Function at 0xd41a47
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov ecx, esi
sub ecx, eax
cmp ecx, 0x104
jmp 0x10ceff2
push ebp
mov ebp, esp
mov ecx, dword [ebp + 8]
test sp, 0x3fce
sub esp, 0x114
test edi, ecx
cmp edi, ebp
stc
push esi
cmp esi, ebx
stc
test ecx, ecx
jmp 0x158b45f
mov esp, ebp
pop ebp
jmp 0xdfd11f
test eax, eax
jmp 0x10dbde6
ret
mov esp, ebp
not bp
movzx ebp, bx
pop ebp
jmp 0xddbf21
mov eax, dword [ebp + 0xc]
jmp 0x10cafdc
mov dword [ebp - 8], eax
jmp 0x103eb80
je 0x15cfda5
mov eax, dword [eax + ecx + 0x7c]
cmp esp, edx
cmc
push ebx
test cx, sp
push edi
mov dword [ebp - 0x10], eax
cmp bp, 0x751a
mov dword [ebp - 8], 0xffffffff
cmc
cmp esi, 0xffff
jmp 0x1015c57
jle 0x14e7d5b
jmp 0x1524454
ret
je 0xd3e640
mov cl, byte [esi + 1]
jmp 0x14fce90
ja 0x14c52f9
movsx eax, cl
jmp 0x14c52df
ret
ret
call eax
pop edi
cmovl bx, cx
pop ebx
pop esi
jmp 0x10b0f63
push edi
jmp 0x14baa26
mov esp, ebp
pop ebp
jmp 0x106f917
ja 0x10b9fc1
mov eax, esi
cmc
cmp esi, 0x12dc0922
jmp 0x1591aa4
je 0x152445d
mov eax, dword [edx + ecx + 0x20]
clc
cmp bp, 0x7c93
test edi, ecx
add eax, ecx
cmc
test dh, 0x62
xor ebx, ebx
jmp 0x10851a2
push ecx
push edi
jmp 0x15baad8
je 0x10271f8
mov byte [ebx + eax], dl
inc edi
inc eax
cmp edi, ecx
jb 0x107dec3
lea ecx, [ebp - 0x114]
cwde
cmovae eax, ecx
push ecx
nop
mov ah, 0x7f
mov byte [ebp + edi - 0x114], 0
cmovno eax, eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x157fbdf
ret
jmp 0x152445d
jns 0x154fa36
lea edi, [esi - 1]
jmp 0x154e3f1
jne 0x105e9eb
pop edi
or bl, 0x9d
xor ebx, esp
pop ebx
bt si, ax
xor eax, eax
mov esi, edx
mov esi, 0x7ab27335
pop esi
jmp 0xd4872a
jae 0x10d8eef
lea eax, [eax + ecx]
cmc
mov cl, byte [eax]
or si, dx
inc esi
bts si, ax
mov esi, eax
test cl, cl
je 0x104d106
cmp cl, 0x2e
jmp 0xdf4f07
je 0x10d74da
push 0
jmp 0x101e580
ret
mov esp, ebp
pop ebp
jmp 0xd5cb4f
je 0x10271f8
lea ebx, [ebp - 0x114]
rol dl, 0x95
xor dl, 0x6a
sub ebx, eax
test ebp, ecx
mov dl, byte [eax]
test dl, dl
jmp 0x10271e5
dec edi
jmp 0x155d4f1
pop esi
jmp 0x100476b
pop esi
jmp 0x107248a
jb 0x10d8eef
mov esi, dword [ebp - 0x10]
jmp 0x1503a83
add eax, ecx
call fcn.01560975
add esp, 4
test ax, bp
stc
test eax, eax
jmp 0x1045077
jb 0x1526f56
lea eax, [ebp - 0x114]
jmp 0x14ac924
mov esp, ebp
mov bp, 0x27e3
pop ebp
jmp 0x1029c2b
mov eax, dword [eax + ecx]
cmp ax, bx
jmp 0xd4b02f
mov edi, dword [edx + ecx + 0x18]
stc
test si, ax
jmp 0x15a469a
ret
push eax
cbw
cwde
seta al
push edx
nop
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x14e57e1
jae 0x104d106
xor edi, edi
test bp, 0x281a
test ecx, ecx
jmp 0x107dead
mov cl, byte [esi + 2]
lea esi, [esi + 2]
test bp, di
sub edx, edx
test cl, cl
jmp 0x15c82c9
pop edi
or ebx, ebp
pop ebx
cmc
mov si, ax
add eax, ecx
jmp 0x1094727
je 0x104d106
cmp eax, edx
jmp 0x1099248
push eax
push edx
mov eax, 0x32e553e9
mov ax, ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xe0df3a
call fcn.00d41a47
add esp, 0xc
pop edi
bswap bx
jmp 0x15c6a27
mov esp, ebp
pop ebp
jmp 0x10c21bb
mov cl, byte [esi]
lea edx, [edx + edx*4]
cmp ebx, 0x31ba71fa
lea edx, [eax + edx*2 - 0x30]
clc
cmp eax, esi
test cl, cl
jne 0x15c82cf
push 0
push edx
jmp 0xfe223c
call eax
pop edi
bswap esi
pop ebx
mov esi, ecx
bswap esi
pop esi
jmp 0xdb9e10
mov eax, dword [ebp - 0xc]
test ecx, 0x6f695611
xor edx, esp
neg si
mov edx, dword [ebp + 0x10]
adc si, ax
lea esi, [edi + ebx]
cmp sp, ax
sar esi, 1
mov eax, dword [eax + esi*4]
test di, 0x53ad
clc
push edx
rcl edx, cl
cmp ebp, eax
mov edx, dword [ebp + 0xc]
jmp 0x109ab78
inc esi
test cl, cl
jmp 0x104d100
lea esi, [esi + edx]
test si, di
cmc
cmp eax, esi
jmp 0x105e9cd
inc esi
cmc
test sp, 0x54a2
cmp al, 9
jmp 0xdf848d
mov eax, dword [ebp + 8]
cmp di, 0x5872
cwd
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + eax + 0x24]
test eax, 0x6db74e80
shr ch, 0x29
bsf cx, sp
lea ecx, [edx + esi*2]
btr edx, 0x63
bts edx, edi
adc dx, 0x275
movzx edx, word [ecx + eax]
sub ecx, eax
rcl ch, 0x31
mov dword [ebp - 8], edx
mov ecx, eax
mov edx, dword [ebp - 4]
test sp, 0x6a8f
clc
mov eax, dword [ebp - 8]
cmp esi, 0x508001c6
cmp eax, dword [edx + ecx + 0x14]
jae 0x104d106
mov esi, dword [edx + ecx + 0x1c]
test bx, bx
test esp, 0x781f680d
lea eax, [esi + eax*4]
jmp 0x10b9fb6
je 0x104d106
mov edx, dword [ebp + 8]
cmp edi, edx
jne 0x158734d
cmp byte [ebp + 0x10], 0
je 0xdc1095
mov edi, dword [ebp + 0xc]
add cl, 0xc5
shr bx, cl
cmp esp, 0x56d4413e
lea ecx, [ebp - 0x114]
sub bx, di
mov si, dx
sub eax, eax
cmp sp, sp
bt esi, 0x73
shl bl, cl
sub edi, ecx
ror ebx, cl
rcl cl, 0x80
lea esp, [esp]
rol bh, 0xcc
ror cl, cl
mov cl, al
bts bx, sp
not si
mov ebx, 0x1f5a3306
clc
rol ebx, cl
movzx ecx, bx
lea esi, [ebp + eax - 0x114]
jmp 0x15ad987
mov eax, dword [ecx + 0x3c]
stc
clc
cmp dword [eax + ecx], 0x4550
jne 0x15cfda5
mov edx, dword [eax + ecx + 0x78]
clc
stc
mov dword [ebp - 4], edx
stc
cmc
clc
test edx, edx
jmp 0xdcba50
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov edi, eax
test sp, 0x5cb4
test edi, edi
jmp 0x1526f02
js 0x152445d
jmp 0x14e7d69
jmp 0x154fa49
jle 0x152441a
lea ebx, [esi + 1]
movzx ecx, sp
xor cl, dl
bt cx, 0x97
mov ecx, dword [ebp + 8]
cmc
cmp ebx, edi
jmp 0xdd3ed5
mov dword [ebp - 0xc], eax
jmp 0x154bf96
call eax
mov edi, eax
test edi, edi
jne 0x1526f08
lea edx, [ebp - 0x114]
movzx ax, bh
push edx
jmp 0x153528d
cmp byte [esi + 1], 0x23
mov cx, 0x2a62
cmovge ecx, ecx
movzx ecx, bp
lea ecx, [esi + 1]
jmp 0x106873a
je 0x15cfda5
mov esi, dword [ebp + 0xc]
test esi, esi
jmp 0x15cfd8f
sub eax, dword [edx + ecx + 0x10]
jmp 0xdc2de6
test edi, edi
jmp 0x101bd44
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
mov byte [esi], cl
jmp 0x15bfe8d
call fcn.00d41a47
add esp, 0xc
movsx ebx, cx
not di
pop edi
pop ebx
cmova si, bp
mov esi, 0x742218f
pop esi
mov esp, ebp
cmovb bp, bp
mov bp, di
pop ebp
jmp 0xe05ee3
je 0x10ad043
inc eax
cmc
cmp eax, 0x104
jmp 0x10ad03d
pop ebx
not esi
mov si, dx
mov si, 0x4ca1
pop esi
jmp 0x14c0f00
je 0x14c52f9
lea eax, [ecx - 0x30]
jmp 0x1514673
je 0x15cfda5
mov eax, 0x5a4d
cmc
clc
cmp word [ecx], ax
je 0x152b260
sub eax, eax
bswap si
jmp 0x10954ef