Function at 0x1a2ceee
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov ebx, dword [eax + edi + 0x18]
jmp 0x11a3aef
je 0x11a47d2
mov byte [ebx + eax], dl
mov dl, 0x76
cwd
cdq
mov edx, dword [ebp + 8]
jmp 0x198e31e
jae 0x136b2e6
mov ecx, dword [eax + edi + 0x1c]
movsx edx, di
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
test di, di
cmp al, 0xe7
test ecx, ecx
je 0x136b2e6
cmp ecx, eax
jmp 0x1a3f5cd
mov esp, ebp
movzx ebp, di
cmovl ebp, eax
movsx ebp, cx
pop ebp
jmp 0x136bc67
mov eax, 0x18260e
bts esi, ecx
mov cl, dl
bt si, bx
rol eax, cl
lea esi, [ebp + edx - 0x114]
add al, dl
jmp 0x198bfed
mov ecx, dword [ebp + 0xc]
setl dh
shl esi, 0x2f
mov edx, dword [ebp - 0xc]
rol eax, 0x9c
mov eax, dword [ebp + 8]
bts si, bp
and esi, 0x277e7570
dec esi
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
push eax
sar esi, 1
movsx eax, dx
bsf eax, ebp
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.01374696
lea esp, [esp + 4]
test dl, 0xcc
cmp eax, 0xffffffff
jmp 0x1a29b03
push eax
jmp 0x1376deb
test ebx, ebx
je 0x11acc96
mov edx, dword [eax + edi + 0x20]
jmp 0x1a38f76
ret
jb 0x136c0ca
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
push ecx
jmp 0x1a323a8
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x137706d
mov edx, dword [edi + 0x3c]
test sp, dx
cmc
test esp, 0x61fd19a7
lea edx, [edx + edi]
clc
cmp dh, 0x10
jmp 0x1a3a710
je 0x199d47e
cmp eax, 1
jmp 0x11ad7b3
cmp cl, 0x2e
jmp 0x11ac8cb
ret
push edx
push eax
jmp 0x1a2ce7f
je 0x1372667
mov cl, byte [esi + 1]
inc esi
stc
cmc
test cl, cl
jmp 0x136b2e0
cmp esi, dword [eax + edi + 0x14]
jmp 0x119d0cd
jne 0x198b713
inc esi
jmp 0x1a2eab7
push ebx
push esi
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
clc
cmc
test ebp, 0x34752283
mov dword [ebp - 8], esi
stc
cmp ecx, 0xffff
ja 0x118ce36
sub ecx, dword [eax + edi + 0x10]
cmc
cmp di, 0x5e82
cmp ecx, dword [eax + edi + 0x14]
jmp 0x199a360
je 0x19905b2
mov ebx, dword [ebp + 0xc]
sar si, 0xeb
lea eax, [ebp - 0x114]
rcl cl, cl
sbb cl, 0xf2
sub edx, edx
sub ebx, eax
btc si, bp
not al
mov edi, edi
btr si, si
jmp 0x11a020d
mov dword [ebp + 8], edx
jmp 0x1a3eb69
ret
push eax
mov ax, 0x474f
lahf
push edi
cwde
bswap ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
not bh
pop ebx
bswap edi
movsx edi, dx
cmovnp edi, ebx
pop edi
mov esp, ebp
pop ebp
jmp 0x199121b
ret
call eax
pop esi
mov edi, 0x2af55d4
pop ebx
cmove di, si
bswap edi
pop edi
jmp 0x1990765
jne 0x11a8b06
pop esi
rcl edi, 0x1d
pop ebx
clc
xor eax, eax
bswap di
pop edi
jmp 0x1a28304
ret
jae 0x136b2e6
mov dword [ebp + 8], 0
cmp ebx, 0x4a72397f
clc
test ecx, ecx
jbe 0x11a47d2
lea ebx, [ebp - 0x114]
cmp si, 0x465
test bx, si
sub ebx, eax
shl dl, 0x81
mov dl, byte [eax]
cmp dl, 0x50
cmc
test dl, dl
jmp 0x118ce86
cmp ecx, 0x104
jmp 0x136c09b
mov ecx, esi
test dh, al
jmp 0x1375294
mov esp, ebp
jmp 0x1a3157b
sub ecx, eax
cmc
jmp 0x136cd64
call fcn.01a2ceee
add esp, 0xc
movzx esi, cx
bswap esi
jmp 0x1376ed8
pop esi
pop ebx
movzx edi, sp
pop edi
jmp 0x198e305
call eax
test eax, eax
jne 0x1a3b4e2
lea edx, [ebp - 0x114]
push edx
lahf
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x1a3b4d8
je 0x1377132
inc edx
cmp bp, ax
cmp edx, 0x104
jb 0x11a020d
lea eax, [ebp - 0x114]
push eax
push edi
movsx eax, si
mov ax, si
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x136b0ca
ret
jne 0x198af48
cmp byte [ebp + 0x10], 0
jmp 0x1368c1a
cmp byte [esi + 1], 0x23
bswap cx
movsx ecx, di
xchg ch, ch
lea ecx, [esi + 1]
jmp 0x1a3f22e
lea ebx, [esi - 1]
stc
cmp dword [ebp + 8], ebx
jmp 0x1a3ec35
xor al, byte [ebx + esi]
mov byte [esi], al
jmp 0x137711c
mov esp, ebp
pop ebp
jmp 0x11ab3ab
inc edx
jmp 0x19a01aa
mov eax, dword [ebp + 0xc]
jmp 0x1369555
mov esp, ebp
bswap bp
mov ebp, esi
xchg bp, bp
pop ebp
jmp 0x1377eb1
ret
mov esp, ebp
bswap bp
not bp
pop ebp
jmp 0x1996755
jl 0x11acc96
jmp 0x11a0da0
je 0x1a41c43
mov edx, dword [edx + 0x7c]
jmp 0x13647b2
ja 0x1993079
movsx ecx, cl
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
test si, bp
shl cl, cl
mov cl, byte [esi]
cmp ax, sp
test cl, cl
jne 0x1a374c8
push 0
jmp 0x11ac3cf
ret
jae 0x136b2e6
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
clc
test edi, edi
cmp si, si
mov ecx, dword [ecx + edi]
stc
test ecx, ecx
jne 0x119d0ed
pop esi
rol edi, 0x7b
or edi, 0x5dfb2e77
sar bl, 0x86
pop ebx
adc di, di
xor eax, eax
bswap edi
pop edi
jmp 0x119dc3f
mov ecx, dword [ebp - 4]
movzx eax, di
cwde
cmovae dx, sp
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
movzx ecx, ax
movzx ecx, word [eax + edi]
xchg dx, dx
cdq
lea edx, [ebx + 1]
jmp 0x1a38e45
inc eax
cmc
cmp ecx, 0x7e4a2059
test bp, 0x66fa
mov dword [ebp + 8], edx
clc
cmp edx, ecx
jmp 0x11a47cc
mov esp, ebp
xchg bp, bp
pop ebp
jmp 0x11a4417
je 0x198b70f
test eax, eax
jmp 0x11a83a7
call fcn.01a2ceee
add esp, 0xc
bswap esi
mov bx, 0x1868
pop esi
pop ebx
movzx edi, cx
pop edi
jmp 0x137427c
push ebp
and ebp, 0x46a555de
or bp, 0x2ede
stc
mov ebp, esp
cmc
test esp, 0x109223cb
sub esp, 0x114
push edi
test bl, al
bswap edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1a41c43
mov ecx, dword [ebp + 0xc]
cmp si, 0x1946
test esi, 0x16d244b8
test sp, dx
test ecx, ecx
je 0x1a41c43
mov eax, 0x5a4d
cmc
cmp word [edi], ax
jmp 0x1a41c3d
mov dword [ebp + 8], esi
jmp 0x198b713
je 0x136b2e6
mov edi, edi
cmp esp, 0x72892de4
jmp 0x11a8b06
mov esp, ebp
bswap ebp
pop ebp
jmp 0x13692ed
pop ebp
jmp 0x136a3c7
mov cl, byte [esi + 2]
cmp ebx, 0x41a13db4
lea esi, [esi + 2]
cmp esi, ebp
cmc
sub edx, edx
test ecx, esp
test cl, cl
jmp 0x1a374c2
mov byte [ebp + eax - 0x114], 0
jmp 0x11a78e6
je 0x1993079
mov bl, cl
sub bl, 0x30
inc esi
cmp bl, 9
jmp 0x1993057
mov dword [ebp - 8], ecx
jmp 0x1369238
dec ebx
clc
test sp, 0xde5
test di, si
add edx, edi
clc
cmp ebp, 0x6977642f
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
test esi, ebx
cmp eax, 0x475a6e8b
test ebx, ebx
jmp 0x199280a
cmp dword [edx], 0x4550
jne 0x1a41c43
mov eax, dword [edx + 0x78]
test ecx, esi
mov dword [ebp - 4], eax
test eax, eax
jmp 0x1992b0c
call eax
test eax, eax
je 0x136b2e6
cmp eax, edi
jmp 0x198ae8b
pop esi
mov ebx, 0x6d673e65
movzx ax, ah
pop ebx
lahf
lea eax, [ecx + edi]
cmovb di, sp
pop edi
jmp 0x19918b6
jmp 0x198b713
jle 0x11a0d91
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp dx, 0x193c
jmp 0x11acc96
je 0x1a319c4
push 0
push ecx
jmp 0x11a1f37
jb 0x1a3b501
mov edx, dword [ebp - 0x10]
clc
stc
lea edx, [edx + eax]
test di, si
cmp ecx, edx
jae 0x1a3b501
lea eax, [ecx + edi]
bsf si, sp
sal esi, 0xdd
mov cl, byte [eax]
xadd esi, esi
mov esi, eax
cmp esp, 0x47bb5817
cmp di, cx
test cl, cl
jmp 0x1a2f459
je 0x11a7cd5
xor eax, eax
pop edi
jmp 0x1a31452