Function at 0x1ccd390
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0x126d9b7
je 0x1934b92
mov bl, cl
sub bl, 0x30
jmp 0x1cbdb1d
ret
ret
lea ecx, [edx + ecx*4]
jmp 0x11f8d73
lea eax, [ecx + edi]
pop edi
jmp 0x118c2d6
jle 0x1905934
mov eax, dword [ebp - 4]
and esi, 0x52ca3997
mov esi, dword [ebp - 8]
cmp dx, 0x7c4d
cmp esi, dword [eax + edi + 0x14]
jmp 0x18f745f
jne 0x1cc00f3
pop esi
pop ebx
shrd di, ax, 0x6b
bsf di, bx
xor eax, eax
pop edi
jmp 0x18dc5ae
ret
je 0x11b61da
cmp ecx, eax
jmp 0x11e6568
call eax
pop esi
movzx edi, bp
movsx bx, bh
pop ebx
pop edi
mov esp, ebp
xchg ebp, ebp
mov bp, 0x4460
pop ebp
jmp 0x1950d23
lea ebx, [esi - 1]
stc
cmp dword [ebp + 8], ebx
jmp 0x11b340e
jb 0x128c4a3
mov edx, dword [ebp - 0x10]
cmp esp, 0x630f4244
lea edx, [edx + eax]
stc
cmc
cmp ecx, edx
jmp 0x1cb23eb
pop ebx
mov di, 0x573d
pop edi
mov esp, ebp
pop ebp
jmp 0x1290c1f
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0x1cc0093
jne 0x1cc4323
mov eax, dword [edx + 0x78]
test bx, di
mov dword [ebp - 4], eax
clc
test eax, eax
jmp 0x18e2e8b
push eax
push edi
cbw
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x11df5ca
mov ecx, esi
jmp 0x12d10f5
mov cl, byte [esi + 2]
cmp ax, di
lea esi, [esi + 2]
test sp, 0x2efe
cmp bp, cx
xor edx, edx
cmp bp, 0x967
test dx, sp
test cl, cl
jmp 0x1193727
push edx
jmp 0x19505bf
je 0x12393d4
mov cl, byte [esi + 1]
inc esi
stc
test cl, cl
jmp 0x11b61d4
mov esp, ebp
mov bp, ax
pop ebp
jmp 0x1ca4357
mov esp, ebp
movsx ebp, bx
jmp 0x18edfec
ret
ret
call fcn.01ccd390
add esp, 0xc
bswap esi
mov di, 0x4a1d
pop esi
bswap edi
pop ebx
pop edi
jmp 0x1269a81
pop esi
jmp 0x12b5ce8
ret
push ecx
jmp 0x191463f
mov eax, dword [ebp + 0xc]
push eax
push edi
mov eax, esp
cbw
xchg ah, al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1ca4373
mov dword [ebp + 8], edx
jmp 0x18f1481
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
test cx, si
test di, 0x43f4
mov dword [ebp - 8], esi
cmp ecx, 0xffff
ja 0x1cbb9bf
sub ecx, dword [eax + edi + 0x10]
stc
test bx, di
cmp ecx, dword [eax + edi + 0x14]
jae 0x11b61da
mov edx, dword [eax + edi + 0x1c]
jmp 0x11a5980
pop ebx
movzx eax, dx
jmp 0x11a8a6c
test ecx, ecx
jbe 0x1ceae3e
lea ebx, [ebp - 0x114]
mov dl, 0x8f
test cl, ch
sub ebx, eax
mov dl, byte [eax]
cmp bl, 0xa3
test dl, dl
jmp 0x12e2ac2
pop ebp
jmp 0x12848e9
sub ecx, eax
cmp al, dl
test edi, 0x71de2cb8
cmp ecx, 0x104
jmp 0x1cac07d
je 0x1ceae3e
mov byte [ebx + eax], dl
mov dh, 0x74
cmova edx, ebx
movsx edx, dx
mov edx, dword [ebp + 8]
jmp 0x1ca528d
lea esp, [esp - 0x114]
cmp cx, si
test edi, edi
push edi
adc edi, ecx
mov edi, dword [ebp + 8]
test edi, edi
je 0x1cc4323
mov ecx, dword [ebp + 0xc]
clc
test ecx, ecx
jmp 0x1934436
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0x18c012c
call fcn.01285fed
add esp, 4
cmp eax, 0xffffffff
je 0x11e5081
test eax, eax
je 0x190c4b8
cmp eax, 1
jmp 0x1ce4c35
mov dword [ebp - 8], ecx
jmp 0x12af02d
dec ebx
add edx, edi
cmp bh, bl
cmc
mov dword [ebp + 8], 0
cmc
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x18d263a
mov edx, dword [edi + 0x3c]
stc
test ebp, 0x63eb5828
cmp bp, 0x73d9
add edx, edi
cmp ebp, 0x292123e5
test esi, 0x3b0f505c
jmp 0x1a85f44
add al, dl
clc
cmp esi, 0x466e57eb
xor al, byte [ebx + esi]
mov byte [esi], al
je 0x18c82cc
inc edx
clc
cmp edx, 0x104
jb 0x1928fc1
lea eax, [ebp - 0x114]
jmp 0x12352ff
jmp 0x11e5085
mov esp, ebp
jmp 0x190031a
jl 0x11b3425
jmp 0x190594e
call fcn.01ccd390
add esp, 0xc
mov si, 0x7edc
movsx edi, si
jmp 0x1ce5472
mov esp, ebp
bswap ebp
mov ebp, 0x7b9958f4
pop ebp
jmp 0x11a57c9
je 0x1cc4323
mov edx, dword [edx + 0x7c]
stc
push ebx
clc
test edi, edi
push esi
jmp 0x12b313d
pop ebp
jmp 0x11a2075
jmp 0x11e5085
jae 0x11b61da
mov ecx, dword [eax + edi + 0x1c]
sbb dl, dl
clc
sbb dh, 0x2e
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
clc
test ecx, ecx
jmp 0x11cca0f
pop ebp
jmp 0x11c40c7
mov ecx, dword [ebp + 0xc]
bts si, bp
sub esi, 0x9e46e03
mov edx, dword [ebp - 0xc]
test si, 0x1b34
shrd ax, bp, 0x7b
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
nop
shld ax, sp, 0x4f
mov eax, dword [ebp + 0x10]
stc
push eax
sar esi, 1
xadd ax, ax
sal al, cl
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x18bc078
mov ecx, dword [ebp - 4]
mov eax, 0xa8b1c7b
mov edx, dword [ecx + edi + 0x24]
cmove cx, ax
lea eax, [edx + esi*2]
setl dl
jmp 0x18bb61e
push eax
jmp 0x128a80a
cmp byte [esi + 1], 0x23
mov cl, 0x2c
xchg cx, cx
lea ecx, [esi + 1]
jmp 0x194d77b
call eax
test eax, eax
je 0x11b61da
cmp eax, edi
jne 0x191b212
cmp byte [ebp + 0x10], 0
je 0x12a7ac5
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
xor edx, edx
sub ebx, eax
mov edi, edi
xchg si, si
movzx ax, bl
lahf
mov eax, 0x2d2911ec
mov cl, dl
btr si, dx
rol eax, cl
lea esi, [ebp + edx - 0x114]
cmp ebx, edi
jmp 0x18c82aa
mov esp, ebp
movzx ebp, si
jmp 0x12c6a42
je 0x1cc4323
mov eax, 0x5a4d
cmp cx, si
cmp word [edi], ax
jmp 0x1cc431d
jne 0x119372d
push 0
jmp 0x125adec
call eax
test eax, eax
jne 0x1928f98
lea edx, [ebp - 0x114]
push edx
not ax
bswap eax
nop
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x1928f8e
je 0x123f2ae
push 0
jmp 0x1292037
push eax
jmp 0x18d5f10
ret
cmp dword [edx], 0x4550
jmp 0x1228b36
ret
call eax
pop esi
jmp 0x11f3717
inc edx
inc eax
test ebp, 0x2a886f93
test bx, bp
cmp sp, bp
mov dword [ebp + 8], edx
clc
cmp edx, ecx
jmp 0x1ceae38
jae 0x11b61da
mov dword [ebp + 8], 0
jmp 0x12c06e0
jae 0x128c4a3
lea eax, [ecx + edi]
cmovge esi, edi
mov cl, byte [eax]
btr si, 0x4a
mov esi, eax
test cl, cl
jmp 0x1cdb7f3
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
je 0x11b3425
mov edx, dword [eax + edi + 0x20]
jmp 0x18c19fa
inc esi
clc
cmp bl, 9
ja 0x1934b92
movsx ecx, cl
cmp eax, esi
test bl, cl
lea edx, [edx + edx*4]
jmp 0x1cd5d34
jne 0x11cca15
pop esi
sal edi, 0xc9
pop ebx
xor eax, eax
pop edi
jmp 0x192af7c
cmp cl, 0x2e
jmp 0x125e9b7
je 0x18c7b0c
xor eax, eax
mov edi, ebp
movsx edi, bx
pop edi
jmp 0x18cdf53
push ebp
mov ebp, esp
jmp 0x12e6e94
lea edx, [ecx + edx*2 - 0x30]
setl cl
xor cl, 0x24
mov cl, byte [esi]
test cl, cl
jmp 0x1934b8c
je 0x11b61da
mov edi, edi
jmp 0x1cc00f3
jne 0x11e5085
inc esi
mov dword [ebp + 8], esi
jmp 0x18ca4b6
pop esi
xchg edi, ebx
cmova bx, sp
pop ebx
movzx edi, cx
mov di, 0x50f8
pop edi
jmp 0x126b339
jb 0x12c06f4
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
push ecx
mov byte [ebp + eax - 0x114], 0
cmovne ax, si
mov ah, 0xca
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x193f450