Function at 0x15af817
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 4], eax
test eax, eax
jmp 0x150978a
jne 0x13e97ee
push 0
jmp 0x1490c16
lea ecx, [esi + 1]
je 0x1579757
push 0
push ecx
jmp 0xd9e536
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
test eax, eax
jmp 0x14ac941
je 0x13c6ab8
mov byte [ebx + eax], dl
movzx edx, bx
mov edx, dword [ebp + 8]
jmp 0x14073de
mov dword [ebp + 8], edx
jmp 0x159463f
push eax
jmp 0x14a82fa
pop edi
jmp 0xddd924
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0x141d2a2
push eax
jmp 0xdd1ed9
pop esi
pop ebx
lea eax, [ecx + edi]
jmp 0x1432f4c
je 0x15d5f61
cmp ecx, eax
jb 0xdc3b30
mov edx, dword [ebp - 0x10]
lea edx, [edx + eax]
jmp 0x144f971
call fcn.015af817
add esp, 0xc
pop esi
mov edi, 0x660006f2
movzx edi, sp
setp bl
pop ebx
cmova edi, edi
pop edi
jmp 0x151d524
je 0xdb8e05
test eax, eax
jmp 0x1566fa0
mov esp, ebp
not ebp
cmovbe ebp, edx
pop ebp
jmp 0x153e03f
jb 0x14532c4
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
push ecx
jmp 0xd94db8
mov esp, ebp
pop ebp
ret
ja 0x15a9c87
sub ecx, dword [eax + edi + 0x10]
test si, cx
cmp ecx, dword [eax + edi + 0x14]
jmp 0x15a5d82
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
clc
test ax, bp
cmc
cmp dword [edx], 0x4550
jmp 0x15b2a27
call eax
test eax, eax
jmp 0x13e4e71
je 0x15d5f61
cmp eax, edi
jne 0x142d6de
cmp byte [ebp + 0x10], 0
je 0x145d3fa
mov ebx, dword [ebp + 0xc]
stc
add si, sp
lea eax, [ebp - 0x114]
shr cl, cl
jmp 0x15344b7
je 0xcdbf5b
mov bl, cl
test ah, 0xa5
sub bl, 0x30
jmp 0x13fc6a6
je 0x158f5bd
mov cl, byte [esi + 1]
jmp 0x15b0a70
jae 0x15d5f61
mov ecx, dword [eax + edi + 0x1c]
rcr edx, cl
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
cmc
test esi, 0x43af01e0
test ecx, ecx
jmp 0xdd1d4c
jae 0xdc3b30
lea eax, [ecx + edi]
sar cl, cl
mov cl, byte [eax]
sbb si, 0x1bf2
sar esi, 0xfe
mov esi, eax
cmc
stc
test ebp, eax
test cl, cl
jmp 0x144e6d9
inc esi
cmc
clc
cmp bl, 9
jmp 0x1489495
call eax
pop esi
cmovnp edi, edx
pop ebx
pop edi
jmp 0x13caf85
pop ebp
jmp 0x1564f17
mov ecx, dword [ebp - 4]
movsx dx, bh
cbw
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
jmp 0x1407da5
inc edx
inc eax
mov dword [ebp + 8], edx
cmp edx, ecx
jmp 0x13c6ab2
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
jmp 0xd99ca5
mov esp, ebp
bswap ebp
cmovne bp, bx
pop ebp
ret
jle 0x1595fc1
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp bp, 0x376b
cmp esi, dword [eax + edi + 0x14]
jmp 0x13f7602
jb 0x15344c2
lea eax, [ebp - 0x114]
push eax
jmp 0x1519f1d
push esi
test bp, si
cmc
or esi, 0xffffffff
test ax, bp
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
test edi, 0x6bf87c9a
cmp edi, edx
cmp ecx, 0xffff
jmp 0x13cbbf1
cmp byte [esi + 1], 0x23
mov ch, 0x26
not ecx
jmp 0xd8575f
pop edi
mov esp, ebp
bswap ebp
jmp 0x159f4e4
ret
je 0x15d5f61
mov edi, edi
cmp cl, 0x2e
jmp 0x13ee2d6
cmp ecx, edx
jmp 0x13f9db0
jbe 0x13c6ab8
lea ebx, [ebp - 0x114]
sub ebx, eax
xadd dl, dl
mov dl, byte [eax]
test dl, dl
jmp 0xd98972
mov eax, dword [ebp + 0xc]
push eax
push edi
setl ah
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x13fd16b
mov esp, ebp
jmp 0x1404062
je 0x14200ed
inc edx
cmp edx, 0x104
jmp 0x14200e7
ja 0xcdbf5b
movsx ecx, cl
stc
lea edx, [edx + edx*4]
test esp, edi
stc
test eax, 0x364d527d
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
clc
test cl, cl
jmp 0xcdbf55
push edx
jmp 0xdbd31a
call fcn.015af817
add esp, 0xc
pop esi
pop ebx
pop edi
jmp 0x1415674
jne 0x13e4e77
lea edx, [ebp - 0x114]
cmovle ax, bx
lahf
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x13d1855
je 0x159c102
mov edx, dword [edx + 0x7c]
push ebx
jmp 0x142145d
mov esp, ebp
xchg bp, bp
mov ebp, ecx
pop ebp
ret
push edi
xchg al, ah
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x156ac4c
mov esp, ebp
bswap bp
pop ebp
ret
test cl, cl
jmp 0x15d5f5b
xor edx, edx
cmc
sub ebx, eax
mov edi, edi
mov cl, cl
cbw
mov eax, 0x19f2616e
rol cl, 0x1a
mov cl, dl
bts si, sp
rol eax, cl
shrd esi, ebp, 0x24
lea esi, [ebp + edx - 0x114]
jmp 0x15aa69d
jae 0x15d5f61
mov dword [ebp + 8], 0
stc
jmp 0x15b09b5
ret
ret
je 0x1405900
cmp eax, 1
jne 0xdb8e08
inc esi
mov dword [ebp + 8], esi
jmp 0x1577051
call eax
pop esi
movsx edi, sp
mov di, sp
pop ebx
cmovle edi, esp
jmp 0xda68d6
jmp 0xdb8e08
mov cl, byte [esi + 2]
stc
cmp sp, 0xd19
add esi, 2
cmp esp, 0x41274999
test di, bp
sub edx, edx
clc
test cl, 0xe
test cl, cl
jmp 0x13e97e8
jl 0x141d2b3
jmp 0x1595fc7
mov dword [ebp + 8], 0
cmp ch, 0x42
clc
cmp al, ch
mov dword [ebp - 0xc], edx
cmp ebx, ebx
test ecx, 0x1b431e3f
stc
test ebx, ebx
jmp 0x157a56d
je 0x141d2b3
mov edx, dword [eax + edi + 0x20]
dec ebx
stc
lea edx, [edx + edi]
jmp 0x158611b
mov ecx, esi
cmp bx, 0x3443
jmp 0x15af646
jmp 0xdb8e08
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
neg ah
dec al
add ax, 0x1724
mov eax, dword [ebp + 0x10]
test eax, 0x611c1e35
push eax
sar esi, 1
mov eax, dword [edx + esi*4]
clc
add eax, edi
call fcn.013bf791
add esp, 4
stc
test ch, al
cmp eax, 0xffffffff
jmp 0xddc633
je 0x159c102
mov ecx, dword [ebp + 0xc]
test bl, ah
test ecx, ecx
je 0x159c102
mov eax, 0x5a4d
cmp ah, dl
cmp word [edi], ax
je 0x13cbc71
sub eax, eax
pop edi
jmp 0x15da668
pop ebp
ret
jae 0x15d5f61
mov edx, dword [eax + edi + 0x1c]
cmp esp, ebx
lea ecx, [edx + ecx*4]
cmc
test bx, ax
test ebx, 0xb813663
mov ecx, dword [ecx + edi]
test ecx, ecx
jne 0xdd1d52
pop esi
pop ebx
btc edi, edx
cmc
xor eax, eax
xchg edi, edi
mov edi, 0x2d01586a
movzx edi, bx
pop edi
jmp 0x1516cc1
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0x158b2b8
add al, dl
xor al, byte [ebx + esi]
mov byte [esi], al
jmp 0x1481933
sub ecx, eax
test al, 0xd
clc
cmp ecx, 0x104
jmp 0x153de57
push ebp
mov ebp, esp
test si, 0x3cb8
lea esp, [esp - 0x114]
cmc
test ecx, 0x577c6d97
push edi
mov edi, dword [ebp + 8]
cmp ax, cx
test edi, edi
jmp 0x159c0df
test ecx, ecx
jmp 0x14532b3
inc esi
jmp 0x152537b
jne 0x159c102
mov eax, dword [edx + 0x78]
stc
jmp 0xcd9178
jne 0x144e6e1
pop esi
rcl edi, 0x11
pop ebx
xor eax, eax
mov edi, 0x17a07f89
pop edi
jmp 0x14628e9
mov esp, ebp
bswap ebp
mov bp, di
not ebp
pop ebp
jmp 0x144490b