Function at 0x1771773
Capabilities:
Execute anti-debugging instructions
Parse pe header

Disassembly:
mov byte [esp + 0x1bf0], 6
test bl, 0x62
cmc
cmp sp, 0x6953
mov dword [esp + 0x8e4], esi
cmp edx, ebx
mov dword [esp + 0x8e0], edi
stc
mov byte [esp + 0x8d0], 0
test di, di
clc
cmp dword [esp + 0x5fc], ebx
jmp 0x5955b0
jb 0x187429f
mov eax, dword [esp + 0xb50]
jmp 0x1874295
call fcn.004062c0
lea ecx, [esp + 0x18c8]
jmp 0x187a0d8
jb 0x18d64c8
mov edx, dword [esp + 0x654]
jmp 0x740023
lea eax, [esp + 0xae0]
cmovno edx, ecx
mov dh, 0x9e
push eax
lea edx, [esp + 0x1674]
jmp 0x60b735
mov byte [esp + 0x18c5], 0x49
mov byte [esp + 0x18c6], 0x4e
jmp 0x18318d2
jb 0x732217
mov ecx, dword [esp + 0x604]
jmp 0x426599
mov dword [esp + 0x178c], esi
jmp 0x733a6e
call fcn.004062c0
lea ecx, [esp + 0x6bc]
jmp 0x18e6337
mov dword [esp + 0x804], 0
jmp 0x612239
mov eax, dword [esp + 0x18]
inc eax
cmp eax, dword [esp + 0x1c]
mov dword [esp + 0x18], eax
jl 0x17b7b94
lea esi, [esp + 0x44]
call fcn.004411a0
sub edi, edi
or ebx, 0x74520b31
cmp si, 0x309c
lea ebx, [edi + 0x10]
sbb cx, 0x4927
shrd si, cx, 9
xor eax, 0x5c71027e
lea esi, [edi + 0xf]
cmp esi, ecx
shld ecx, edi, 0x10
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
jmp 0x1780252
call fcn.004507e1
add esp, 4
lea esi, [esp + 0x2c]
mov dword [esp + 0x16a0], 0xf
jmp 0x7465fb
shr eax, 0x1f
cmc
jmp 0x1848c8c
ja 0x6196bc
jmp dword [eax*4 + 0x1833c44]
jl 0x739f58
mov byte [esp + 0x1a3c], 0x3c
or cl, 0xa6
mov byte [esp + 0x1a3d], 0x48
rcr dx, cl
btc edx, ecx
mov byte [esp + 0x1a3e], 0x59
bswap edx
rcl dl, cl
mov byte [esp + 0x1a3f], 0x50
shr dh, 0x9e
add ecx, esp
mov byte [esp + 0x1a40], 0x45
rcr cl, 0x19
bswap cx
mov byte [esp + 0x1a41], 0x52
shl cl, cl
mov byte [esp + 0x1a42], 0x5f
rcl dh, cl
sal ch, 0x50
rcr ch, 0xc9
mov byte [esp + 0x1a43], 0x4c
mov edx, ebp
sar ecx, cl
mov byte [esp + 0x1a44], 0x41
mov byte [esp + 0x1a45], 0x42
bt cx, 0x76
mov byte [esp + 0x1a46], 0x45
ror edx, cl
movzx ecx, di
xor dx, 0x9d5
mov byte [esp + 0x1a47], 0x4c
shl edx, cl
shrd ecx, ecx, 0x61
mov byte [esp + 0x1a48], 0x25
movzx dx, bh
stc
mov byte [esp + 0x1a49], 0x64
mov byte [esp + 0x1a4a], 0x3e
btc cx, dx
shr ecx, 0xf6
mov byte [esp + 0x1a4b], 0
xor eax, eax
dec cx
inc dx
movsx edx, dx
mov dword [esp + 0x20], 0xb34
bswap dx
lea esp, [esp]
mov ch, bh
cdq
inc eax
cwd
push eax
lea ecx, [esp + 0x1a40]
mov dl, 0xe7
push ecx
mov dx, 0x3df8
lea edx, [esp + 0x1bc8]
jmp 0x6dca5a
lea edx, [esp + 0x1674]
mov ecx, 0x11202c1a
lea ecx, [esp + 0x68c]
jmp 0x178d1c1
call fcn.0042d280
push 0xffffffffffffffff
push edi
movsx cx, bl
mov ecx, 0x6dc66d39
movsx ecx, di
push eax
mov cx, bx
lea ecx, [esp + 0x165c]
jmp 0x1777f36
cmp dword [esp + 0x70c], ebx
jb 0x721971
mov eax, dword [esp + 0x6f8]
jmp 0x1788ebe
mov byte [esp + 0x18bd], 0x53
jmp 0x17d0688
push edx
jmp 0x7686a5
lea ecx, [esp + 0x8d4]
jmp 0x6205fb
mov byte [esp + 0x7f4], 0
jae 0x61224e
lea eax, [esp + 0x168c]
mov edx, dword [esp + 0x169c]
inc ecx
mov ecx, dword [esp + 0x18]
jmp 0x17f0777
push ecx
movsx cx, cl
sets cl
lea ecx, [esp + 0x1658]
jmp 0x1806933
mov eax, dword [esp + 0x24]
jmp 0x75665a
mov byte [esp + 0x1bf8], 0x59
call fcn.0042d280
push 0xffffffffffffffff
mov cl, 0x6f
movsx cx, ch
push edi
jmp 0x1820dfe
push edx
jmp 0x17b0f80
call fcn.004062c0
lea ecx, [esp + 0x61c]
push ecx
setp dh
lea edx, [esp + 0xb18]
push edx
cdq
cwd
lea edx, [esp + 0x1674]
mov ch, cl
lea ecx, [esp + 0x608]
mov byte [esp + 0x1bf8], 0x62
call fcn.0042d280
push 0xffffffffffffffff
push edi
push eax
bswap ecx
lea ecx, [esp + 0x165c]
jmp 0x771d33
ja 0x5b40aa
jmp dword [eax*4 + 0x17660cc]
mov byte [esp + 0x1bfc], 0x5a
call fcn.004064b0
cmp dword [esp + 0xaf4], ebx
jmp 0x17e8bc5
call fcn.00444960
add esp, 8
jmp 0x17e1f55
je 0x6e78bd
push 0x511fac
not ch
lea ecx, [esp + 0x6f8]
jmp 0x17ee88c
mov dword [esp + 0x664], ebx
jmp 0x70db9f
mov byte [esp + 0x18c2], 0x52
jmp 0x17f8067
mov byte [esp + 0x1bf4], 0x58
call fcn.004062c0
lea edx, [esp + 0x5e4]
push edx
jmp 0x53f8cb
call fcn.004507e1
add esp, 4
cmc
test al, ch
mov dword [esp + 0xaf4], esi
test si, di
jmp 0x18a96a1
call fcn.004062c0
lea eax, [esp + 0x18c8]
setae ch
mov ch, 0x58
movzx ecx, di
push eax
lea ecx, [esp + 0x604]
jmp 0x1763ce3
call fcn.004064b0
mov byte [esp + 0x1bf0], 0x5e
cmp dword [esp + 0x808], 0x10
jb 0x182a362
mov ecx, dword [esp + 0x7f4]
push ecx
jmp 0x182a359
mov dword [esp + 0x2c], eax
jmp 0x64b42f
mov dword [esp + 0x1780], esi
bswap edx
setne dh
mov dword [esp + 0x177c], edi
movsx cx, dh
mov byte [esp + 0x176c], 0
cmovl edx, ebx
mov dh, 0x63
lea edx, [esp + 0x19a4]
bswap cx
push edx
movzx ecx, dx
jmp 0x426277
jae 0x6ecd27
lea eax, [esp + 0x176c]
mov ecx, dword [esp + 0x177c]
not dl
mov dh, 0xa3
mov edx, dword [esp + 0x10]
jmp 0x189240a
mov dword [esp + 0x808], 0xf
jmp 0x58f0fd
mov byte [esp + 0x1778], 0
jmp 0x18d487c
mov byte [esp + 0x654], bl
jmp 0x17b7b7b
jb 0x7686ae
mov edx, dword [esp + 0x6c0]
jmp 0x6032e2
call fcn.004507e1
lea esp, [esp + 4]
ror ah, cl
mov eax, dword [esp + 0x176c]
clc
mov dword [esp + 0x70c], esi
jmp 0x17e98fa
cmp dword [esp + 0x1780], ebx
jb 0x6e7898
mov ecx, dword [esp + 0x176c]
push ecx
jmp 0x745ccf
mov dword [esp + 0x14], ecx
jmp 0x5da42a
mov byte [esp + 0x1bf0], 6
clc
mov dword [esp + 0x618], esi
stc
clc
mov dword [esp + 0x614], edi
mov byte [esp + 0x604], 0
stc
test di, ax
jmp 0x1862214
mov dword [esp + 0x1788], edi
jmp 0x709652
inc eax
jmp 0x18f1865
call fcn.0044aa80
push 0xffffffffffffffff
push 0
push eax
bswap cx
movzx ecx, bp
cmova ecx, esi
lea ecx, [esp + 0x1694]
jmp 0x6d56e1
push edx
jmp 0x18d64bf
mov dword [esp + 0x20], ecx
jmp 0x185cc8c
lea ecx, [esp + 0x165c]
jmp 0x6463c2
call fcn.004507e1
add esp, 4
jmp 0x6e7898
mov dword [esp + 0x169c], 0
mov byte [esp + 0x168c], 0
jmp 0x768d4d
push ecx
jmp 0x69867b
inc eax
cmc
cmp eax, ebx
mov dword [esp + 0x24], eax
jmp 0x180a9b0
je 0x5b40ee
push 0x511994
lea ecx, [esp + 0x654]
call fcn.004062c0
lea eax, [esp + 0x650]
bswap cx
setge cl
push eax
mov ecx, 0x7646697e
lea ecx, [esp + 0x48]
jmp 0x6192d7
call fcn.004507e1
lea esp, [esp + 4]
mov dword [esp + 0x6d4], esi
clc
mov dword [esp + 0x6d0], edi
mov byte [esp + 0x6c0], 0
cmp ebp, edx
clc
cmp dword [esp + 0x1664], edi
jmp 0x658358
mov byte [esp + 0x1bf0], 6
call fcn.004411a0
xor edi, edi
xor al, 0xa6
lea ebx, [edi + 0x10]
or cx, sp
inc ecx
lea esi, [edi + 0xf]
cmp si, bp
rcr al, 0x3a
seto ch
mov ecx, dword [esp + 0x14]
add dword [esp + 0x20], 0x20
bswap eax
bts eax, esi
xor ax, cx
add dword [esp + 0x18], 0x104
mov eax, dword [esp + 0x1c]
stc
cmp cx, 0xcac
lea ecx, [ecx + 4]
clc
cmp ecx, 0xaf4
jmp 0x72ecca
mov byte [esp + 0x1bfc], 0x63
jmp 0x1790cd9
add eax, 0xbb4
push eax
call fcn.004718ab
lea esp, [esp + 0xc]
cmp ch, 0x7c
cmp bx, cx
jmp 0x72d9fc
push eax
jmp 0x5b4552
mov byte [esp + 0x1bf4], 0x61
jmp 0x628cc8
mov byte [esp + 0x18c0], 0x56
mov byte [esp + 0x18c1], 0x45
jmp 0x66297e
push ecx
jmp 0x776c09
push 0xc9fcb3f8
call fcn.018e74d4
cmc
cmp eax, 4
ja 0x177178c
call fcn.0046e39f
mov eax, dword [esp + 0x38]
btr si, bp
add eax, 0x70
xchg si, si
lea esi, [esp + 0x7f0]
jmp 0x73d58e
mov byte [esp + 0x1bfc], 0x67
jmp 0x1836334
lea ecx, [ecx + 4]
cmc
test si, 0x51ce
cmp ecx, 0xb54
jmp 0x740211
push eax
jmp 0x721966
mov byte [esp + 0x1bf8], 0x66
jmp 0x5f0b54
call fcn.004064b0
cmp dword [esp + 0xb2c], ebx
jb 0x1827124
mov eax, dword [esp + 0xb18]
jmp 0x18a3007
cmp dword [esp + 0x8e4], ebx
jb 0x40e68e
mov edx, dword [esp + 0x8d0]
jmp 0x40e685
call fcn.004507e1
add esp, 4
mov dword [esp + 0x634], esi
jmp 0x1812f8e
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ebx
jle 0x5b40bd
mov ebx, dword [esp + 0x10]
btr eax, edi
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
cmp al, al
cmp eax, 4
jmp 0x643fb6
lea edx, [esp + 0xb50]
xchg cl, ch
movzx cx, dl
push edx
jmp 0x5e2975
jb 0x5b455a
mov eax, dword [esp + 0x168c]
jmp 0x77873d
mov byte [esp + 0x18be], 0x45
mov byte [esp + 0x18bf], 0x52
jmp 0x176e31b
lea edx, [esp + 0x1bc0]
movsx ecx, si
push edx
not cl
setns cl
lea ecx, [esp + 0x620]
jmp 0x6c7d80
mov byte [esp + 0x1bf4], 0x65
jmp 0x57be0a
jb 0x698686
mov ecx, dword [esp + 0xae0]
jmp 0x752743
mov dword [esp + 0x708], edi
clc
cmp di, cx
mov byte [esp + 0x6f8], 0
cmc
cmp ebx, ecx
cmp dword [esp + 0x1780], ebx
jmp 0x6ecd1a
call fcn.004062c0
lea esi, [esp + 0x6f4]
cbw
lea eax, [esp + 0x1650]
mov byte [esp + 0x1bf0], 0x68
call fcn.0044aa80
push 0xffffffffffffffff
not si
push edi
xchg ecx, esi
movsx esi, sp
cmova cx, cx
mov esi, 0xf
movsx cx, bh
movzx cx, dh
push eax
not cx
lea ecx, [esp + 0x1774]
jmp 0x57bb3b
push eax
mov eax, edi
movzx eax, sp
mov eax, dword [edi + 0x84]
inc edx
push edx
mov edx, edx
lea edx, [ecx + eax + 0x2b4]
push edx
jmp 0x180a227
mov byte [esp + 0x18c3], 0x5f
mov byte [esp + 0x18c4], 0x57
jmp 0x568f1e
push ecx
jmp 0x18ae6c6
mov byte [esp + 0x1bf8], 0x64
call fcn.0044a8f0
add esp, 8
mov byte [esp + 0x1bf0], 6
jmp 0x180fe69
call fcn.004718ab
add esp, 0xc
movzx ecx, ax
xchg si, cx
mov ecx, dword [esp + 0x3c]
dec esi
bswap ax
mov esi, dword [esp + 0x38]
cmove eax, eax
cbw
jmp 0x6196bc
jl 0x1891de8
cmp dword [esp + 0x16a0], 0x10
jmp 0x17ced52
cmp dword [esp + 0x668], ebx
jmp 0x53e6db
mov dword [esp + 0x630], edi
stc
cmp esi, 0x6fa7237c
mov byte [esp + 0x620], 0
cmp dword [esp + 0x1664], edi
jmp 0x767053
push eax
jmp 0x7420ba
call fcn.004507e1
lea esp, [esp + 4]
stc
cmc
mov dword [esp + 0xb2c], esi
cmc
mov dword [esp + 0xb28], edi
mov byte [esp + 0xb18], 0
cmp dword [esp + 0x618], ebx
jmp 0x57b55f
call fcn.004507e1
lea esp, [esp + 4]
cmp dword [esp + 0x16a0], 0x10
mov eax, dword [esp + 0x168c]
jmp 0x6f66bb
mov byte [esp + 0x18c7], 0x3e
mov byte [esp + 0x18c8], 0
call fcn.004062c0
lea eax, [esp + 0x18b8]
push eax
not cx
lea ecx, [esp + 0x688]
jmp 0x17e6a6b
call fcn.004064b0
cmp dword [esp + 0xb64], ebx
jmp 0x5307af
add eax, edx
cmp eax, ebx
mov dword [esp + 0x668], 0xf
jmp 0x65d97c
mov byte [esp + 0x18bc], 0x3c
jmp 0x5f8029
jl 0x5da514
lea edx, [esp + 0x18e4]
not cx
cmova cx, si
movsx ecx, si
push edx
lea ecx, [esp + 0x6c0]
jmp 0x1850f0f
cmp dword [esp + 0x634], ebx
jmp 0x18a375c
push eax
call fcn.004507e1
lea esp, [esp + 4]
mov dword [esp + 0xb64], esi
test si, si
clc
mov dword [esp + 0xb60], edi
mov byte [esp + 0xb50], 0
cmp ebx, edi
cmp dword [esp + 0x69c], ebx
jb 0x18ae6d6
mov ecx, dword [esp + 0x688]
jmp 0x17fdb11
push ecx
xchg cl, ch
movzx ecx, cx
lea ecx, [esp + 0x8d0]
jmp 0x665b94
mov eax, dword [esp + 0x24]
test bl, 0xab
cmp eax, 4
jmp 0x5d8b78
push eax
mov eax, dword [edx + 0x84]
inc ecx
cmp sp, bx
jmp 0x176fd34
call fcn.00444960
add esp, 8
lea eax, [esp + 0x1bc0]
xchg cx, cx
not cx
mov ecx, 0x289055bd
push eax
movzx ecx, sp
lea ecx, [esp + 0x5e8]
jmp 0x537eee
push eax
jmp 0x1827119
jb 0x17b0f88
mov edx, dword [esp + 0x620]
jmp 0x622742
mov dword [esp + 0xaf0], edi
test edx, 0x60ce5c88
test edi, ebp
mov byte [esp + 0xae0], 0
clc
cmp si, 0x2a2e
jmp 0x17b0ae8
call fcn.004507e1
lea esp, [esp + 4]
test esi, 0x6c27760b
stc
mov byte [esp + 0x1bf0], 6
mov dword [esp + 0x69c], esi
mov dword [esp + 0x698], edi
clc
mov byte [esp + 0x688], 0
cmp dword [esp + 0x6d4], ebx
jmp 0x713cf7
call fcn.004064b0
mov ebx, 0x10
test esi, 0x2dbd26fa
cmc
mov byte [esp + 0x1bf0], 6
jmp 0x5f0d28
call fcn.004507e1
lea esp, [esp + 4]
mov ecx, dword [esp + 0x54]
shld eax, eax, 0x44
mov esi, dword [esp + 0x50]
mov edi, ecx
xadd al, ah
sub edi, esi
not dx
cmovle ax, si
mov eax, 0x92492493
movsx edx, si
adc edx, ebp
cdq
imul edi
cmovg eax, edi
stc
lea edx, [edx + edi]
sar edx, 4
mov eax, edx
cmp cl, 0x49
clc
sub ebx, ebx
jmp 0x5bfb91
push ecx
jmp 0x17baab6
push eax
lea edx, [esp + 0x19e0]
push edx
lea edx, [esp + 0x1bc8]
mov dword [esp + 0x24], eax
jmp 0x18a2c88