Function at 0xc1f7a8
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
cmp byte [esi + 1], 0x23
setne cl
lea ecx, [esi + 1]
je 0xb8dbaf
push 0
jmp 0xb73fae
inc eax
mov dword [ebp + 8], edx
cmp esp, esi
stc
cmp edx, ecx
jmp 0xbf5682
call eax
test eax, eax
je 0xc613c4
cmp eax, edi
jmp 0xb22a76
cmp eax, 0xffffffff
je 0xbbce83
test eax, eax
jmp 0xb61a82
ret
push eax
mov eax, ebp
push edi
jmp 0xb5eb19
mov byte [esi], al
jmp 0xb1f4d5
mov dword [ebp + 8], esi
jmp 0xbbce87
mov edx, dword [edi + 0x3c]
cmc
test esi, 0x1c2450c4
add edx, edi
test si, sp
stc
cmc
cmp dword [edx], 0x4550
jne 0xc30676
mov eax, dword [edx + 0x78]
test dx, 0x2909
mov dword [ebp - 4], eax
test eax, eax
jmp 0xbac9c9
jne 0xb157d5
push 0
jmp 0xb00994
je 0xc30676
mov eax, 0x5a4d
cmp esp, edx
test bx, bx
cmp word [edi], ax
jmp 0xc30670
mov esp, ebp
cmovnp bp, di
xchg bp, bp
pop ebp
jmp 0x7f65cb
ja 0x882f26
movsx ecx, cl
test esi, 0x319b2d25
jmp 0xc39a2b
je 0xbf5688
mov byte [ebx + eax], dl
inc dx
movsx edx, di
jmp 0xc2f4e4
push edi
mov ax, bx
setne al
cmovl ax, ax
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0xbf934e
call fcn.00c1f7a8
add esp, 0xc
pop esi
jmp 0xb9d249
cmp cl, 0x2e
jmp 0xbcc46c
jb 0xc14c68
lea eax, [ebp - 0x114]
push eax
cwde
jmp 0xacda30
mov esp, ebp
pop ebp
jmp 0xb65d13
mov esp, ebp
mov ebp, edi
pop ebp
jmp 0xbceeab
jae 0xc613c4
mov edx, dword [eax + edi + 0x1c]
cmp eax, edx
lea ecx, [edx + ecx*4]
cmp ch, dl
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0xc2cf3b
push edx
jmp 0xb2e45c
je 0xc613c4
cmp ecx, eax
jb 0xbc078f
mov edx, dword [ebp - 0x10]
jmp 0xbfc056
ret
je 0x882f26
mov bl, cl
cmc
cmp cl, ah
stc
sub bl, 0x30
inc esi
cmp bl, 9
jmp 0x897bf6
je 0xaeb64f
inc edx
test si, 0x500d
stc
cmp edx, 0x104
jmp 0xaeb649
jae 0xc613c4
mov dword [ebp + 8], 0
cmp bp, 0x3c79
cmp bx, cx
test ecx, ecx
jmp 0xc3490a
jne 0x7f351b
cmp byte [ebp + 0x10], 0
jmp 0xc14c41
jne 0xbbce87
inc esi
jmp 0x882891
push eax
jmp 0xae699a
mov dword [ebp - 0xc], edx
test ax, si
cmc
test ebx, ebx
jmp 0xb68f19
push eax
call fcn.00c1f7a8
add esp, 0xc
pop esi
xchg bl, bl
pop ebx
xchg di, di
pop edi
jmp 0x896cd1
pop ebp
ret
test cl, cl
jmp 0x882f20
call fcn.00b2cd22
lea esp, [esp + 4]
jmp 0x7f64d1
jne 0x7f5c6d
lea edx, [ebp - 0x114]
cbw
movsx eax, bp
cwde
push edx
mov eax, esp
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA]
jmp 0x7f5c63
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0xc3b63f
mov esp, ebp
mov bp, di
pop ebp
jmp 0xc19f6f
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
call eax
pop esi
xchg di, bx
pop ebx
bswap di
pop edi
jmp 0xc2522a
xor al, byte [ebx + esi]
jmp 0x8090dc
je 0xc39a72
cmp eax, 1
jmp 0xb2a67f
ret
inc edx
jmp 0x7f49be
jl 0xbbcea5
jmp 0xb6c652
push ecx
jmp 0xb8d805
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
add si, 0x1358
sbb si, 0x48e6
btc ax, cx
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
rol ax, 0xa0
mov eax, dword [ebp + 0x10]
stc
push eax
sar esi, 1
bsf ax, di
adc eax, esp
mov eax, dword [edx + esi*4]
cmc
jmp 0xb7cefb
push ecx
jmp 0xb30b9a
ret
add eax, edi
jmp 0xb4e616
ret
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA]
jmp 0xc2ac34
mov cl, byte [esi + 2]
cmp sp, 0x73bb
cmp bp, ax
clc
lea esi, [esi + 2]
test ebx, 0x7f755b54
cmp ah, 0x65
xor edx, edx
jmp 0xbad8fa
mov esp, ebp
jmp 0xb344d7
pop ebx
pop edi
mov esp, ebp
cmovae ebp, ecx
pop ebp
jmp 0xb8910b
je 0xc30676
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x88a678
je 0xc30676
mov edx, dword [edx + 0x7c]
push ebx
cmp dh, 0x81
test esp, esp
push esi
stc
test bp, dx
or esi, 0xffffffff
cmc
test sp, cx
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
test sp, 0x703f
cmp ecx, 0xffff
ja 0xb586f5
sub ecx, dword [eax + edi + 0x10]
test eax, eax
cmp ecx, dword [eax + edi + 0x14]
jmp 0xafeb00
test cl, cl
jmp 0xb157cf
lea ebx, [esi - 1]
clc
cmp dword [ebp + 8], ebx
jle 0xb6c63e
mov eax, dword [ebp - 4]
btc esi, ebp
cmp si, 0x314
mov esi, dword [ebp - 8]
test edi, 0x73211749
stc
cmp esi, dword [eax + edi + 0x14]
jae 0xc613c4
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
test dh, 7
test ecx, ecx
jmp 0xb093cb
pop esi
pop ebx
lahf
not eax
lea eax, [ecx + edi]
pop edi
jmp 0xafe39f
je 0xc1bab3
mov cl, byte [esi + 1]
jmp 0xbdfb2e
ret
mov eax, dword [ebp + 0xc]
jmp 0x804ae5
inc esi
cmp cx, 0x4304
cmp cx, di
test cl, cl
jmp 0xc613be
jb 0xc3491b
mov eax, dword [ebp + 8]
mov ch, 0x18
lea ecx, [ebp - 0x114]
jmp 0xb6939a
call eax
pop esi
pop ebx
pop edi
mov esp, ebp
pop ebp
jmp 0xb09da7
lea edx, [edx + eax]
test bp, di
test esp, 0x236f3ccb
cmc
cmp ecx, edx
jae 0xbc078f
lea eax, [ecx + edi]
or esi, eax
mov cl, byte [eax]
btc si, 0xcb
mov esi, eax
test cl, cl
je 0xc613c4
mov edi, edi
jmp 0xae6d59
mov edx, dword [ecx + edi + 0x24]
lahf
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0xc4d70b
je 0xbd0581
mov ebx, dword [ebp + 0xc]
adc esi, ecx
lea eax, [ebp - 0x114]
mov cl, 0xbe
ror si, 0xb8
sub edx, edx
sub ebx, eax
movsx eax, bp
cmovge eax, ebx
mov edi, edi
mov ax, 0x344b
mov eax, 0x155a4995
setne cl
mov cl, dl
not si
rol esi, 0xf6
rol eax, cl
dec si
lea esi, [ebp + edx - 0x114]
add al, dl
test cl, bl
jmp 0xb6100f
ret
mov ecx, esi
sub ecx, eax
cmp ecx, 0x104
jmp 0xb20020
push ebp
mov ebp, esp
clc
test dx, si
lea esp, [esp - 0x114]
push edi
rcl edi, 0xc0
mov edi, dword [ebp + 8]
clc
test cx, sp
test edi, edi
jmp 0xba324b
mov esp, ebp
mov ebp, ebp
pop ebp
jmp 0xb7a82b
call eax
test eax, eax
jmp 0xb53c1a
jne 0xb093d1
pop esi
pop ebx
shl edi, 0x12
sub eax, eax
movsx edi, si
bswap di
pop edi
jmp 0xb97d01
mov edx, dword [ebp + 8]
jmp 0xb673bd
je 0x882ab7
xor eax, eax
pop edi
jmp 0xb5dbac
jbe 0xbf5688
lea ebx, [ebp - 0x114]
xor dl, 0x97
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0xacd3c9
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
ror cl, cl
stc
mov cl, byte [esi]
cmc
test si, 0x1b21
jmp 0xb48781
mov ecx, dword [ebp - 4]
jmp 0xc111d3
je 0xbbcea5
mov edx, dword [eax + edi + 0x20]
dec ebx
stc
add edx, edi
stc
mov dword [ebp + 8], 0
jmp 0xb2e961
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0xbbce87
jne 0xae6d59
pop esi
not ebx
rcr edi, 0x81
bts di, bp
pop ebx
xor eax, eax
pop edi
jmp 0xaf9284