Function at 0xb78566
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop ebp
jmp 0xac4705
jae 0xb33b5d
lea eax, [ecx + edi]
xor si, bx
mov cl, byte [eax]
adc esi, edx
rcr si, 0x71
mov esi, eax
jmp 0xc6b455
ret
mov ebx, dword [eax + edi + 0x18]
cmp dx, sp
clc
test ebx, ebx
jmp 0xbc37b2
mov esp, ebp
cmovge bp, dx
mov bp, ax
pop ebp
jmp 0xae7b71
jle 0xbf6b71
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
stc
cmp esi, dword [eax + edi + 0x14]
jae 0xb9e3ef
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
clc
xor ch, bh
sar cl, 0
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0xb19eb3
je 0xb3ccb4
mov ecx, dword [ebp + 0xc]
test dx, si
test ecx, ecx
je 0xb3ccb4
mov eax, 0x5a4d
test sp, si
cmp word [edi], ax
jmp 0xb3ccae
call fcn.00b907a1
add esp, 4
stc
cmp eax, 0xffffffff
jmp 0xb7583f
mov edx, dword [ebp + 8]
inc edx
jmp 0xb260d3
jne 0xb8807d
cmp byte [ebp + 0x10], 0
jmp 0xb92e96
push eax
jmp 0xb2ce6b
je 0xb9e3ef
mov edi, edi
clc
cmp cl, 0x2e
je 0xbae658
mov cl, byte [esi + 1]
jmp 0xb9e3e3
mov byte [esi], al
je 0xc32f96
inc edx
cmp ecx, 0x6b9d4927
cmp edx, 0x104
jmp 0xc32f90
inc esi
cmp bl, 9
jmp 0xba7ff6
mov byte [ebp + eax - 0x114], 0
movsx eax, dx
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0xbef170
ret
ret
je 0xc2bd33
mov byte [ebx + eax], dl
inc dx
jmp 0xaa3344
jmp 0xc6a170
ret
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0xc6a170
ret
ret
ret
je 0xc0e275
cmp eax, 1
jmp 0xb213f6
dec ebx
test dh, 0x12
lea edx, [edx + edi]
mov dword [ebp + 8], 0
cmp ch, 0x3c
test ecx, edi
cmc
mov dword [ebp - 0xc], edx
cmp dh, bl
cmp edi, 0x44621c15
test ebx, ebx
jl 0xa8e5b0
jmp 0xbf6b77
je 0xb9e3ef
cmp ecx, eax
jb 0xb33b5d
mov edx, dword [ebp - 0x10]
add edx, eax
cmp ecx, edx
jmp 0xa7575a
mov cl, byte [esi + 2]
lea esi, [esi + 2]
xor edx, edx
stc
test cl, cl
jmp 0xb7f71a
push eax
bswap eax
mov ax, bp
push edi
lahf
mov ah, 0xf5
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
call eax
pop esi
movsx bx, bh
pop ebx
mov edi, 0xf0e117b
pop edi
jmp 0xbdd65e
jne 0xc6a170
inc esi
jmp 0xbe3c97
mov esp, ebp
mov ebp, ebp
not bp
movsx ebp, bp
pop ebp
jmp 0xac2a37
mov esp, ebp
mov bp, dx
pop ebp
jmp 0xafaeeb
inc eax
cmc
test sp, 0x273
mov dword [ebp + 8], edx
cmp esp, eax
cmp edx, ecx
jmp 0xc2bd2d
call fcn.00b78566
add esp, 0xc
pop esi
pop ebx
pop edi
jmp 0xb4436c
pop esi
cmovns bx, sp
cbw
movsx ebx, di
pop ebx
cmovo ax, bx
lahf
lea eax, [ecx + edi]
cmovno di, si
jmp 0xbe6a4d
je 0xc24e75
sub eax, eax
mov di, si
pop edi
jmp 0xa8bdc0
mov esp, ebp
mov bp, cx
pop ebp
jmp 0xa78da5
call fcn.00b78566
add esp, 0xc
pop esi
mov ebx, esp
movsx ebx, bp
pop ebx
pop edi
jmp 0xc5840b
mov esp, ebp
movzx ebp, bp
mov bp, cx
pop ebp
ret
call eax
pop esi
jmp 0xb96d63
add eax, edi
jmp 0xa9c594
sub bl, 0x30
jmp 0xab4792
jne 0xb19eb9
pop esi
xor bx, bp
sub edi, 0x6ee32546
pop ebx
xor di, 0x7374
bsr edi, esi
sub eax, eax
mov di, 0x7882
cmovne edi, eax
pop edi
jmp 0xb26089
je 0xc6a16c
test eax, eax
jmp 0xaffe51
push ebp
mov ebp, esp
test ebx, 0x2ec97106
stc
lea esp, [esp - 0x114]
clc
test cx, ax
push edi
xor di, 0x17dd
bsf edi, edx
mov edi, dword [ebp + 8]
test eax, esp
cmp sp, sp
cmp edx, 0x556e78fc
test edi, edi
jmp 0xa9574c
mov dl, byte [eax]
test dl, dl
jmp 0xacd472
je 0xba801f
mov bl, cl
jmp 0xb6f8d5
cmp byte [esi + 1], 0x23
not ch
lea ecx, [esi + 1]
je 0xb1a9d5
push 0
push ecx
jmp 0xaab12e
je 0xc56b17
mov ebx, dword [ebp + 0xc]
cwde
lea eax, [ebp - 0x114]
xor edx, edx
sub ebx, eax
rol cl, 0xb8
not cl
mov edi, edi
mov eax, 0x354646ec
mov cl, dl
btr si, si
rol eax, cl
bt esi, esi
lea esi, [ebp + edx - 0x114]
add al, dl
xor al, byte [ebx + esi]
jmp 0xaaf4e8
pop ebx
mov edi, 0x161839f7
not di
pop edi
jmp 0xb21dc4
push eax
jmp 0xb4a7ca
inc esi
test dh, 0xe1
test cl, cl
jne 0xaac3a9
pop esi
pop ebx
test ebp, 0x271c74f3
xor eax, eax
mov edi, edi
pop edi
mov esp, ebp
jmp 0xa73fa1
push eax
cwde
not eax
push edi
movsx ax, dh
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0xb57fd9
ja 0xba801f
movsx ecx, cl
clc
test esi, 0x570c2058
stc
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
dec cl
mov cl, byte [esi]
cmp bp, dx
test edi, ecx
test cl, cl
jne 0xb7f720
push 0
push edx
jmp 0xb9ca9e
mov ecx, esi
clc
sub ecx, eax
stc
test sp, 0x670b
cmp ecx, 0x104
jmp 0xc23502
je 0xa8e5b0
mov edx, dword [eax + edi + 0x20]
jmp 0xb1709a
mov esp, ebp
movsx ebp, dx
pop ebp
jmp 0xae8c23
mov dword [ebp + 8], esi
jmp 0xad3a0c
call eax
test eax, eax
je 0xb9e3ef
cmp eax, edi
jmp 0xaa79cb
pop edi
jmp 0xb4ebca
call eax
test eax, eax
jne 0xbe55fe
lea edx, [ebp - 0x114]
push edx
cmove ax, bx
setnp ah
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
jmp 0xbe55f4
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
bt esi, esi
xadd si, si
xchg si, si
lea esi, [ebx + eax]
bt ax, 0x78
neg eax
sub ah, 0x3c
mov eax, dword [ebp + 0x10]
cmp esp, 0x12216088
push eax
cmp edx, ebp
ror eax, 0xb3
xor eax, 0x19167d73
sar esi, 1
mov eax, dword [edx + esi*4]
test ch, bl
jmp 0xb5a308
mov ecx, dword [ebp - 4]
movzx eax, dx
cmovne dx, bp
xchg edx, edx
mov edx, dword [ecx + edi + 0x24]
movsx cx, bl
lea eax, [edx + esi*2]
mov dx, ax
cdq
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0xae29c2
jae 0xb9e3ef
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0xc45f2e
mov edx, dword [edi + 0x3c]
test dx, sp
stc
cmc
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jne 0xb3ccb4
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
test eax, eax
je 0xb3ccb4
mov edx, dword [edx + 0x7c]
test ebp, ebp
push ebx
test edi, esi
clc
push esi
test bx, 0x247e
cmp di, ax
stc
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
stc
cmp ecx, 0xffff
jmp 0xc57819
jb 0xb79039
mov eax, dword [ebp + 8]
xchg cl, ch
lea ecx, [ebp - 0x114]
push ecx
jmp 0xabcce3
jb 0xb92eb1
lea eax, [ebp - 0x114]
jmp 0xb1f5f3
jbe 0xc2bd33
lea ebx, [ebp - 0x114]
sub ebx, eax
jmp 0xb79039
mov eax, dword [ebp + 0xc]
jmp 0xba51af
ja 0xa83919
sub ecx, dword [eax + edi + 0x10]
clc
cmp ecx, dword [eax + edi + 0x14]
jae 0xb9e3ef
mov edx, dword [eax + edi + 0x1c]
cmp esp, 0x6cb3224a
lea ecx, [edx + ecx*4]
clc
stc
mov ecx, dword [ecx + edi]
cmp si, bx
test ecx, ecx
jmp 0xb71fe0
mov esp, ebp
pop ebp
jmp 0xadfa79
lea ebx, [esi - 1]
stc
cmp dword [ebp + 8], ebx
jmp 0xa8e5a3
test cl, cl
jmp 0xaac3a0