Function at 0x15e0356
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov cl, byte [esi + 2]
add esi, 2
test ebp, ebp
cmp sp, 0x60ae
sub edx, edx
jmp 0x1663f9a
push edi
jmp 0x151aaa0
mov dword [ebp - 8], eax
jmp 0x16d18e7
je 0x15d8219
cmp eax, edx
jb 0xde307a
mov esi, dword [ebp - 0x10]
cmc
test edi, 0x38777270
lea esi, [esi + edx]
clc
test cx, 0x2c55
cmp eax, esi
jae 0xde307a
lea eax, [eax + ecx]
not cl
mov cl, byte [eax]
xor si, dx
mov esi, eax
jmp 0x1799f1e
ret
jns 0x16d4cd8
lea edi, [esi - 1]
jmp 0x163f62c
mov esp, ebp
pop ebp
jmp 0x1602f03
mov ecx, esi
sub ecx, eax
test ax, di
cmp eax, ebp
test bp, 0x71a
cmp ecx, 0x104
jmp 0x1733cd2
pop edi
cmp bx, cx
mov esi, ebp
sal esi, 0x5f
pop ebx
add eax, ecx
mov si, 0x26c4
movsx esi, di
pop esi
jmp 0x1700ae2
je 0x160f54e
inc eax
jmp 0x17195b0
mov esp, ebp
pop ebp
ret
mov edi, dword [edx + ecx + 0x18]
clc
test edi, edi
jmp 0x16d2381
call fcn.015e0356
add esp, 0xc
jmp 0x15fe453
je 0xdd8918
mov cl, byte [esi + 1]
jmp 0x1787146
je 0x169369f
lea eax, [ecx - 0x30]
jmp 0x162cccc
mov eax, dword [ebp + 0xc]
jmp 0xeaa5af
push eax
push edx
bswap ax
movzx eax, si
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x16066bf
je 0x1653ae0
lea ebx, [ebp - 0x114]
sbb dl, 0xfe
sal dl, cl
sub ebx, eax
mov dl, byte [eax]
clc
jmp 0x17406f4
call fcn.00e790c7
lea esp, [esp + 4]
cmp ebp, ebx
test eax, eax
jmp 0xdcd8b8
mov eax, dword [ebp - 0xc]
btc si, 0xae
mov edx, dword [ebp + 0x10]
lea esi, [edi + ebx]
sar esi, 1
mov eax, dword [eax + esi*4]
cmp cx, 0x7617
push edx
adc dx, bp
shr edx, cl
bswap dx
mov edx, dword [ebp + 0xc]
cmp sp, cx
add eax, ecx
jmp 0xebe7bb
mov byte [esi], cl
jmp 0xde7afa
je 0x163fdea
mov eax, dword [eax + ecx + 0x7c]
push ebx
cmp si, di
push edi
cmc
mov dword [ebp - 0x10], eax
test esi, esp
cmc
cmp bh, 2
mov dword [ebp - 8], 0xffffffff
cmp esi, 0xffff
ja 0xe50bad
mov eax, esi
test esi, ebp
sub eax, dword [edx + ecx + 0x10]
jmp 0xdbd0ec
je 0x1653ae0
mov byte [ebx + eax], dl
inc edi
inc eax
cmp edi, ecx
jmp 0x1653ada
ret
pop ebx
mov esi, 0x15012634
movzx esi, bx
pop esi
jmp 0x1668e80
push ecx
push edi
jmp 0xe7c8a6
call fcn.015e0356
add esp, 0xc
pop edi
jmp 0xefe3c7
ret
jne 0x1799f26
pop edi
cmovbe bx, ax
bts bx, sp
inc bh
pop ebx
bsr si, di
add si, cx
xor eax, eax
xchg esi, esi
movsx esi, sp
mov esi, ecx
pop esi
mov esp, ebp
movzx ebp, dx
movsx ebp, ax
xchg bp, bp
pop ebp
ret
push ebp
mov ebp, esp
jmp 0x15f60a8
mov ecx, dword [ebp + 8]
test bl, 0xe9
test ah, dl
lea esp, [esp - 0x114]
clc
test eax, edi
push esi
cmc
jmp 0x163fdc8
pop edi
pop ebx
cmova si, di
pop esi
jmp 0x1601496
mov esp, ebp
pop ebp
jmp 0x1617233
ret
call eax
pop edi
not bl
pop ebx
xchg esi, esi
bswap esi
movsx esi, dx
pop esi
jmp 0xe4b370
jb 0x16ab037
lea eax, [ebp - 0x114]
push eax
mov eax, 0x1314ec8
push edx
movsx eax, bp
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
not bh
xchg ebx, esi
bswap bx
pop ebx
pop esi
mov esp, ebp
pop ebp
jmp 0xdbe1b3
ret
inc esi
stc
cmp edi, 0x3da25177
cmp al, 9
jmp 0x169367c
jmp 0x16d4cee
test ecx, ecx
je 0x163fdea
mov esi, dword [ebp + 0xc]
stc
test esi, esi
je 0x163fdea
mov eax, 0x5a4d
cmp word [ecx], ax
je 0x16e8e33
xor eax, eax
pop esi
jmp 0xdcfab4
jb 0xeb32cf
lea ecx, [ebp - 0x114]
cmovb eax, esi
movzx eax, si
push ecx
not ah
mov byte [ebp + edi - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
mov edi, eax
test ecx, ebp
test edi, edi
jne 0x174ed7a
lea edx, [ebp - 0x114]
cmovae eax, edi
movzx eax, bp
push edx
mov ax, 0x3a06
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov edi, eax
test edi, edi
jmp 0x174ed74
cmp byte [esi + 1], 0x23
setno cl
xchg cl, cl
not ch
lea ecx, [esi + 1]
jmp 0x1683dea
test cl, cl
jmp 0xe90163
mov esp, ebp
cmovbe ebp, edx
pop ebp
jmp 0xefaf47
je 0xdb50f8
push 0
jmp 0xf07ca7
lea eax, [esi + eax*4]
cmc
test bp, 0x7a07
mov eax, dword [eax + ecx]
test bp, 0x931
test eax, eax
jmp 0xdbd1b5
ja 0x169369f
movsx eax, cl
or cl, 0x6b
rcl cl, cl
mov cl, byte [esi]
cmp si, bx
clc
lea edx, [edx + edx*4]
lea edx, [eax + edx*2 - 0x30]
test cl, cl
jne 0xe90169
push 0
jmp 0x17a6d55
je 0xea4e52
mov edi, dword [ebp + 0xc]
sub si, cx
lea ecx, [ebp - 0x114]
cmp cx, bp
xor eax, eax
sbb si, ax
cmp esp, esi
add ebx, eax
sub edi, ecx
lea esp, [esp]
clc
mov cl, al
movsx ebx, cx
btc esi, ebx
mov ebx, 0x4cfd413c
rol ebx, cl
rcr ch, 0x4e
or ch, dl
test dx, ax
lea esi, [ebp + eax - 0x114]
movsx cx, ch
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
jmp 0xec4712
mov eax, dword [ebp + 8]
test edi, 0x3cc70148
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + eax + 0x24]
sub ch, 0x45
cmovp ecx, esi
inc cl
lea ecx, [edx + esi*2]
adc dx, si
clc
movzx edx, word [ecx + eax]
btc ecx, 2
mov dword [ebp - 8], edx
rol dx, cl
rcr ecx, cl
mov ecx, eax
cwde
mov edx, dword [ebp - 4]
btc ax, 0x9e
mov eax, dword [ebp - 8]
jmp 0x17976ac
je 0x16d18e7
mov eax, dword [edx + ecx + 0x20]
jmp 0x174dce3
jle 0x16d18ad
lea ebx, [esi + 1]
sub cx, 0x2ea6
or cl, 0x44
shrd cx, dx, 0x72
mov ecx, dword [ebp + 8]
cmp ebp, esp
cmp ebx, edi
jle 0xec0105
jmp 0x16d18df
mov eax, dword [ecx + 0x3c]
test di, 0x27f3
stc
cmp dword [eax + ecx], 0x4550
jmp 0x17484b4
mov esp, ebp
mov ebp, 0x54244454
pop ebp
jmp 0x15cfa3f
cmp eax, 0x104
jmp 0x160f548
jae 0x15d8219
sub edi, edi
stc
test di, di
test ecx, ecx
jmp 0xeb32bc
test dl, dl
jmp 0xee2507
jne 0x163fdea
mov edx, dword [eax + ecx + 0x78]
cmp cx, si
mov dword [ebp - 4], edx
cmc
stc
test edx, edx
jmp 0xedb42c
add eax, ecx
clc
test esi, 0x52806489
test ecx, edx
sub ebx, ebx
dec edi
jmp 0x1786b94
je 0x15d8219
mov edx, dword [ebp + 8]
cmp edi, edx
jmp 0x1799b57
js 0x16d18e7
jmp 0xec010d
mov dword [ebp - 0xc], eax
jmp 0x177cc8f
inc esi
test si, cx
test cl, cl
jmp 0x15d8213
cmp eax, dword [edx + ecx + 0x14]
jae 0x15d8219
mov esi, dword [edx + ecx + 0x1c]
stc
jmp 0x169313a
jne 0x165922c
cmp byte [ebp + 0x10], 0
jmp 0x16ab00f
test cl, cl
je 0x15d8219
cmp cl, 0x2e
jmp 0xe8db89
push edx
jmp 0xdbb248