Function at 0x1bf85e9
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
ret
push edx
jmp 0x17c1c1a
push ecx
push eax
jmp 0x17422d5
test cl, cl
jmp 0x1810df9
ret
je 0x179fd50
mov edi, edi
stc
jmp 0x1771494
ret
mov esp, ebp
movsx ebp, cx
pop ebp
jmp 0x12d1b21
ret
push ecx
jmp 0x177b106
dec ebx
cmc
cmp eax, esp
clc
add edx, edi
cmp sp, 0x582f
test si, 0x4ad0
mov dword [ebp + 8], 0
cmp esi, 0x6bf573a4
cmp ebp, esp
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x17b5375
mov ecx, esi
test sp, di
cmp di, 0x38b4
clc
sub ecx, eax
test sp, si
jmp 0x17a9f6d
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x18101ff
je 0x195b126
sub eax, eax
bswap di
movsx edi, cx
pop edi
jmp 0x17e429a
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
jmp 0x12b6809
call fcn.01bf85e9
add esp, 0xc
xchg ebx, edi
pop esi
pop ebx
pop edi
jmp 0x195ab3b
ret
ret
cmp byte [esi + 1], 0x23
mov cx, bp
movzx cx, cl
lea ecx, [esi + 1]
jmp 0x1949c4c
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0x17a43eb
ja 0x175c81d
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jae 0x179fd50
mov edx, dword [eax + edi + 0x1c]
clc
lea ecx, [edx + ecx*4]
cmc
mov ecx, dword [ecx + edi]
test edx, ebp
jmp 0x1bfb347
mov esp, ebp
jmp 0x18cbb5f
cmp cl, 0x2e
jmp 0x177c240
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x18bfa53
je 0x1733157
mov cl, byte [esi + 1]
jmp 0x1be3aca
push eax
setne al
push edi
xchg ah, ah
not eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x17ce89a
mov cl, byte [esi + 2]
cmp dx, sp
clc
lea esi, [esi + 2]
stc
sub edx, edx
cmc
test dh, 0x82
test eax, ebp
test cl, cl
je 0x1810dff
mov bl, cl
cmp sp, cx
test di, 0x7013
cmp ecx, 0x7419561a
sub bl, 0x30
inc esi
test di, 0x7edc
cmc
cmp bl, 9
ja 0x1810dff
movsx ecx, cl
lea edx, [edx + edx*4]
jmp 0x173e466
cmp ecx, 0xffff
jmp 0x1761fcb
mov esp, ebp
pop ebp
jmp 0x12bb70f
pop ebx
xchg edi, edi
pop edi
jmp 0x12c7578
jne 0x1771494
pop esi
shld di, bx, 0xc6
pop ebx
shl edi, 0x30
bsf edi, esi
mov edi, 0x66814a2b
xor eax, eax
mov di, bx
pop edi
jmp 0x1799655
je 0x1bf33d1
mov edx, dword [eax + edi + 0x20]
jmp 0x172f82a
cmp ecx, 0x104
jae 0x179fd50
mov dword [ebp + 8], 0
test ecx, ecx
jbe 0x1947dad
lea ebx, [ebp - 0x114]
dec dl
shr dl, cl
sub ebx, eax
ror dl, cl
mov dl, byte [eax]
cmp dh, 0xb0
test dl, dl
jmp 0x18e0548
jne 0x1bf19fc
lea edx, [ebp - 0x114]
nop
cwde
push edx
cbw
nop
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
call eax
test eax, eax
jmp 0x1bf19f6
jl 0x1bf33d1
jmp 0x17e2492
push eax
jmp 0x17db8be
call eax
pop esi
pop ebx
pop edi
mov esp, ebp
mov bp, 0x12e3
xchg ebp, ebp
pop ebp
jmp 0x175218b
mov esp, ebp
pop ebp
jmp 0x1744f7f
call fcn.01bf85e9
add esp, 0xc
mov edi, eax
pop esi
movzx edi, cx
pop ebx
xchg di, di
mov edi, esi
movsx edi, bp
pop edi
jmp 0x1be68cb
mov ecx, dword [ebp + 0xc]
and al, ch
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
rol ah, cl
mov eax, dword [ebp + 0x10]
cmp esi, eax
push eax
sar eax, 0x38
adc al, al
movsx ax, bl
sar esi, 1
rcl al, cl
mov eax, dword [edx + esi*4]
jmp 0x18b9dfe
mov esp, ebp
pop ebp
ret
jmp 0x189a058
jne 0x179539f
push 0
jmp 0x12b01cd
mov eax, dword [ebp + 0xc]
jmp 0x1788fce
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0x1bf33c2
inc eax
mov dword [ebp + 8], edx
cmp edx, ecx
jmp 0x1947da7
add eax, edi
jmp 0x18c91e5
mov byte [esi], al
jmp 0x18db3a2
call eax
test eax, eax
jmp 0x17ac3a3
call fcn.01bfef04
add esp, 4
test ebx, esp
test cl, 0xc6
cmp eax, 0xffffffff
je 0x189a055
test eax, eax
jmp 0x1be9d17
jne 0x1bf33f1
pop esi
clc
pop ebx
xor eax, eax
xchg edi, edi
pop edi
jmp 0x176b74b
pop ebp
jmp 0x12bf855
je 0x173cf7f
mov eax, 0x5a4d
cmp bh, 0x74
clc
cmp word [edi], ax
jmp 0x173cf79
pop esi
cmovb ebx, ecx
xchg bx, ax
pop ebx
movsx eax, sp
mov ah, cl
lea eax, [ecx + edi]
not edi
xchg di, di
pop edi
jmp 0x17ceab1
je 0x18db3b5
inc edx
cmp edx, 0x104
jb 0x18df96c
lea eax, [ebp - 0x114]
push eax
push edi
cwde
mov ah, dl
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x1959094
je 0x181785d
mov ebx, dword [ebp + 0xc]
sal cl, 0x6b
lea eax, [ebp - 0x114]
mov si, di
not cl
xor edx, edx
adc esi, 0x66df0f19
rcr cl, 0x90
sar cl, cl
sub ebx, eax
mov edi, edi
mov eax, 0x9d525a
mov esi, 0x51076c1
xchg si, si
mov cl, dl
movzx esi, si
rol eax, cl
shl esi, 0x1f
and si, 0x4330
lea esi, [ebp + edx - 0x114]
add al, dl
cmp di, sp
xor al, byte [ebx + esi]
jmp 0x18ba871
je 0x173cf7f
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x18ce6b1
je 0x1947dad
mov byte [ebx + eax], dl
mov dl, dl
bswap edx
mov edx, dword [ebp + 8]
jmp 0x1bdc09c
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
setb cl
mov ax, si
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
jmp 0x173996a
jb 0x17a9f96
mov eax, dword [ebp + 8]
movzx ecx, cx
lea ecx, [ebp - 0x114]
jmp 0x172d7bd
je 0x1795384
push 0
jmp 0x12b2eb7
call eax
pop esi
jmp 0x179f5d6
mov esp, ebp
xchg ebp, ebp
mov ebp, edx
pop ebp
jmp 0x129caf7
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jne 0x173cf7f
mov eax, dword [edx + 0x78]
clc
cmc
mov dword [ebp - 4], eax
cmp ax, bp
stc
test eax, eax
je 0x173cf7f
mov edx, dword [edx + 0x7c]
stc
push ebx
stc
push esi
stc
clc
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
cmp ecx, ecx
mov dword [ebp - 8], esi
cmp eax, edi
jmp 0x17975a6
inc edx
jmp 0x18a854c
inc esi
test cl, cl
jmp 0x179fd4a
jne 0x175295f
cmp byte [ebp + 0x10], 0
jmp 0x18df944
jne 0x189a058
inc esi
mov dword [ebp + 8], esi
jmp 0x189a058
mov esp, ebp
pop ebp
jmp 0x12a3c59
je 0x1922e90
cmp eax, 1
jmp 0x1be66af
je 0x179fd50
cmp eax, edi
jmp 0x1be61f7
jle 0x17e248a
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp cl, 0xcb
cmp esi, dword [eax + edi + 0x14]
jae 0x179fd50
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
mov cx, 0x6964
mov ecx, dword [edx + edi]
test ecx, ecx
je 0x179fd50
cmp ecx, eax
jb 0x18d894a
mov edx, dword [ebp - 0x10]
cmp esi, 0x74705a1
lea edx, [edx + eax]
cmp ebp, 0x482b18cd
cmp ecx, edx
jae 0x18d894a
lea eax, [ecx + edi]
not cl
mov cl, byte [eax]
btc si, 0x37
btc esi, edi
mov esi, eax
cmp edx, eax
test cl, cl
jmp 0x12bdf84
push ebp
mov ebp, esp
lea esp, [esp - 0x114]
cmp dh, 0xe
push edi
bts di, bx
cmc
btr edi, 0x3d
mov edi, dword [ebp + 8]
clc
test edi, edi
jmp 0x18dfb46
test ecx, ecx
jmp 0x18c9f02