Function at 0x20cd6ac
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
call fcn.020cd6ac
add esp, 0xc
pop edi
bswap ebx
pop ebx
xchg esi, esi
bswap esi
pop esi
mov esp, ebp
mov bp, 0x4da0
cmovle bp, sp
pop ebp
jmp 0x14dce37
test cl, cl
jmp 0x21f7a46
mov eax, dword [ebp + 0xc]
jmp 0x21f9b8f
je 0x1bbd56f
cmp eax, edx
jmp 0x1bb253f
ret
ja 0x2057283
movsx eax, cl
mov cl, byte [esi]
cmp esp, edx
test bx, bp
lea edx, [edx + edx*4]
stc
cmc
test ecx, ebp
lea edx, [eax + edx*2 - 0x30]
cmp ecx, esp
test cl, cl
jmp 0x205727d
ret
ret
push edi
jmp 0x14b503e
je 0x21db7cf
mov byte [ebx + eax], dl
jmp 0x20b9bf3
dec edi
jmp 0x208f64a
je 0x21db7cf
lea ebx, [ebp - 0x114]
sub ebx, eax
cmp si, 0x7ec9
mov dl, byte [eax]
clc
test dl, dl
jmp 0x1b6d51d
push edx
jmp 0x1b6915c
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x21c92f2
pop ebx
xchg esi, esi
cmovs si, cx
bswap si
pop esi
jmp 0x20761ea
jae 0x1bbd56f
mov esi, dword [edx + ecx + 0x1c]
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
cmp cl, 0xb0
test eax, eax
jmp 0x14d8e82
mov esp, ebp
cmovge bp, bx
pop ebp
jmp 0x14b20ab
js 0x224aef8
jmp 0x20867d9
ret
jb 0x209d87f
mov esi, dword [ebp - 0x10]
cmc
add esi, edx
cmp di, 0x4d4e
clc
cmp eax, esi
jmp 0x219b61c
jle 0x1be7cb0
lea ebx, [esi + 1]
mov ecx, dword [ebp + 8]
cmc
cmp ebx, edi
jle 0x20867d6
jmp 0x224aef5
jne 0x219b644
pop edi
sub bx, di
add bx, 0x65b6
pop ebx
mov esi, eax
sal esi, 0x85
sar esi, 0x3b
xor eax, eax
mov si, bp
pop esi
jmp 0x1b99f3f
jns 0x1bb4cca
lea edi, [esi - 1]
jmp 0x21c64ff
mov byte [esi], cl
jmp 0x1bfa2c0
call eax
pop edi
not ebx
xchg esi, esi
bswap ebx
pop ebx
pop esi
jmp 0x1c0b4f0
inc eax
stc
cmp bp, si
cmp edi, ecx
jmp 0x21db7c9
mov esp, ebp
not ebp
pop ebp
ret
mov eax, dword [ebp + 8]
bswap ecx
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + eax + 0x24]
and cl, ch
cmc
btc ecx, edx
lea ecx, [edx + esi*2]
jmp 0x224aee0
push edi
jmp 0x21d8335
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x1bc4d4c
mov edi, dword [edx + ecx + 0x18]
test dx, bp
cmp esi, 0x53667e5d
test edi, edi
jmp 0x20c1325
je 0x21d934a
inc eax
clc
stc
cmp eax, 0x104
jmp 0x21d9344
ja 0x1bf7163
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
jmp 0x2255032
jne 0x20e150a
lea edx, [ebp - 0x114]
setle ah
not ah
jmp 0x21fe659
mov esp, ebp
movsx ebp, sp
movzx ebp, cx
pop ebp
jmp 0x1ba710b
xor edx, edx
jmp 0x14bebc0
jne 0x21f7a4c
push 0
jmp 0x1b83db5
mov eax, dword [ecx + 0x3c]
cmc
cmp dword [eax + ecx], 0x4550
jmp 0x2244dce
mov esp, ebp
mov ebp, 0x65c44d13
pop ebp
jmp 0x14e3ecb
push eax
push edx
movzx ax, bl
mov al, 0xe1
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x20b546f
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
mov esi, 0x6c7746a2
bswap esi
lea esi, [edi + ebx]
sar esi, 1
mov eax, dword [eax + esi*4]
cmp bp, 0x5adb
push edx
shr dx, 0xef
shld dx, sp, 0x63
mov edx, dword [ebp + 0xc]
test esi, ebp
add eax, ecx
call fcn.014b42b8
lea esp, [esp + 4]
cmc
test eax, eax
jmp 0x1bc4590
mov dword [ebp - 0xc], eax
jmp 0x1ba3019
je 0x14cd254
mov edi, dword [ebp + 0xc]
sar bx, cl
lea ecx, [ebp - 0x114]
xor eax, eax
or esi, eax
bts esi, eax
mov bx, sp
sub edi, ecx
sete bl
lea esp, [esp]
mov cl, al
bts ebx, ebp
bswap bx
mov ebx, 0x136a317d
bts si, ax
ror si, 0x16
rol ebx, cl
lea esi, [ebp + eax - 0x114]
lea ecx, [eax + ebx]
cmp edi, 0x78256be4
xor cl, byte [edi + esi]
jmp 0x1bc4b58
inc esi
test cl, cl
jmp 0x1bbd569
pop edi
pop ebx
add eax, ecx
movsx esi, dx
xchg esi, esi
movzx esi, ax
pop esi
jmp 0x1be7c9f
cmp word [ecx], ax
je 0x205c2db
sub eax, eax
pop esi
mov esp, ebp
mov ebp, 0x6abc6ace
not ebp
pop ebp
jmp 0x14e10d7
call eax
pop edi
jmp 0x1b91275
inc edi
jmp 0x1be33df
je 0x224aef8
mov eax, dword [edx + ecx + 0x20]
stc
test ecx, edx
lea eax, [eax + ecx]
cmp edi, 0x46410d96
cmc
clc
sub ebx, ebx
jmp 0x1b7024e
mov ecx, esi
test dx, cx
clc
sub ecx, eax
cmp bp, 0x12e7
test ebp, esi
test bp, 0x6456
cmp ecx, 0x104
jae 0x1bbd56f
sub edi, edi
jmp 0x21d70f3
push ebp
mov ebp, esp
mov cx, 0x41a6
or ch, 0xe
dec cx
mov ecx, dword [ebp + 8]
test ebx, edx
sub esp, 0x114
push esi
test ecx, ecx
jmp 0x2194843
jmp 0x224aef8
je 0x1bbd56f
mov edx, dword [ebp + 8]
cmp edi, edx
jmp 0x21af87d
call eax
mov edi, eax
test edi, edi
jmp 0x1c08e9f
je 0x20ca614
mov cl, byte [esi + 1]
jmp 0x209980a
je 0x20ac8ec
mov esi, dword [ebp + 0xc]
cmp esi, 0x32561f9d
test esi, esi
je 0x20ac8ec
mov eax, 0x5a4d
cmc
jmp 0x20ac8e3
jae 0x209d87f
lea eax, [eax + ecx]
shld si, cx, 0xbc
mov cl, byte [eax]
bt si, 0x4c
neg si
cmovl si, dx
mov esi, eax
clc
stc
test cl, cl
je 0x1bbd56f
cmp cl, 0x2e
jmp 0x20f158c
jne 0x1b911fb
cmp byte [ebp + 0x10], 0
jmp 0x2098e45
mov cl, byte [esi + 2]
add esi, 2
cmp al, 0x9d
jmp 0x1c1496a
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
call eax
mov edi, eax
stc
test edi, edi
jmp 0x20e1504
jmp 0x1bb4cd3
je 0x20ac8ec
mov eax, dword [eax + ecx + 0x7c]
push ebx
clc
cmp ebp, 0x6263255c
push edi
cmp esp, esp
test bx, cx
cmp edi, 0x1020571a
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0xffffffff
stc
cmp esi, 0xffff
jmp 0x1c02731
je 0x21b002a
push 0
jmp 0x21e1afc
test ecx, ecx
jmp 0x1b81a4e
call fcn.020cd6ac
add esp, 0xc
bswap edi
pop edi
mov bl, 0xb6
pop ebx
pop esi
jmp 0x21e0281
jb 0x2098e6d
lea eax, [ebp - 0x114]
jmp 0x2078f21
jb 0x1b81a61
lea ecx, [ebp - 0x114]
movsx ax, ah
cbw
push ecx
cmovbe eax, ecx
mov eax, 0x4db66174
mov byte [ebp + edi - 0x114], 0
jmp 0x21e0ae2
mov esp, ebp
not ebp
mov ebp, eax
pop ebp
ret
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x20e88f4
push ecx
jmp 0x1bf03aa
je 0x2057283
lea eax, [ecx - 0x30]
jmp 0x2246f61
push eax
push edx
jmp 0x1bf7133
push edx
jmp 0x21b0f72
jne 0x20ac8ec
mov edx, dword [eax + ecx + 0x78]
clc
mov dword [ebp - 4], edx
test ah, 0x89
test edx, edx
jmp 0x21c72c3
inc esi
cmp esi, 0x6dd1086b
cmp al, 9
jmp 0x14df420
movzx edx, word [ecx + eax]
sub cx, ax
movzx ecx, ax
mov dword [ebp - 8], edx
rcl dh, cl
clc
mov ecx, eax
xor dl, 0x3e
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
test edi, eax
cmc
cmp eax, dword [edx + ecx + 0x14]
jmp 0x1b9568b
mov dword [ebp - 8], eax
jmp 0x20d36d3