
mov eax, dword [ebp + 8]
rcr si, 0x4c
lea esi, [ebx + eax]
movzx ax, cl
mov eax, dword [ebp + 0x10]
test si, 0x4e69
push eax
bts ax, ax
shr al, 1
btr eax, ebp
sar esi, 1
sal eax, cl
dec al
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.00b7e664
add esp, 4
test cx, di
stc
cmp eax, 0xffffffff
jmp 0xa6516c
je 0xbe8d66
mov edx, dword [edx + 0x7c]
cmp dx, 0x1438
push ebx
push esi
or esi, 0xffffffff
test ch, 0x8b
jmp 0xa91980
je 0xa7fe18
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
jmp 0xa81189
call fcn.00c1121d
add esp, 0xc
pop esi
movsx ebx, si
xchg bx, bx
pop ebx
pop edi
mov esp, ebp
bswap ebp
movsx ebp, cx
xchg bp, bp
pop ebp
jmp 0xb7e5dd
push edx
jmp 0xad67d2
ret
mov esp, ebp
cmova bp, cx
mov bp, 0xb76
pop ebp
jmp 0xa6afc7
jne 0xb275ed
pop esi
pop ebx
cmp edx, 0x31cc3068
xor eax, eax
movzx edi, bx
xchg di, di
pop edi
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0xa532b8
mov ecx, dword [ebp - 4]
mov dh, bl
mov dh, 0x8e
mov edx, dword [ecx + edi + 0x24]
cwde
cbw
cmovbe ecx, esp
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
movzx edx, di
lea edx, [ebx + 1]
jmp 0xc1b941
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jle 0xa78b16
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmc
cmp esi, dword [eax + edi + 0x14]
jmp 0xa8e665
je 0xb1bde3
mov edi, edi
cmp cl, 0x2e
je 0xac332d
mov cl, byte [esi + 1]
jmp 0xad17ed
jne 0xb26a70
inc esi
jmp 0xa5246d
mov byte [ebp + eax - 0x114], 0
cmove eax, esi
not ah
lahf
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xb992ef
mov esp, ebp
pop ebp
jmp 0xafb26f
push eax
cwde
push edi
nop
cmovg ax, cx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xb55f95
mov eax, dword [ebp + 0xc]
jmp 0xb4a8c5
call eax
pop esi
movsx edi, si
bswap edi
pop ebx
pop edi
jmp 0xbd20b4
cmp byte [esi + 1], 0x23
mov cx, 0x366e
movzx ecx, di
lea ecx, [esi + 1]
je 0xb6dba9
push 0
push ecx
jmp 0xb8434f
je 0xb26a80
mov edx, dword [eax + edi + 0x20]
jmp 0xbfa165
jmp 0xb26a70
mov cl, byte [esi + 2]
add esi, 2
test bp, si
cmc
sub edx, edx
test cl, cl
jmp 0xbf006c
jl 0xb26a80
jmp 0xadaa3b
ret
push eax
call fcn.00c1121d
add esp, 0xc
jmp 0xaac269
mov esp, ebp
cmovne bp, cx
pop ebp
ret
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0xb5c7c3
call eax
test eax, eax
jmp 0xacc980
pop edi
jmp 0xb48d85
ret
jae 0xb1bde3
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
cmp sp, 0x6a11
test ebx, 0x4a453495
mov ecx, dword [ecx + edi]
cmp dx, di
cmc
test ecx, ecx
jne 0xbf3666
pop esi
btc bx, bx
pop ebx
xor edi, esp
xor eax, eax
movzx edi, bx
not di
pop edi
jmp 0xb9400b
je 0xb5554a
mov ebx, dword [ebp + 0xc]
dec cl
lea eax, [ebp - 0x114]
sub edx, edx
clc
sub ebx, eax
mov edi, edi
mov eax, 0x6e413364
rcr si, 0x93
mov cl, dl
rol si, 0x66
not si
rol eax, cl
add si, ax
lea esi, [ebp + edx - 0x114]
jmp 0xad9504
pop esi
xchg bx, ax
not bl
movsx bx, dh
pop ebx
cwde
lea eax, [ecx + edi]
pop edi
jmp 0xbd69b3
jbe 0xa7fe18
lea ebx, [ebp - 0x114]
cmp ax, bp
sub ebx, eax
mov dl, byte [eax]
jmp 0xaca1d1
mov esp, ebp
movzx ebp, bx
pop ebp
jmp 0xba1397
mov esp, ebp
movzx ebp, bx
cmovg ebp, ecx
bswap bp
pop ebp
ret
je 0xbe8d66
mov eax, 0x5a4d
test cl, 7
clc
cmp word [edi], ax
je 0xad8351
sub eax, eax
xchg di, di
mov di, 0x114c
pop edi
jmp 0xaaae8c
je 0xaa8734
mov bl, cl
test ebx, 0x26932e65
jmp 0xabd62b
je 0xb1bde3
cmp ecx, eax
jb 0xbc0754
mov edx, dword [ebp - 0x10]
test bp, 0x7527
stc
cmp si, 0x6583
lea edx, [edx + eax]
cmp ecx, edx
jae 0xbc0754
lea eax, [ecx + edi]
btc esi, 0xf0
mov cl, byte [eax]
btc si, 0x9a
mov esi, eax
stc
cmc
test cl, cl
jmp 0xb275e5
ja 0xb94d7c
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0xba2ecb
dec ebx
clc
cmp di, bx
add edx, edi
mov dword [ebp + 8], 0
test esi, esp
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0xb70d66
call eax
pop esi
movsx bx, dh
xchg edi, edi
setnp bh
pop ebx
jmp 0xb9c9f7
push ebp
mov ebp, esp
cmp ebp, 0x33b775ab
clc
lea esp, [esp - 0x114]
clc
cmc
push edi
mov edi, dword [ebp + 8]
test edi, edi
jmp 0xa6a6e1
mov dword [ebp - 8], ecx
jmp 0xa92909
jne 0xbe8d66
mov eax, dword [edx + 0x78]
stc
mov dword [ebp - 4], eax
test esp, 0x5b1e1c29
test eax, eax
jmp 0xadb287