Function at 0x1198a64
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0xb5cdd8
test eax, eax
jmp 0x117a598
ret
lea ebx, [esi - 1]
jmp 0x116b12f
pop edi
mov esp, ebp
xchg ebp, ebp
pop ebp
ret
call eax
pop esi
bswap edi
mov bx, di
pop ebx
movzx edi, sp
pop edi
jmp 0x110d39c
cmp cl, 0x2e
jmp 0x111cb68
je 0x10ab2ff
mov ebx, dword [ebp + 0xc]
cmp ecx, esi
lea eax, [ebp - 0x114]
xor edx, edx
sub cl, 0xf0
shr cl, cl
sub ebx, eax
movzx esi, bp
bswap ax
ror ah, cl
mov edi, edi
stc
movzx eax, bp
mov eax, 0x1b37092e
jmp 0x119c3e5
ja 0x107035a
sub ecx, dword [eax + edi + 0x10]
clc
cmp bh, 0x9f
cmc
cmp ecx, dword [eax + edi + 0x14]
jmp 0x11771ee
ret
je 0x11056de
cmp ecx, eax
jb 0x10b41e4
mov edx, dword [ebp - 0x10]
cmc
add edx, eax
cmp ecx, edx
jmp 0x118e2ba
je 0x110bdae
mov ecx, dword [ebp + 0xc]
test edx, ebp
test ecx, ecx
jmp 0x110bd9a
mov esp, ebp
pop ebp
ret
push eax
jmp 0x10d07d9
mov byte [ebp + eax - 0x114], 0
xchg ah, al
jmp 0x114f1b4
mov esp, ebp
mov bp, 0x48a6
movsx ebp, ax
bswap ebp
pop ebp
jmp 0xb758cd
mov edx, dword [edi + 0x3c]
stc
lea edx, [edx + edi]
test ebp, edx
cmp dword [edx], 0x4550
jmp 0x11a7a2c
call fcn.01198a64
add esp, 0xc
pop esi
mov edi, 0x5ed1839
pop ebx
mov edi, 0x23c1ec0
not edi
movzx edi, di
pop edi
jmp 0x100b20b
dec ebx
cmc
clc
stc
lea edx, [edx + edi]
test ebp, 0x5dd55d0c
cmc
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
jmp 0x1167570
mov esp, ebp
pop ebp
jmp 0x107113b
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0x104e60f
mov ecx, dword [ebp + 0xc]
btc eax, 0x8e
neg esi
mov edx, dword [ebp - 0xc]
rol si, 4
or al, 0xc6
mov eax, dword [ebp + 8]
rol si, 0x3d
lea esi, [ebx + eax]
test cx, cx
mov eax, dword [ebp + 0x10]
test dl, 0x68
clc
push eax
sar esi, 1
inc ax
shrd eax, edi, 0x2e
mov eax, dword [edx + esi*4]
test bl, 0xa
add eax, edi
jmp 0x11abb90
mov edx, dword [ecx + edi + 0x24]
bswap ecx
lea eax, [edx + esi*2]
movzx dx, bh
bswap dx
cdq
movzx ecx, word [eax + edi]
mov edx, 0x124b2cf3
cwd
cmovp dx, ax
lea edx, [ebx + 1]
jmp 0x1025444
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x116cb9d
lea eax, [ecx + edi]
mov edi, 0x23b418fc
pop edi
jmp 0xbeb6d6
cmp edx, ecx
jmp 0x107e416
call eax
test eax, eax
jmp 0x1059af8
call eax
pop esi
pop ebx
mov di, si
xchg di, di
pop edi
jmp 0x110bbed
push eax
movsx eax, cx
movzx eax, dx
push edi
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0xb65e01
ret
ret
je 0x11056de
cmp eax, edi
jne 0x106501a
cmp byte [ebp + 0x10], 0
jmp 0xb69579
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
je 0x10fc2f9
push 0
push ecx
push eax
jmp 0xff0f40
jae 0x11056de
mov ecx, dword [eax + edi + 0x1c]
or dh, 0x1f
lea edx, [ecx + esi*4]
ror cx, 0xe8
btr cx, bx
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0xba054f
inc esi
cmp bl, 9
ja 0x1188660
movsx ecx, cl
lea edx, [edx + edx*4]
cmp esp, 0x629917ee
clc
lea edx, [ecx + edx*2 - 0x30]
test ebx, edx
jmp 0x1188654
mov ebx, dword [eax + edi + 0x18]
clc
test edi, ebx
cmc
test ebx, ebx
je 0x10fc501
mov edx, dword [eax + edi + 0x20]
jmp 0xff799f
ret
jb 0x10c5165
mov eax, dword [ebp + 8]
movsx cx, ah
lea ecx, [ebp - 0x114]
push ecx
jmp 0xbea53e
mov eax, dword [ebp + 0xc]
jmp 0x1145dab
je 0x1188660
mov bl, cl
stc
test ebx, ebp
sub bl, 0x30
jmp 0x106d333
pop esi
movzx eax, cx
setb bl
pop ebx
setb ah
jmp 0x10296c5
jne 0xba0555
pop esi
pop ebx
sub eax, eax
jmp 0xb624db
jbe 0x107e41c
lea ebx, [ebp - 0x114]
shl dl, 0x8e
sub ebx, eax
mov dl, byte [eax]
jmp 0x1156e23
call fcn.01198a64
add esp, 0xc
movzx ebx, di
jmp 0x114d0ff
mov dword [ebp + 8], esi
jmp 0x10f180b
inc edx
jmp 0x10ef397
inc eax
jmp 0x11320d0
jmp 0x116b12f
mov cl, byte [esi + 2]
add esi, 2
cmc
xor edx, edx
clc
test cl, cl
jmp 0x10af93d
mov esi, dword [ebp - 8]
cmp si, cx
cmp al, 0xb9
test ecx, 0x25aa21d7
cmp esi, dword [eax + edi + 0x14]
jmp 0x10696c0
push esi
cmp ecx, eax
stc
or esi, 0xffffffff
cmc
test ebp, 0x10600f9a
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0xb7403c
mov byte [esi], al
je 0x114adfc
inc edx
test dh, 0xc4
clc
test edi, edi
cmp edx, 0x104
jmp 0x114adf6
jne 0xb67f73
pop esi
pop ebx
test ebx, ebp
sub eax, eax
xchg di, di
pop edi
jmp 0x1000ace
mov esp, ebp
movsx ebp, dx
mov ebp, 0x53132f7f
pop ebp
jmp 0xb584a5
je 0x110bdae
mov eax, 0x5a4d
cmp word [edi], ax
je 0xff0d24
sub eax, eax
not edi
pop edi
jmp 0x115c6df
mov esp, ebp
mov bp, 0x5bd1
not ebp
pop ebp
jmp 0x104fb0b
je 0x116be43
mov cl, byte [esi + 1]
jmp 0x1120e09
inc esi
test cl, cl
jmp 0x11056d8
jae 0x11056de
mov dword [ebp + 8], 0
cmc
test ecx, ecx
jmp 0x10c5154
mov dword [ebp + 8], edx
jmp 0x1035e45
push eax
lahf
mov eax, esi
push edi
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0x1045d37
jb 0xb695a1
lea eax, [ebp - 0x114]
jmp 0x104e50c
pop esi
not di
pop ebx
movsx edi, si
jmp 0x11a532a
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA]
call eax
test eax, eax
jmp 0x11ab39e
test dl, dl
je 0x107e41c
mov byte [ebx + eax], dl
movzx edx, dx
cmovb dx, dx
mov edx, dword [ebp + 8]
jmp 0x10df05d
je 0x110bdae
mov edx, dword [edx + 0x7c]
test ax, 0x4003
push ebx
jmp 0x10fcfb8
mov esp, ebp
pop ebp
ret
test ebx, ebx
jl 0x10fc501
jmp 0x101a654
cmp dword [ebp + 8], ebx
jle 0x101a642
mov eax, dword [ebp - 4]
shl si, 0x77
jmp 0x10fc4f3
mov ecx, esi
stc
cmp esp, esi
sub ecx, eax
cmp bp, 0x3ae8
cmp ecx, 0x104
jmp 0x11257ce
jmp 0x116b12f
jae 0x11056de
mov edx, dword [eax + edi + 0x1c]
stc
cmc
cmp ebp, ebx
lea ecx, [edx + ecx*4]
cmp esp, 0x46604056
test bl, 0x68
mov ecx, dword [ecx + edi]
test al, dh
test ecx, ecx
jmp 0x10c156a
je 0x11a1d27
cmp eax, 1
jmp 0x118d98e
mov cl, byte [esi]
cmp edx, esi
test cl, cl
jne 0x10af943
push 0
push edx
jmp 0xbe9888
jne 0x116b12f
inc esi
jmp 0x10db8bf
jae 0x10b41e4
lea eax, [ecx + edi]
inc si
xadd si, si
mov cl, byte [eax]
sbb si, 0x6cf9
mov esi, eax
test cl, cl
je 0x11056de
mov edi, edi
jmp 0xb67f73
push ebp
mov ebp, esp
cmc
test dh, 0xfa
stc
sub esp, 0x114
test bh, al
cmp cx, 0x189a
push edi
bsr edi, esp
rcr di, 0xc5
mov edi, dword [ebp + 8]
cmc
clc
cmp ax, 0x429b
test edi, edi
jmp 0xbb2e5b
mov cl, dl
rcr esi, 0x79
rol esi, 0xe4
rol eax, cl
lea esi, [ebp + edx - 0x114]
cmc
add al, dl
xor al, byte [ebx + esi]
jmp 0x10ff6db
mov ecx, dword [ebp - 4]
cbw
jmp 0x10237a4
pop edi
jmp 0xbe6f7d
jne 0x110bdae
mov eax, dword [edx + 0x78]
test edi, 0x76132258
clc
mov dword [ebp - 4], eax
clc
test eax, eax
jmp 0x115ae48
jne 0x1059afe
lea edx, [ebp - 0x114]
movsx eax, di
bswap eax
push edx
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA]
jmp 0x103af6e
call fcn.011578ad
lea esp, [esp + 4]
clc
cmp eax, 0xffffffff
jmp 0xb3a707