Function at 0xcbd5cf
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push edi
bswap eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
call eax
pop esi
not bh
jmp 0xcb106b
call eax
pop esi
movzx edi, bp
pop ebx
bswap di
pop edi
mov esp, ebp
pop ebp
jmp 0xbc7549
ret
je 0xcb1610
cmp ecx, eax
jmp 0xca86f0
mov esp, ebp
pop ebp
jmp 0xbc54f7
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
cdq
movzx ecx, word [eax + edi]
cdq
setg dh
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
jmp 0x111f0ac
mov esp, ebp
cmovb bp, bx
pop ebp
jmp 0xbc4359
ret
ret
mov ecx, dword [ebp + 0xc]
cmc
cbw
mov edx, dword [ebp - 0xc]
shld ax, ax, 0x7a
xor ah, dl
mov eax, dword [ebp + 8]
and si, sp
test si, 0x3b4b
add si, 0x5932
lea esi, [ebx + eax]
sub ax, sp
mov eax, dword [ebp + 0x10]
clc
jmp 0x1119be3
je 0xcb1610
mov edi, edi
cmp cl, 0x2e
jmp 0xcb9dd0
ret
ret
ret
mov dword [ebp - 0xc], edx
stc
test ebx, ebx
jmp 0x110a945
lea ebx, [esi - 1]
cmp eax, esp
test esp, ecx
cmp dword [ebp + 8], ebx
jmp 0xcc5604
push ecx
push eax
call fcn.00cbd5cf
add esp, 0xc
pop esi
movzx edi, sp
not ebx
pop ebx
cmovno di, di
pop edi
jmp 0xbc524f
pop ebp
jmp 0xbc76ef
call eax
test eax, eax
jmp 0xcb2ea4
dec ebx
add edx, edi
mov dword [ebp + 8], 0
jmp 0xbc7aeb
pop ebp
jmp 0xbc758d
mov ecx, esi
test bl, 0x8e
test esp, ebx
sub ecx, eax
cmp ecx, 0x104
jmp 0x110a7b8
mov esp, ebp
pop ebp
ret
mov edx, dword [edi + 0x3c]
test esi, 0x6a945761
lea edx, [edx + edi]
cmp ax, dx
stc
cmp dword [edx], 0x4550
jmp 0xcb0840
inc edx
jmp 0xcc2fdf
je 0xcb0694
mov edx, dword [edx + 0x7c]
push ebx
push esi
cmp sp, bp
test ecx, ebp
or esi, 0xffffffff
cmc
test eax, ebp
mov dword [ebp - 0x10], edx
cmc
mov dword [ebp - 8], esi
cmp esi, 0x76332cd2
stc
cmp ecx, 0xffff
jmp 0xcaf5ac
jb 0x111e26d
mov edx, dword [ebp - 0x10]
test bp, ax
add edx, eax
cmp ax, cx
cmp ecx, edx
jmp 0xcc655c
ja 0x111da25
movsx ecx, cl
clc
cmc
lea edx, [edx + edx*4]
clc
lea edx, [ecx + edx*2 - 0x30]
add cl, 0x31
test esp, ebx
mov cl, byte [esi]
cmc
test edx, eax
test cl, cl
jmp 0x111da1f
mov ebx, dword [eax + edi + 0x18]
cmp dx, bp
test ebx, ebx
jmp 0xcc5bba
jne 0xbc84bb
inc esi
jmp 0x1119b67
ja 0xcadc0b
sub ecx, dword [eax + edi + 0x10]
test sp, ax
cmp bp, ax
cmp ecx, dword [eax + edi + 0x14]
jmp 0x111f076
je 0xcb0694
mov eax, 0x5a4d
stc
cmp word [edi], ax
je 0xca4602
sub eax, eax
jmp 0x1106e1f
jne 0xcb0694
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
test eax, eax
jmp 0xca812a
jne 0xbc4790
pop esi
pop ebx
bts di, si
cmp esp, edx
bts di, si
sub eax, eax
pop edi
jmp 0xca4567
pop ebx
pop edi
jmp 0x1104e13
jne 0xbc6670
pop esi
pop ebx
cmp edx, esi
sub eax, eax
mov di, dx
pop edi
jmp 0xbc4e04
call fcn.00cbd5cf
add esp, 0xc
pop esi
pop ebx
pop edi
mov esp, ebp
not bp
jmp 0xca360e
push eax
jmp 0xcb1dfd
jne 0x111aa96
lea edx, [ebp - 0x114]
cmovo ax, cx
mov eax, ebp
lahf
push edx
movsx eax, si
not eax
cbw
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
jmp 0x111aa8c
je 0xca3b37
mov cl, byte [esi + 1]
jmp 0xcbaa14
inc esi
cmp edx, 0x1e3422b8
test cl, cl
jmp 0xcb160a
push ecx
jmp 0x111e8bc
push ebp
mov ebp, esp
sub esp, 0x114
push edi
cmove edi, edx
btc di, 0xdd
mov edi, dword [ebp + 8]
test si, 0x6c3c
clc
test edi, edi
je 0xcb0694
mov ecx, dword [ebp + 0xc]
test ecx, ebx
test ecx, ecx
jmp 0xcb067f
jmp 0xbc84bb
jb 0x110b453
lea eax, [ebp - 0x114]
jmp 0x1119304
je 0xcc2ff3
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
jmp 0xca57f9
push eax
jmp 0xbc367e
inc eax
stc
cmc
mov dword [ebp + 8], edx
cmc
cmp di, 0x6a9a
cmp edx, ecx
jb 0x1110bf6
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
jmp 0xcbc364
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x1105e2e
jle 0xbc5a40
mov eax, dword [ebp - 4]
adc si, dx
ror si, 0x1d
or esi, 0x59252815
mov esi, dword [ebp - 8]
jmp 0x111927f
je 0x111927f
mov edx, dword [eax + edi + 0x20]
jmp 0xca3234
jae 0x111e26d
lea eax, [ecx + edi]
bts esi, edx
btr si, 0xf4
clc
mov cl, byte [eax]
sbb si, 0x682c
movsx esi, bp
mov esi, eax
cmp sp, 0x2e42
stc
test cl, cl
jmp 0xbc6668
mov esp, ebp
jmp 0xbc9aa5
je 0x111a8d5
push 0
jmp 0xbc8f7b
pop edi
mov esp, ebp
not bp
cmovo bp, cx
pop ebp
jmp 0xbc529b
jae 0xcb1610
mov ecx, dword [eax + edi + 0x1c]
sal dh, 2
cmc
lea edx, [ecx + esi*4]
xor ecx, ebx
sal cx, cl
xadd cl, ch
mov ecx, dword [edx + edi]
cmc
test esp, ecx
cmp bp, cx
test ecx, ecx
jmp 0xbc478a
jae 0xcb1610
mov dword [ebp + 8], 0
test dx, bx
cmp esi, ebp
test ecx, ecx
jmp 0x1110be8
jl 0x111927f
jmp 0xbc5a50
je 0x1115d5c
mov ebx, dword [ebp + 0xc]
xchg cl, al
xadd cl, cl
lea eax, [ebp - 0x114]
xor cl, 0xc9
btc si, bx
sub edx, edx
sub ebx, eax
movzx eax, bp
mov edi, edi
mov eax, 0x524f657c
mov cl, dl
movzx esi, bx
rol eax, cl
btc esi, 0x6d
lea esi, [ebp + edx - 0x114]
add al, dl
test ecx, 0x2ce34491
xor al, byte [ebx + esi]
mov byte [esi], al
jmp 0x110e8f5
je 0xcc169d
inc edx
cmp eax, 0xfc50fb6
cmp edx, 0x104
jmp 0xcc1697
jbe 0xcc2ff3
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0xcc275b
je 0xbc84b4
test eax, eax
je 0xbc4e4e
cmp eax, 1
jmp 0xcaeccf
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0xc]
jmp 0xcc2c7b
jne 0xcc4c0a
cmp byte [ebp + 0x10], 0
jmp 0x110b42f
jmp 0xbc84bb
cmp esi, dword [eax + edi + 0x14]
jmp 0x1107670
push eax
mov al, 0xce
lahf
xchg al, al
push edi
bswap eax
movzx eax, bp
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0xbc37e9
mov dword [ebp + 8], esi
jmp 0x111878f
push eax
shrd ax, di, 0xef
btc ax, 0x60
btc eax, eax
sar esi, 1
btr ax, ax
sub ax, 0x4221
mov eax, dword [edx + esi*4]
stc
add eax, edi
call fcn.00bc72a3
add esp, 4
clc
test dx, sp
stc
cmp eax, 0xffffffff
jmp 0x11146fd
je 0x111da25
mov bl, cl
cmc
cmp cx, di
sub bl, 0x30
inc esi
stc
test edi, 0x781e2ad0
cmp bl, 9
jmp 0xcace3f
mov cl, byte [esi + 2]
cmp di, 0x7113
add esi, 2
xor edx, edx
test cl, cl
jmp 0x111a201
call eax
test eax, eax
je 0xcb1610
cmp eax, edi
jmp 0x1116b00
jne 0x111a207
push 0
jmp 0x111e63b
pop esi
cwde
cmovno ebx, eax
cbw
pop ebx
movzx eax, ax
mov ah, dl
lahf
lea eax, [ecx + edi]
movsx edi, bx
pop edi
jmp 0x1114a12
push edx
jmp 0xcb2e4d
mov byte [ebp + eax - 0x114], 0
lahf
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0xca1cb6
jae 0xcb1610
mov edx, dword [eax + edi + 0x1c]
test di, 0x4c4b
lea ecx, [edx + ecx*4]
cmp bh, 0x9b
cmc
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0xcb0a09
mov dword [ebp + 8], edx
jmp 0xcbf75a