Function at 0x1790e5c
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jne 0x173e695
lea edx, [ebp - 0x114]
mov eax, esp
bswap ax
cbw
push edx
mov ah, dl
cbw
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
jmp 0x173e68b
mov ebx, dword [eax + edi + 0x18]
test cx, di
cmp di, sp
test ebx, ebx
jmp 0x182e9b3
ret
rol eax, cl
and esi, esp
cmovb si, bx
cmp si, sp
lea esi, [ebp + edx - 0x114]
clc
add al, dl
xor al, byte [ebx + esi]
jmp 0x186afb7
ja 0x172d1b2
movsx ecx, cl
test si, 0x24b3
stc
lea edx, [edx + edx*4]
test bp, bx
stc
lea edx, [ecx + edx*2 - 0x30]
sbb cl, al
mov cl, byte [esi]
cmp bh, 0xe0
test ecx, ecx
test cl, cl
jne 0x18ae9b0
push 0
jmp 0x18f17da
push eax
jmp 0x18e8bff
je 0x17e69f9
mov ebx, dword [ebp + 0xc]
rcl eax, 0xb
add si, si
movzx esi, di
lea eax, [ebp - 0x114]
cmp eax, ebp
xor edx, edx
shl si, 0x50
and cl, 0x90
sub ebx, eax
mov edi, edi
mov cl, cl
mov eax, 0x7a726821
not cl
mov cl, dl
jmp 0x17266e3
je 0x1745f25
inc edx
test dl, 0x6a
cmp edx, 0x104
jmp 0x1745f1f
mov esp, ebp
pop ebp
ret
call eax
test eax, eax
je 0x1854787
cmp eax, edi
jmp 0x177b4d1
jb 0x172e585
lea eax, [ebp - 0x114]
push eax
push edi
mov al, 0xb5
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x17bf329
jle 0x179608d
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
jmp 0x17f18d4
ret
ret
jbe 0x17d68e8
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0x1865aeb
push ecx
jmp 0x172de26
ret
pop edi
jmp 0x181cc69
ret
call eax
test eax, eax
jmp 0x1716506
ret
mov esp, ebp
pop ebp
jmp 0x1748d75
jne 0x186db06
cmp byte [ebp + 0x10], 0
jmp 0x172e55c
push eax
jmp 0x18c77d9
mov ecx, dword [ebp - 4]
rdtsc
mov ax, dx
xchg dx, ax
mov edx, dword [ecx + edi + 0x24]
mov ax, di
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
movsx edx, cx
not dh
jmp 0x17b53b0
push ebp
mov ebp, esp
test dh, 0xb
sub esp, 0x114
cmc
jmp 0x18a1642
je 0x186c7e8
mov cl, byte [esi + 1]
jmp 0x182ecdb
mov ecx, dword [ebp + 0xc]
cmp ebx, 0x4093409b
adc ah, 0xf5
dec ah
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
movzx esi, cx
lea esi, [ebx + eax]
neg ah
adc ax, bp
bsr ax, cx
mov eax, dword [ebp + 0x10]
test ebp, 0x2bf57101
cmp bp, bp
jmp 0x18ec717
ret
mov byte [ebp + eax - 0x114], 0
cmovs ax, ax
mov ah, 0x7d
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x1768ecd
inc esi
jmp 0x183d472
lea edx, [ebx + 1]
jmp 0x18a7af4
jae 0x18f0fc0
lea eax, [ecx + edi]
movsx esi, cx
mov cl, byte [eax]
btr si, 8
sub esi, 0x54ff106a
mov esi, eax
test si, sp
cmp ecx, esi
test cl, cl
je 0x1854787
mov edi, edi
cmp cl, 0x2e
jmp 0x1793ff3
lea esi, [esi + 2]
test ebx, 0x2272617
xor edx, edx
cmc
test dx, si
test cl, cl
jmp 0x18ae9aa
call eax
pop esi
movsx edi, cx
pop ebx
cmovns edi, edx
movzx edi, bx
xchg di, di
pop edi
jmp 0x17ee748
cmp ecx, 0x104
jmp 0x1854445
jb 0x1753c6b
mov eax, dword [ebp + 8]
movzx ecx, bx
xchg ch, ch
lea ecx, [ebp - 0x114]
jmp 0x18f06b0
jae 0x1854787
mov ecx, dword [eax + edi + 0x1c]
not dl
sub dh, 0xfa
movsx edx, sp
lea edx, [ecx + esi*4]
ror cx, cl
mov ecx, dword [edx + edi]
cmp esi, esi
test ecx, ecx
jmp 0x18dc35d
test eax, eax
je 0x187a940
mov edx, dword [edx + 0x7c]
cmp ebp, 0x2d6d172f
clc
push ebx
cmc
test eax, 0x380d2a41
push esi
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp si, sp
jmp 0x1813c94
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0x171b235
je 0x178af97
cmp eax, 1
jmp 0x18a6284
mov edx, dword [edi + 0x3c]
clc
test ah, 0x1e
lea edx, [edx + edi]
cmp bl, 0x9d
stc
cmp bx, di
cmp dword [edx], 0x4550
jmp 0x18d186b
je 0x18e2567
test eax, eax
jmp 0x17dcb09
mov eax, dword [ebp + 0xc]
jmp 0x18e6e10
inc eax
mov dword [ebp + 8], edx
clc
test dh, 0x56
cmp edx, ecx
jmp 0x17d68e2
mov cl, byte [esi + 2]
jmp 0x17ba70d
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0x17613eb
cmp esi, dword [eax + edi + 0x14]
jmp 0x17d6c4d
je 0x17eb63c
push 0
jmp 0x1755b83
je 0x187a940
mov eax, 0x5a4d
test ax, bp
cmp word [edi], ax
jmp 0x187a93a
cmp ecx, 0xffff
ja 0x1719b60
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jae 0x1854787
mov edx, dword [eax + edi + 0x1c]
cmp ah, 0x70
jmp 0x18be69d
mov esp, ebp
movzx ebp, ax
pop ebp
jmp 0x179c72d
je 0x187a940
mov ecx, dword [ebp + 0xc]
test sp, 0x251f
cmp ebx, 0x6e29290c
stc
test ecx, ecx
jmp 0x1810481
je 0x17f18d4
mov edx, dword [eax + edi + 0x20]
dec ebx
cmp eax, ebp
add edx, edi
mov dword [ebp + 8], 0
clc
mov dword [ebp - 0xc], edx
cmp eax, ebp
test bp, cx
test ebx, ebx
jmp 0x185e539
inc esi
cmp sp, bp
clc
jmp 0x183fa76
mov esp, ebp
mov ebp, 0x74673220
bswap bp
movsx ebp, ax
pop ebp
jmp 0x174f11b
cmp bl, 9
jmp 0x172d187
test cl, cl
jmp 0x1854781
pop edi
jmp 0x18f04fc
jae 0x1854787
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0x1753c5d
jne 0x17ba568
pop esi
sbb edi, 0x241517a0
pop ebx
sub eax, eax
pop edi
jmp 0x17dbb45
jl 0x17f18d4
jmp 0x179609e
je 0x17d68e8
mov byte [ebx + eax], dl
cmovp dx, di
mov edx, dword [ebp + 8]
inc edx
jmp 0x17e760c
mov byte [esi], al
jmp 0x1733b96
mov ecx, esi
clc
cmp dx, 0x3ba1
sub ecx, eax
jmp 0x17c600a
cmp byte [esi + 1], 0x23
mov ch, 0xd3
not ecx
lea ecx, [esi + 1]
jmp 0x1801bca
je 0x17dd257
xor eax, eax
mov di, di
cmovne edi, edx
pop edi
jmp 0x1832c76
mov dword [ebp + 8], edx
jmp 0x18e256b
push edi
mov edi, dword [ebp + 8]
stc
cmp ax, si
test edi, edi
jmp 0x18213ee
jne 0x18e256b
inc esi
jmp 0x18c99fe
mov dword [ebp - 8], ecx
jmp 0x188d799
je 0x172d1b2
mov bl, cl
sub bl, 0x30
jmp 0x17b2a24
mov esp, ebp
pop ebp
jmp 0x176ba39
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
test ecx, 0x19833e11
clc
test ecx, ecx
jne 0x18dc363
pop esi
and edi, edi
bsr edi, eax
pop ebx
test ax, 0x6992
sub eax, eax
bswap edi
xchg di, di
pop edi
jmp 0x173604a
call fcn.01790e5c
add esp, 0xc
pop esi
xchg edi, ebx
pop ebx
jmp 0x176657e
push edi
jmp 0x18f0ade
mov dword [ebp + 8], esi
jmp 0x18e256b
jb 0x18f0fc0
mov edx, dword [ebp - 0x10]
cmp cl, bh
cmp edi, 0x23245f59
test ebx, 0x370825d0
add edx, eax
cmp ecx, edx
jmp 0x17ba53e
jne 0x187a940
mov eax, dword [edx + 0x78]
test bl, 0xd1
stc
mov dword [ebp - 4], eax
jmp 0x17da051
je 0x1854787
cmp ecx, eax
jmp 0x18cd238
lea ebx, [esi - 1]
cmc
cmp dword [ebp + 8], ebx
jmp 0x17472bf
push eax
jmp 0x18c78bc
call fcn.01790e5c
add esp, 0xc
xchg bx, di
bswap esi
pop esi
bswap ebx
pop ebx
pop edi
jmp 0x18b191c
push eax
sar esi, 1
cbw
sal ax, 0x1f
movzx ax, cl
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.018156b6
add esp, 4
cmp eax, 0xffffffff
jmp 0x17e4ee8
mov esp, ebp
pop ebp
jmp 0x1766a5b
push ecx
jmp 0x17a20ac
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
call eax
pop esi
pop ebx
bswap di
jmp 0x1840ff9
pop esi
xchg ebx, ebx
movzx ax, ch
lahf
pop ebx
lea eax, [ecx + edi]
cmovge di, bx
mov di, 0x5670
bswap edi
pop edi
jmp 0x176c33b
push edx
jmp 0x177f966