Function at 0x11a5a62
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push eax
movsx ax, bh
cbw
mov ah, ah
push edi
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
call eax
pop esi
cmovg bx, si
pop ebx
pop edi
mov esp, ebp
pop ebp
jmp 0x1166e77
jae 0x121c59e
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
jmp 0x11ca329
jle 0x11afecb
mov eax, dword [ebp - 4]
bsf esi, ecx
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0xdc8a36
jne 0xd358e8
inc esi
jmp 0xd5ccc5
ja 0x11c2b77
sub ecx, dword [eax + edi + 0x10]
clc
cmp sp, ax
cmp ecx, dword [eax + edi + 0x14]
jmp 0xcfdf91
mov ecx, esi
cmp cl, bl
stc
sub ecx, eax
cmp ecx, 0x104
jae 0x121c59e
mov dword [ebp + 8], 0
jmp 0xdc291c
ret
lea ebx, [esi - 1]
clc
cmp di, 0x381b
cmp dword [ebp + 8], ebx
jmp 0xd039ce
je 0x121c59e
cmp eax, edi
jne 0x1138afe
cmp byte [ebp + 0x10], 0
jmp 0xd87174
je 0xd6ed30
cmp eax, 1
jmp 0xd07306
je 0xd039dd
mov edx, dword [eax + edi + 0x20]
jmp 0xd9be6a
mov byte [esi], al
je 0xd48e47
inc edx
cmp edx, 0x104
jb 0xd8719b
lea eax, [ebp - 0x114]
push eax
push edi
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
call eax
pop esi
jmp 0xd75f71
mov dword [ebp + 8], esi
jmp 0x117f85c
je 0x121c59e
cmp ecx, eax
jmp 0x119a00b
call eax
test eax, eax
jmp 0x11d01bd
ret
mov ecx, dword [ebp - 4]
rdtsc
mov eax, esp
mov edx, dword [ecx + edi + 0x24]
setae ch
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
cmovae edx, ebx
mov dl, 0xb7
lea edx, [ebx + 1]
jmp 0x115a9bd
mov esp, ebp
pop ebp
jmp 0xd6e757
pop ebx
movzx edi, sp
pop edi
jmp 0xd7102c
je 0xdc2761
mov ebx, dword [ebp + 0xc]
rcl si, 0x6b
lea eax, [ebp - 0x114]
or esi, 0xa1e1ef2
sub edx, edx
sub ebx, eax
movsx eax, ax
cbw
rol esi, 0x84
mov edi, edi
mov eax, 0x22f760f8
cmc
bt esi, 0x51
jmp 0xdb5f7c
call fcn.00dc26d3
add esp, 4
cmp si, bp
cmp dx, 0x6da6
cmp eax, 0xffffffff
jmp 0x1a95591
dec ebx
cmp ah, al
add edx, edi
mov dword [ebp + 8], 0
cmp ah, 0xff
clc
mov dword [ebp - 0xc], edx
cmp di, 0x1517
test ebx, ebx
jl 0xd039dd
jmp 0x11afed5
jne 0xdc2d59
push 0
jmp 0xda079d
push edx
push eax
jmp 0x11a2c61
mov dword [ebp + 8], edx
jmp 0x1162374
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA]
jmp 0xd6a760
mov esp, ebp
mov bp, dx
bswap bp
mov ebp, 0x35197b65
pop ebp
ret
mov cl, dl
rol eax, cl
xchg esi, esi
lea esi, [ebp + edx - 0x114]
cmp ebp, esi
cmp ebp, 0x16a87c46
add al, dl
cmp bx, 0x2a5a
stc
cmc
xor al, byte [ebx + esi]
jmp 0xd48e32
mov eax, dword [ebp + 0xc]
jmp 0xcfd8bb
test ecx, ecx
jmp 0x1ab1712
je 0xd9d50c
mov bl, cl
test dx, bp
jmp 0x11d15d6
jae 0x121c59e
mov ecx, dword [eax + edi + 0x1c]
setnp dl
lea edx, [ecx + esi*4]
sub ecx, 0x7f66502a
not ecx
mov ecx, dword [edx + edi]
jmp 0x11975b1
lea edx, [edx + edi]
test bp, di
cmp dword [edx], 0x4550
jmp 0x1b16ae8
cmp ecx, edx
jmp 0x115e287
cmp byte [esi + 1], 0x23
bswap cx
movsx ecx, dx
lea ecx, [esi + 1]
jmp 0x116a0d7
ret
call eax
test eax, eax
jmp 0xd3db91
mov esp, ebp
pop ebp
ret
mov dword [ebp - 8], ecx
jmp 0xda979c
jae 0x121a865
lea eax, [ecx + edi]
or cl, 0xf
mov cl, byte [eax]
mov esi, eax
cmp dx, 0x6262
test cl, cl
jmp 0x1169c93
jmp 0xd358e8
ret
ret
mov esp, ebp
not bp
pop ebp
jmp 0xd203b3
je 0x121c59e
mov edi, edi
jmp 0x121c589
je 0x1177c76
push 0
push ecx
push eax
jmp 0x11c878c
mov esp, ebp
mov ebp, 0x2a297347
movsx ebp, di
cmovbe ebp, esp
pop ebp
jmp 0x1168237
mov cl, byte [esi + 2]
lea esi, [esi + 2]
sub edx, edx
test cl, cl
jmp 0xdc2d53
jmp 0xd358e8
test ecx, ecx
jmp 0xd66ab3
jb 0x121a865
mov edx, dword [ebp - 0x10]
test bx, cx
cmp bp, 0x4434
add edx, eax
cmc
jmp 0x1138618
call fcn.011a5a62
add esp, 0xc
mov si, 0x1f50
cmovle esi, ebx
pop esi
pop ebx
mov di, bx
pop edi
jmp 0x1159659
mov edx, dword [edi + 0x3c]
jmp 0x1133c52
inc esi
cmp bx, 0x7b09
cmp bl, 9
ja 0xd9d50c
movsx ecx, cl
stc
lea edx, [edx + edx*4]
stc
lea edx, [ecx + edx*2 - 0x30]
xadd cl, cl
mov cl, byte [esi]
cmc
test cl, cl
jmp 0xd9d506
push ebp
mov ebp, esp
cmp sp, cx
cmp esi, 0x45e8617b
lea esp, [esp - 0x114]
push edi
sal di, 0xf9
and edi, esi
mov edi, dword [ebp + 8]
test edi, edi
je 0x11a5aa0
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x11a5aa0
mov eax, 0x5a4d
cmp word [edi], ax
je 0x11a3fd0
sub eax, eax
movzx edi, di
pop edi
jmp 0xdb25b2
mov ecx, dword [ebp + 0xc]
sbb ah, 0x57
mov edx, dword [ebp - 0xc]
clc
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
cmc
mov eax, dword [ebp + 0x10]
push eax
sar esi, 1
shr al, cl
bt ax, di
inc ah
mov eax, dword [edx + esi*4]
cmp dl, cl
cmp bp, 0x15dd
jmp 0x1ab0d3b
mov ebx, dword [eax + edi + 0x18]
test si, 0x46a0
cmp eax, 0x606427ff
test ebx, ebx
jmp 0xd48c28
call fcn.011a5a62
add esp, 0xc
pop esi
bswap edi
mov bl, 0xa7
pop ebx
pop edi
jmp 0x1212a32
inc edx
inc eax
mov dword [ebp + 8], edx
stc
cmp edx, ecx
jb 0x1ab1723
mov eax, dword [ebp + 8]
cmova ecx, ebx
lea ecx, [ebp - 0x114]
jmp 0x11da49c
mov ecx, dword [ecx + edi]
stc
cmc
test ecx, ecx
jne 0xd66ab9
pop esi
cmp esp, edx
pop ebx
jmp 0x11d0d6b
je 0x11a5aa0
mov edx, dword [edx + 0x7c]
stc
test esi, 0x65404a14
push ebx
test eax, 0x3e460ea0
push esi
stc
clc
or esi, 0xffffffff
clc
test dl, 0xc6
mov dword [ebp - 0x10], edx
cmp si, 0x604f
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0xd096f5
jne 0xd3db97
lea edx, [ebp - 0x114]
movzx eax, di
setns al
push edx
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA]
jmp 0x114bfdd
sub eax, eax
movsx edi, si
pop edi
mov esp, ebp
xchg ebp, ebp
cmovnp bp, ax
pop ebp
ret
sub bl, 0x30
jmp 0x11a5434
push ecx
jmp 0xdabccc
mov esp, ebp
mov bp, 0x31a3
pop ebp
jmp 0x113a373
pop esi
movzx eax, sp
pop ebx
cmovg ax, dx
mov al, 0x40
movzx eax, cx
lea eax, [ecx + edi]
not edi
pop edi
jmp 0x116ca4e
cmp cl, 0x2e
je 0xd0bb88
mov cl, byte [esi + 1]
inc esi
test cl, cl
jne 0x121c589
pop esi
test esp, edi
pop ebx
stc
sub eax, eax
pop edi
jmp 0x1168f7d
je 0xd358df
test eax, eax
jmp 0xd444ad
add eax, edi
jmp 0xd9b284
jbe 0x11c96cf
lea ebx, [ebp - 0x114]
rcr dl, 0xc1
sub ebx, eax
mov dl, byte [eax]
cmp sp, ax
clc
test dl, dl
je 0x11c96cf
mov byte [ebx + eax], dl
cmovs edx, edx
mov edx, dword [ebp + 8]
jmp 0x11c96c1
jne 0x11a5aa0
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
test eax, eax
jmp 0x11ce41c