Function at 0x1c98cda
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0x2153750
mov edx, dword [edx + 0x7c]
cmp si, 0x502c
push ebx
cmp sp, di
jmp 0x216c240
call eax
test eax, eax
jmp 0x214f8f8
mov dword [ebp + 8], esi
jmp 0x138599d
jne 0x1bc4b4a
cmp byte [ebp + 0x10], 0
jmp 0x2199924
mov esp, ebp
movsx ebp, bp
mov bp, sp
jmp 0x1c93b8a
jl 0x13c22ff
jmp 0x13a2e70
jmp 0x13c22e6
mov dword [ebp + 8], edx
jmp 0x13c22e6
push eax
call fcn.01c98cda
add esp, 0xc
pop esi
not bl
setae bh
pop ebx
mov edi, esi
not di
movzx edi, bp
pop edi
mov esp, ebp
cmovnp bp, di
movzx ebp, ax
pop ebp
jmp 0x13cdc37
push edx
jmp 0x13968ad
ja 0x1bb8084
sub ecx, dword [eax + edi + 0x10]
cmp bx, di
cmp esi, 0x2f986646
cmp ecx, dword [eax + edi + 0x14]
jmp 0x2186390
mov ecx, dword [ebp + 0xc]
sbb ah, 0xa
or dx, 0x5257
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
neg si
lea esi, [ebx + eax]
bt ax, sp
xadd ah, al
sub al, 0xf7
mov eax, dword [ebp + 0x10]
clc
push eax
cmp edi, edi
test al, 0x1d
sar esi, 1
rcr al, 0x67
cwde
mov eax, dword [edx + esi*4]
test esi, eax
add eax, edi
jmp 0x217139e
ret
jb 0x22321a5
mov edx, dword [ebp - 0x10]
test esp, eax
add edx, eax
cmc
cmp ecx, edx
jae 0x22321a5
lea eax, [ecx + edi]
mov cl, byte [eax]
rcl esi, 0xe9
mov esi, eax
test di, 0x7e8d
test cl, cl
jmp 0x219a222
mov esp, ebp
mov ebp, 0x4526981
jmp 0x1402809
mov eax, dword [ebp + 0xc]
push eax
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1ca2e64
je 0x13ddee5
mov bl, cl
cmc
stc
sub bl, 0x30
jmp 0x13fdc60
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jle 0x13a2e62
mov eax, dword [ebp - 4]
cmc
btr esi, 0xe4
mov esi, dword [ebp - 8]
cmp dx, 0x4830
cmp esi, dword [eax + edi + 0x14]
jmp 0x1bafe21
pop edi
jmp 0x14171c1
ret
call fcn.01c98cda
add esp, 0xc
xchg di, si
mov esi, 0x29361f48
pop esi
pop ebx
jmp 0x2213bd4
jne 0x13bee3e
push 0
jmp 0x1399c24
mov byte [esi], al
jmp 0x1bc43ee
inc esi
cmp bl, 9
jmp 0x21f1bde
pop ebp
ret
je 0x1cb6e60
cmp eax, 1
jmp 0x2260930
je 0x2173f5c
cmp ecx, eax
jmp 0x13aa01a
mov esp, ebp
mov ebp, 0x62ce1385
bswap ebp
pop ebp
jmp 0x221307b
ret
mov edx, dword [edi + 0x3c]
add edx, edi
test edi, 0x588b6338
cmp bp, 0x7726
cmp dword [edx], 0x4550
jne 0x2153750
mov eax, dword [edx + 0x78]
test si, 0x5cc
cmp ebx, edx
mov dword [ebp - 4], eax
test eax, eax
jmp 0x1371e44
mov esp, ebp
not bp
pop ebp
jmp 0x1413ceb
push eax
cmovge eax, ebp
xchg ah, ah
push edi
not al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
pop ebx
pop edi
jmp 0x13b6f01
mov ecx, esi
jmp 0x1bb24d0
mov esp, ebp
pop ebp
jmp 0x1bee6f9
jae 0x2173f5c
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0x140c9a4
sub ecx, eax
cmp ebx, 0x59a7737
cmp ecx, 0x104
jae 0x2173f5c
mov dword [ebp + 8], 0
test esp, 0x657b2307
cmp di, 0x2fc9
test ecx, ecx
jbe 0x2155c94
lea ebx, [ebp - 0x114]
sub ebx, eax
sar dl, cl
mov dl, byte [eax]
test dl, dl
je 0x2155c94
mov byte [ebx + eax], dl
xchg edx, edx
mov edx, 0x1314280
mov edx, dword [ebp + 8]
inc edx
jmp 0x2155c7a
mov ebx, dword [eax + edi + 0x18]
cmc
test ebx, ebx
jmp 0x221dd77
je 0x222bfff
push 0
push ecx
jmp 0x217528b
jne 0x140c9aa
pop esi
cmc
sal di, 0x16
btr di, 0xff
pop ebx
shl di, 0x21
movzx edi, sp
bsr edi, eax
sub eax, eax
jmp 0x13ca161
je 0x1bc8fee
inc edx
cmc
test sp, 0x732b
stc
cmp edx, 0x104
jmp 0x1bc8fe8
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x1bb90f2
jb 0x2199945
lea eax, [ebp - 0x114]
jmp 0x14253dc
ret
pop ebp
ret
push ebp
mov ebp, esp
sub esp, 0x114
cmp cl, bh
test si, 0x1c06
stc
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x2153750
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x21ebd85
mov byte [ebp + eax - 0x114], 0
not al
jmp 0x21c6666
call eax
pop esi
pop ebx
bswap di
not di
movzx edi, ax
pop edi
mov esp, ebp
xchg bp, bp
bswap bp
pop ebp
jmp 0x13a8621
dec ebx
jmp 0x2236132
call eax
test eax, eax
je 0x2173f5c
cmp eax, edi
jmp 0x137dcd7
je 0x13c22e3
test eax, eax
jmp 0x140901e
mov ecx, dword [ebp - 4]
bswap edx
not ah
sete ah
mov edx, dword [ecx + edi + 0x24]
not cx
xchg ecx, ecx
cwde
lea eax, [edx + esi*2]
not cx
movzx ecx, word [eax + edi]
movsx dx, cl
setp dl
cwd
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
jmp 0x138da85
jne 0x1ca96fc
lea edx, [ebp - 0x114]
xchg ah, al
push edx
sete al
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x1ca96f2
je 0x1ba9eb7
mov cl, byte [esi + 1]
inc esi
clc
test cl, cl
jmp 0x2173f56
je 0x1416409
sub eax, eax
xchg edi, edi
pop edi
jmp 0x1380307
inc eax
stc
cmp di, si
test dl, 0xcb
mov dword [ebp + 8], edx
cmp ecx, 0x42c96e01
stc
cmp edx, ecx
jb 0x1bb2508
mov eax, dword [ebp + 8]
not ch
mov cx, 0x6a19
xchg ch, ch
lea ecx, [ebp - 0x114]
jmp 0x2185f54
push esi
cmc
clc
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
test edi, 0x2e6e3803
mov dword [ebp - 8], esi
clc
cmp ecx, 0xffff
jmp 0x13a1ed9
call 0x139990b
lea esp, [esp + 4]
test esp, 0x783d4185
cmp dh, 0x45
cmp eax, 0xffffffff
jmp 0x1caa82f
jne 0x219a22e
pop esi
test esi, edi
pop ebx
sar di, 0xb3
xor eax, eax
pop edi
jmp 0x1412d92
push eax
jmp 0x13db831
push ecx
jmp 0x1c98e3f
jae 0x2173f5c
mov edx, dword [eax + edi + 0x1c]
cmc
lea ecx, [edx + ecx*4]
stc
test ebp, ebx
mov ecx, dword [ecx + edi]
test dh, 5
test ecx, ecx
jmp 0x1bc25b2
je 0x13bd1d5
mov ebx, dword [ebp + 0xc]
and esi, 0x4a5666c3
cbw
lea eax, [ebp - 0x114]
sub edx, edx
sub ebx, eax
btr si, cx
mov edi, edi
mov eax, 0x1d72200
rcr esi, 0xa0
mov cl, dl
rol eax, cl
movzx esi, sp
lea esi, [ebp + edx - 0x114]
cmp di, 0x1a50
cmc
add al, dl
xor al, byte [ebx + esi]
jmp 0x13f9081
je 0x2173f5c
mov edi, edi
cmp ax, 0x4277
cmp cl, 0x2e
jmp 0x215372d
mov esp, ebp
pop ebp
ret
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x137799c
je 0x2153750
mov eax, 0x5a4d
cmp word [edi], ax
jmp 0x215374a
ja 0x13ddee5
movsx ecx, cl
lea edx, [edx + edx*4]
cmp ebp, 0x26e94809
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
test cl, cl
jmp 0x13ddedf
ret
pop edi
jmp 0x1badec9
je 0x13c22ff
mov edx, dword [eax + edi + 0x20]
jmp 0x1ca2ed3
mov cl, byte [esi + 2]
cmp esi, 0x916358c
lea esi, [esi + 2]
cmc
xor edx, edx
cmp esp, esp
test cl, cl
jmp 0x13bee38
pop esi
mov bl, 0xeb
xchg bx, bx
pop ebx
movsx ax, dl
lea eax, [ecx + edi]
cmovp edi, ecx
xchg di, di
movsx edi, di
pop edi
jmp 0x21c5bf7
lea edx, [edx + edi]
cmc
stc
mov dword [ebp + 8], 0
test si, si
mov dword [ebp - 0xc], edx
test edi, esi
test ebx, ebx
jmp 0x1382d6b
jne 0x13c22e6
inc esi
jmp 0x13798b4