Function at 0x1d0b10b
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov esp, ebp
xchg bp, bp
cmovne ebp, ecx
pop ebp
jmp 0x1c9e7b7
mov esp, ebp
pop ebp
jmp 0x1be2fc3
ret
mov byte [esi], cl
jmp 0x1c00cf8
je 0x1c572a0
mov esi, dword [ebp + 0xc]
clc
test esi, esi
je 0x1c572a0
mov eax, 0x5a4d
clc
jmp 0x1d9e04d
test eax, eax
jmp 0x1d71625
lea ecx, [esi + 1]
je 0x1c16809
push 0
push ecx
push edi
jmp 0x1c6d967
je 0x1ca9a86
mov byte [ebx + eax], dl
inc edi
jmp 0x1d5a576
mov eax, dword [ebp - 0xc]
dec dx
sar esi, 0xbd
mov edx, dword [ebp + 0x10]
bt esi, ebx
lea esi, [edi + ebx]
stc
cmc
sar esi, 1
mov eax, dword [eax + esi*4]
jmp 0x1d63289
push esi
jmp 0x1c1a80c
je 0x1c00d0a
inc eax
cmp eax, 0x104
jb 0x1dd25c2
lea eax, [ebp - 0x114]
jmp 0x1d0e61b
mov esp, ebp
pop ebp
ret
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x1d0b574
inc esi
cmp al, 9
jmp 0x1d7464c
mov cl, byte [esi + 2]
lea esi, [esi + 2]
cmp ch, 0xeb
cmc
sub edx, edx
cmp eax, edi
clc
test cl, cl
jmp 0x1dd939d
push eax
not ah
setb al
push edx
setae ah
movzx ax, bl
jmp 0x1c07482
test ecx, ecx
jmp 0x1be7475
je 0x1dad214
mov edx, dword [ebp + 8]
stc
cmp edi, edx
jmp 0x1dd258b
mov edi, dword [edx + ecx + 0x18]
cmp edx, esp
test edi, edi
jmp 0x1dd2642
cmp byte [esi + 1], 0x23
movzx ecx, sp
jmp 0x1bed38b
ret
je 0x1c737ea
xor eax, eax
pop esi
mov esp, ebp
bswap ebp
pop ebp
jmp 0x1c5640b
ret
je 0x1dad214
cmp cl, 0x2e
jmp 0x1d928ed
call fcn.01d0b10b
add esp, 0xc
not si
xchg edi, esi
pop edi
jmp 0x1da5b51
mov eax, dword [ecx + 0x3c]
cmp ebp, edi
cmp dword [eax + ecx], 0x4550
jmp 0x1df719d
ret
je 0x1ca9a86
lea ebx, [ebp - 0x114]
sub ebx, eax
shr dl, cl
mov dl, byte [eax]
test dl, dl
jmp 0x1bf4f51
ret
jb 0x1c8e2c7
lea ecx, [ebp - 0x114]
xchg al, ah
cbw
push ecx
mov ah, 0x3c
not ax
mov byte [ebp + edi - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x1cd1751
jle 0x1bf734b
jmp 0x1dde704
pop esi
mov esp, ebp
pop ebp
ret
cmp eax, esi
jmp 0x1ceb340
call eax
mov edi, eax
cmp ebx, eax
test edi, edi
jmp 0x1d34137
mov eax, dword [ebp + 0xc]
jmp 0x1c16864
mov ecx, dword [ebp + 8]
cmc
test esi, 0x46884d84
jmp 0x1d1b770
jae 0x1da3c3f
add eax, ecx
shld si, cx, 0xac
cmc
mov cl, byte [eax]
shr esi, 0xfa
mov esi, eax
cmp ebx, edi
test cl, cl
jmp 0x1c5cba2
cmp esi, 0xffff
ja 0x1c2b7c4
mov eax, esi
clc
test di, 0x615a
sub eax, dword [edx + ecx + 0x10]
mov dword [ebp - 8], eax
jmp 0x1d356cf
call eax
pop edi
cmovbe esi, esi
bswap bx
pop ebx
movzx esi, dx
pop esi
jmp 0x1bd33ea
push edi
jmp 0x1d567fd
push ebp
mov ebp, esp
mov ecx, dword [ebp + 8]
cmp ebx, 0x25b866e9
lea esp, [esp - 0x114]
stc
jmp 0x1bf9cb2
call eax
pop edi
movzx ebx, dx
mov bh, 0xa6
pop ebx
jmp 0x1cb35b2
push eax
xchg al, al
cbw
push edx
cmovnp ax, di
setb al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x1d04ce7
jae 0x1dad214
xor edi, edi
test edi, 0x50a52a05
cmp si, ax
test ecx, ecx
jmp 0x1c8e2b7
jns 0x1db9837
lea edi, [esi - 1]
jmp 0x1ce88f4
cmp ebx, edi
jmp 0x1cb22e7
jne 0x1c21ee7
lea edx, [ebp - 0x114]
mov eax, esi
push edx
cbw
cmova eax, esp
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
call eax
mov edi, eax
test edi, edi
jmp 0x1c21ee1
pop esi
jmp 0x1c039c9
jmp 0x1dde710
push ebx
push edi
test eax, esp
mov dword [ebp - 0x10], eax
clc
test cx, 0x4fb2
mov dword [ebp - 8], 0xffffffff
cmp si, ax
jmp 0x1cffa18
call fcn.01d0b10b
add esp, 0xc
movsx esi, di
pop edi
pop ebx
xchg si, si
pop esi
jmp 0x1df0e39
inc eax
test ah, 0xd3
cmp edi, ecx
jmp 0x1ca9a80
jne 0x1dd93a3
push 0
jmp 0x1dbadfb
push edx
rol dl, cl
mov edx, dword [ebp + 0xc]
jmp 0x1df0c4f
je 0x1dad214
cmp eax, edx
jmp 0x1d8fdef
ja 0x1d5d1f0
movsx eax, cl
mov cl, byte [esi]
lea edx, [edx + edx*4]
clc
cmp edi, ebx
lea edx, [eax + edx*2 - 0x30]
test dl, 0x63
test cl, cl
jmp 0x1d5d1ea
jb 0x1da3c3f
mov esi, dword [ebp - 0x10]
cmp di, 0x2234
add esi, edx
jmp 0x1cb59fd
je 0x1dc0b88
mov cl, byte [esi + 1]
inc esi
cmp bl, cl
test cl, cl
jmp 0x1dad20e
cmp word [ecx], ax
jmp 0x1c5729a
pop edi
pop ebx
movzx esi, di
btr si, 0x1d
add eax, ecx
movzx esi, dx
bswap si
pop esi
mov esp, ebp
cmovbe bp, si
not ebp
pop ebp
jmp 0x1c598b7
pop ebx
bswap si
pop esi
jmp 0x1bc74b0
jne 0x1c5cba8
pop edi
pop ebx
xor eax, eax
jmp 0x1d352dc
jle 0x1dde6e3
lea ebx, [esi + 1]
sbb ch, 0xb1
jmp 0x1ce88f4
push edx
jmp 0x1d08d7c
mov ecx, esi
sub ecx, eax
cmc
cmp ecx, 0x104
jmp 0x1d15848
js 0x1dde710
jmp 0x1bf7354
jne 0x1c32fba
cmp byte [ebp + 0x10], 0
je 0x1cd7e1d
mov edi, dword [ebp + 0xc]
xchg cx, bx
rol bx, 0xbd
lea ecx, [ebp - 0x114]
rcr si, 0xa9
sub eax, eax
bts esi, eax
ror si, 0x13
sub edi, ecx
stc
lea esp, [esp]
mov cl, al
bts ebx, ebx
btr si, di
not si
mov ebx, 0x7743c09
rol ebx, cl
btc cx, 0x83
cmp ebp, ebp
shrd esi, ecx, 0x2e
lea esi, [ebp + eax - 0x114]
not cl
dec cx
lea ecx, [eax + ebx]
clc
test sp, bp
xor cl, byte [edi + esi]
jmp 0x1be2fed
je 0x1dde710
mov eax, dword [edx + ecx + 0x20]
cmc
lea eax, [eax + ecx]
clc
xor ebx, ebx
dec edi
mov dword [ebp - 0xc], eax
jmp 0x1dd0c18
je 0x1d5d1f0
lea eax, [ecx - 0x30]
jmp 0x1c0d32b
test edx, edx
je 0x1c572a0
mov eax, dword [eax + ecx + 0x7c]
stc
jmp 0x1d56205
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
bts dx, bx
mov edx, dword [ecx + eax + 0x24]
lea ecx, [edx + esi*2]
clc
and dh, ah
movzx edx, word [ecx + eax]
bts cx, bp
mov dword [ebp - 8], edx
mov ecx, eax
mov edx, dword [ebp - 4]
adc eax, esi
rol ax, cl
btr eax, 0x77
mov eax, dword [ebp - 8]
test eax, ebp
cmp eax, dword [edx + ecx + 0x14]
jae 0x1dad214
mov esi, dword [edx + ecx + 0x1c]
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
jmp 0x1bea27f
add eax, ecx
call fcn.01d249eb
lea esp, [esp + 4]
test eax, eax
jmp 0x1d18f04
mov esp, ebp
cmovle bp, di
pop ebp
jmp 0x1c8e0e5
jne 0x1c572a0
mov edx, dword [eax + ecx + 0x78]
cmp bl, 0x16
mov dword [ebp - 4], edx
jmp 0x1dd9e57