Function at 0x19c8e4d
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop edi
jmp 0x15c5d79
je 0x1e8dd49
mov edx, dword [edx + 0x7c]
jmp 0x1e4ae47
jle 0x15f6c22
mov eax, dword [ebp - 4]
rcl si, 0x3f
rcr esi, 0x3b
mov esi, dword [ebp - 8]
clc
cmc
test di, sp
cmp esi, dword [eax + edi + 0x14]
jae 0x1aa9a68
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
mov cx, 0x6c1c
xadd cl, cl
mov ecx, dword [edx + edi]
test cx, di
test ecx, ecx
jmp 0x1a5dcaf
jne 0x1a71621
lea edx, [ebp - 0x114]
not ah
cbw
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x19dc0ea
jmp 0x15e80b3
mov byte [esi], al
jmp 0x15fa88f
mov esp, ebp
bswap bp
pop ebp
ret
mov esp, ebp
bswap ebp
movzx ebp, sp
pop ebp
ret
cmp ecx, dword [eax + edi + 0x14]
jmp 0x1aa204d
mov esp, ebp
pop ebp
jmp 0x1ac29d7
je 0x1e5844f
push 0
jmp 0x1acaf48
call eax
pop esi
pop ebx
pop edi
jmp 0x1aa06d4
push eax
cmovno ax, cx
cwde
movzx eax, sp
push edi
seto al
nop
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1a9b6ba
push edx
push eax
jmp 0x15e1331
call fcn.019c8e4d
add esp, 0xc
jmp 0x19c42b9
je 0x15f0a68
mov cl, byte [esi + 1]
jmp 0x1abaeea
lea ebx, [esi - 1]
test di, 0x4955
cmp dword [ebp + 8], ebx
jmp 0x15b9772
mov dword [ebp + 8], edx
jmp 0x15bb9df
mov ecx, esi
stc
cmp bh, ch
sub ecx, eax
cmp ecx, 0x104
jmp 0x1ab5520
push ecx
jmp 0x1ac1141
mov ecx, dword [ebp + 0xc]
bsr edx, eax
movsx eax, cx
mov edx, dword [ebp - 0xc]
bswap si
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
xor ah, 0x94
shrd eax, ecx, 0x6d
rol eax, cl
mov eax, dword [ebp + 0x10]
push eax
inc ah
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x1e44d04
lea ecx, [esi + 1]
jmp 0x15d1a5c
je 0x15fa8a2
inc edx
cmp edx, 0x104
jb 0x1abfe97
lea eax, [ebp - 0x114]
jmp 0x1a54189
pop esi
bswap bx
cmovge di, bx
pop ebx
movsx edi, bp
movzx edi, bp
pop edi
jmp 0x15cfb22
mov ebx, dword [eax + edi + 0x18]
cmp esp, 0x186c1368
test ebx, ebx
jmp 0x1e54f81
push ebp
mov ebp, esp
lea esp, [esp - 0x114]
cmp di, si
push edi
sbb di, si
mov edi, dword [ebp + 8]
stc
clc
test edi, edi
jmp 0x1e9462e
call eax
test eax, eax
jmp 0x1a7161b
jbe 0x1ad6af7
lea ebx, [ebp - 0x114]
sub ebx, eax
sbb dl, 0xb2
mov dl, byte [eax]
test esi, 0x12273a33
cmp bp, si
test dl, dl
jmp 0x1a8b107
pop ebp
ret
mov dword [ebp - 8], ecx
jmp 0x15ea73a
push eax
cwde
setge al
push edi
not al
cbw
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x15d1f3c
pop esi
lahf
mov ebx, ebp
pop ebx
movzx eax, ax
lea eax, [ecx + edi]
mov edi, edi
pop edi
jmp 0x1e8ba63
mov edx, dword [edi + 0x3c]
cmp dh, bl
stc
add edx, edi
cmp dword [edx], 0x4550
jne 0x1e8dd49
mov eax, dword [edx + 0x78]
test esp, esp
clc
mov dword [ebp - 4], eax
test sp, bx
test eax, eax
jmp 0x15b135a
je 0x1aa9a68
cmp ecx, eax
jmp 0x1e65697
jae 0x1a54221
lea eax, [ecx + edi]
shl esi, 1
add cl, cl
xadd cl, cl
mov cl, byte [eax]
xor esi, esi
xchg si, si
mov esi, eax
stc
cmp ch, 0x2d
cmc
test cl, cl
jmp 0x1ac679a
je 0x1aa9a68
cmp eax, edi
jmp 0x1ac9875
je 0x1e4c257
cmp eax, 1
jmp 0x1ab0bc4
je 0x15e80ab
test eax, eax
jmp 0x1a85e49
je 0x1ad6af7
mov byte [ebx + eax], dl
dec dh
not dx
bswap edx
mov edx, dword [ebp + 8]
jmp 0x1ab6606
ja 0x19c7815
sub ecx, dword [eax + edi + 0x10]
stc
jmp 0x15cf0a3
je 0x1e8dd49
mov eax, 0x5a4d
cmp word [edi], ax
jmp 0x1e8dd43
call eax
pop esi
cmovl di, bp
mov bx, di
pop ebx
pop edi
mov esp, ebp
mov ebp, esp
movsx ebp, bx
movzx ebp, ax
pop ebp
ret
mov esp, ebp
jmp 0x1a4ebff
jae 0x1aa9a68
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
test ecx, ecx
jne 0x1a5dcb5
pop esi
sub di, 0x401d
mov di, cx
pop ebx
test sp, bp
sub eax, eax
movzx edi, cx
bswap di
pop edi
jmp 0x15c4df5
mov esp, ebp
cmovns bp, di
jmp 0x1e6ed93
je 0x1e63209
mov bl, cl
cmp al, 0x3c
cmc
sub bl, 0x30
inc esi
cmp bl, 9
jmp 0x1ad51f4
jne 0x1ac67a2
pop esi
rol bl, 0xb3
pop ebx
bts edi, edx
bsf edi, esp
shld di, cx, 0x58
sub eax, eax
pop edi
jmp 0x1aa3cf8
jne 0x15e80b3
inc esi
jmp 0x1e8681f
jae 0x1aa9a68
mov dword [ebp + 8], 0
test ecx, esp
test ecx, ecx
jmp 0x1a4d4ec
inc edx
inc eax
cmc
test ecx, 0x72dd28ca
cmp si, dx
mov dword [ebp + 8], edx
cmc
jmp 0x1e4c84e
inc esi
test esp, 0x3e873446
test cl, cl
jmp 0x1aa9a62
je 0x1e4bd7a
mov ebx, dword [ebp + 0xc]
rcl al, 0x26
add eax, 0x1dc467a4
lea eax, [ebp - 0x114]
sub edx, edx
shl si, 0xc
movsx esi, di
sub ebx, eax
lahf
mov edi, edi
movzx ax, al
rcl cl, cl
mov eax, 0x209d4f94
mov cl, dl
bswap si
rol eax, cl
lea esi, [ebp + edx - 0x114]
cmc
add al, dl
xor al, byte [ebx + esi]
jmp 0x15bd0c8
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x1e90953
ret
je 0x1aa9a68
mov edi, edi
cmp cl, 0x2e
jmp 0x15e52f6
jne 0x1e49c20
cmp byte [ebp + 0x10], 0
jmp 0x1abfe6c
push ecx
push eax
jmp 0x1e93ca5
ja 0x1e63209
movsx ecx, cl
clc
stc
lea edx, [edx + edx*4]
test eax, edx
lea edx, [ecx + edx*2 - 0x30]
sar cl, 0xf7
mov cl, byte [esi]
cmp ecx, 0x3cec6025
test cl, cl
jmp 0x1e63203
jb 0x1a4d4fd
mov eax, dword [ebp + 8]
movzx ecx, bp
lea ecx, [ebp - 0x114]
jmp 0x15f65bb
mov dword [ebp - 0xc], edx
clc
test ebx, ebx
jl 0x15b978a
jmp 0x15f6c31
call fcn.01a54f38
add esp, 4
cmp eax, 0xffffffff
jmp 0x1a899e6
ret
jmp 0x15e80b3
cmp byte [esi + 1], 0x23
mov cl, 0xbd
jmp 0x15f9387
push ebx
cmc
push esi
or esi, 0xffffffff
cmp dl, 0xab
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0x1a92a82
mov eax, dword [ebp + 0xc]
jmp 0x15d7568
mov ecx, dword [ebp - 4]
cmovp dx, ax
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
setge ch
cdq
movzx ecx, word [eax + edi]
not dx
bswap dx
cdq
lea edx, [ebx + 1]
jmp 0x1a53bae
cmp edx, ecx
jmp 0x1ad6af1
ret
je 0x15b978a
mov edx, dword [eax + edi + 0x20]
dec ebx
test di, ax
test al, 0x8d
add edx, edi
mov dword [ebp + 8], 0
cmp ebp, eax
jmp 0x1e442eb
mov cl, byte [esi + 2]
add esi, 2
cmp edi, 0x24bc0545
test esp, ebp
xor edx, edx
cmp eax, ebp
test cl, cl
jmp 0x1aa5e56
jne 0x1aa5e5c
push 0
jmp 0x15d7be4
jb 0x1a54221
mov edx, dword [ebp - 0x10]
cmc
test di, ax
add edx, eax
stc
test di, di
cmp ecx, edx
jmp 0x1a64a1a
pop ebp
ret
mov esp, ebp
pop ebp
jmp 0x1e47223
mov dword [ebp + 8], esi
jmp 0x1e48cf9
mov esp, ebp
mov ebp, 0x71f650ee
pop ebp
jmp 0x1e4f74f
je 0x1a5b612
xor eax, eax
pop edi
jmp 0x1e82f22
call eax
test eax, eax
jmp 0x15ba33c
call fcn.019c8e4d
add esp, 0xc
pop esi
movsx ebx, bx
bswap bx
pop ebx
jmp 0x15aeeec
je 0x1e8dd49
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x1a99959