Function at 0x1a6a755
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop ebp
ret
jle 0x1a49bfa
lea ebx, [esi + 1]
or ch, ah
mov ecx, dword [ebp + 8]
cmp ebx, edi
jle 0x208619f
jmp 0x1a49c3c
mov esp, ebp
jmp 0x19a0c8b
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x20c905f
jb 0x20b3eb9
mov esi, dword [ebp - 0x10]
cmp bl, dl
add esi, edx
cmp eax, esi
jae 0x20b3eb9
add eax, ecx
mov cl, byte [eax]
sbb si, dx
mov esi, eax
jmp 0x20bf17f
ret
jmp 0x1a49c3f
test esi, esi
jmp 0x19ab1e4
pop ebp
jmp 0x20537ef
je 0x19c8fab
lea eax, [ecx - 0x30]
jmp 0x200754f
je 0x203135b
mov eax, 0x5a4d
cmp dh, dh
test bp, 0x7bb
cmp word [ecx], ax
jmp 0x2031355
mov esp, ebp
mov bp, dx
pop ebp
jmp 0x20013cb
push eax
cmove eax, esi
bswap ax
push edx
movsx eax, bx
jmp 0x1924243
ret
jne 0x19a1182
push 0
jmp 0x20901c1
call eax
mov edi, eax
test edi, edi
jmp 0x2076630
mov eax, dword [eax + esi*4]
cmc
cmp bp, bx
push edx
btr edx, edx
movsx edx, si
mov edx, dword [ebp + 0xc]
stc
cmp ebp, edx
add eax, ecx
jmp 0x204641e
jne 0x2001bc2
cmp byte [ebp + 0x10], 0
jmp 0x1a1cc50
mov eax, dword [ebp + 0xc]
jmp 0x19b6184
push ecx
jmp 0x2945cfa
je 0x1a0a38d
mov edi, dword [ebp + 0xc]
bt si, ax
inc si
cmovns ecx, ebx
lea ecx, [ebp - 0x114]
ror bl, cl
adc esi, ebp
inc bx
xor eax, eax
sub edi, ecx
xchg cl, bl
rcl esi, 0xd9
lea esp, [esp]
mov cl, al
jmp 0x1a79e63
test cl, cl
jmp 0x19a117c
je 0x203135b
mov eax, dword [eax + ecx + 0x7c]
test bx, bp
push ebx
push edi
cmp ax, si
stc
mov dword [ebp - 0x10], eax
jmp 0x1a5e56d
pop esi
jmp 0x1922b5f
lea esi, [esi + 2]
cmp ebx, esp
sub edx, edx
jmp 0x1a1e7a6
je 0x1a73e3b
mov byte [ebx + eax], dl
jmp 0x2038050
mov cl, byte [esi + 2]
jmp 0x1a2beb5
mov eax, dword [ebp + 8]
ror cx, cl
btc cx, dx
adc dl, dh
mov ecx, dword [ebp - 4]
or dx, dx
mov edx, dword [ecx + eax + 0x24]
sar ch, 0x8d
setp cl
cmp ah, 0x55
lea ecx, [edx + esi*2]
cmp ebp, 0x231261f7
neg dh
movzx edx, word [ecx + eax]
bts ecx, edi
mov dword [ebp - 8], edx
dec dl
xor ch, 0x3b
mov ecx, eax
cbw
bt dx, 3
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
cmp di, 0x6d6d
cmp eax, dword [edx + ecx + 0x14]
jae 0x20c902b
mov esi, dword [edx + ecx + 0x1c]
test ch, 0xe
lea eax, [esi + eax*4]
stc
mov eax, dword [eax + ecx]
cmp esp, edi
clc
stc
test eax, eax
je 0x20c902b
cmp eax, edx
jmp 0x1934ef9
call eax
mov edi, eax
test sp, bp
cmp di, bp
clc
test edi, edi
jne 0x2076636
lea edx, [ebp - 0x114]
xchg al, al
push edx
movzx eax, dx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x19e6e2f
mov eax, dword [ecx + 0x3c]
stc
cmp dword [eax + ecx], 0x4550
jmp 0x209719a
push eax
movzx ax, ch
mov eax, edx
movsx eax, ax
push edx
lahf
cmovne eax, esp
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop ebx
pop esi
mov esp, ebp
jmp 0x1914384
mov dword [ebp - 8], 0xffffffff
cmp bh, 0x93
cmp esi, 0xffff
jmp 0x2162be8
mov ecx, esi
sub ecx, eax
cmp ecx, 0x104
jmp 0x1a90af7
test edi, edi
jmp 0x2045161
push ebp
mov ebp, esp
rcr ch, cl
mov ecx, dword [ebp + 8]
stc
sub esp, 0x114
clc
cmc
stc
push esi
test ecx, ecx
je 0x203135b
mov esi, dword [ebp + 0xc]
jmp 0x199c6a8
mov esp, ebp
movzx ebp, si
not ebp
pop ebp
ret
jb 0x1fe98b1
lea ecx, [ebp - 0x114]
cwde
lahf
push ecx
mov byte [ebp + edi - 0x114], 0
lahf
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x1a4a4a4
mov ebx, 0xeef17c7
btr si, 0x88
ror esi, 0xe8
movsx esi, ax
rol ebx, cl
lea esi, [ebp + eax - 0x114]
adc cl, 0x92
lea ecx, [eax + ebx]
cmp esp, ecx
stc
xor cl, byte [edi + esi]
jmp 0x203b5f8
jmp 0x191bc60
jb 0x1a1cc80
lea eax, [ebp - 0x114]
jmp 0x1a557ca
jae 0x20c902b
xor edi, edi
jmp 0x1fe98a0
mov dword [ebp - 8], eax
jmp 0x199c427
je 0x1a659ca
mov cl, byte [esi + 1]
jmp 0x2026370
test cl, cl
jmp 0x19c8fa5
mov esp, ebp
pop ebp
jmp 0x193687b
mov edi, dword [edx + ecx + 0x18]
jmp 0x1a660b8
test ecx, ecx
je 0x1a73e3b
lea ebx, [ebp - 0x114]
sub ebx, eax
stc
mov dl, byte [eax]
test dl, dl
jmp 0x1a34905
call fcn.01a6a755
add esp, 0xc
pop edi
mov bl, dl
mov esi, 0x76e81bfb
pop ebx
mov esi, 0x10242414
jmp 0x1a2abfa
ret
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
je 0x1a3f644
push 0
jmp 0x1a0d39f
inc esi
cmp ecx, edi
test dl, ah
cmp al, 9
ja 0x19c8fab
movsx eax, cl
mov cl, byte [esi]
cmp di, 0x1aaf
lea edx, [edx + edx*4]
lea edx, [eax + edx*2 - 0x30]
clc
jmp 0x1fe4aca
jns 0x191bc55
lea edi, [esi - 1]
jmp 0x1a81448
inc esi
test bp, 0x4022
stc
test cl, cl
jmp 0x20c9025
je 0x1a4fc43
sub eax, eax
pop esi
jmp 0x1a6d0da
inc edi
jmp 0x20b1e44
mov byte [esi], cl
je 0x1a8b229
inc eax
test edi, ecx
cmp eax, 0x104
jmp 0x1a8b223
je 0x1a49c3f
mov eax, dword [edx + ecx + 0x20]
cmp si, 0x729f
lea eax, [eax + ecx]
xor ebx, ebx
dec edi
jmp 0x20b30d0
call fcn.019a1c1a
add esp, 4
cmp sp, 0x3443
test eax, eax
jmp 0x20214f1
je 0x20c902b
cmp cl, 0x2e
jmp 0x1fcc86b
ret
mov esp, ebp
mov bp, 0x37e7
movzx ebp, cx
mov ebp, esi
pop ebp
jmp 0x206bfa7
mov esp, ebp
pop ebp
jmp 0x19b9143
ret
je 0x20c902b
mov edx, dword [ebp + 8]
clc
cmp ah, ch
cmp edi, edx
jmp 0x19fb90b
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
xor esi, ebp
lea esi, [edi + ebx]
sar esi, 1
jmp 0x19ecb98
push edx
push edi
call fcn.01a6a755
add esp, 0xc
pop edi
movsx ebx, cx
cmove ebx, edx
movzx esi, cx
pop ebx
movsx esi, dx
mov si, 0x7dc3
cmovle esi, eax
pop esi
jmp 0x1fe5a13
jne 0x203135b
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
cmc
test edx, edx
jmp 0x1a1ff1c
inc eax
cmc
cmp si, 0x3d2c
cmp di, bp
cmp edi, ecx
jmp 0x1a73e35
mov dword [ebp - 0xc], eax
jmp 0x20b6bcf
pop edi
bswap si
cmp sp, cx
pop ebx
movsx esi, bx
shl si, 7
add eax, ecx
movsx esi, dx
pop esi
jmp 0x20554ea
js 0x1a49c3f
jmp 0x20861a2
test cl, cl
jmp 0x204d484
jne 0x204d48a
pop edi
pop ebx
sub eax, eax
not si
movzx esi, ax
pop esi
jmp 0x205ed4e
call eax
pop edi
pop ebx
pop esi
jmp 0x19b1b86
ja 0x1fe60e7
mov eax, esi
test bx, 0x5f6b
cmp dx, si
sub eax, dword [edx + ecx + 0x10]
jmp 0x1aa0d4c
push edi
jmp 0x1feda45