Function at 0x1b4d9679
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ebx, dword [edi + eax]
push edi
push dword [ebp + 0xc]
push ebx
call fcn.1b4d748c
jae 0x1b4d8e81
cmp edx, ebx
jns 0x1b4d8e89
xor edi, 0
cmp eax, 3
jne 0x1b4d8ef8
add ebx, 4
mov cl, byte [esi + 1]
shr cl, 3
and cl, 7
jmp 0x1b4d8eac
jmp 0x1b4d8eb9
and ecx, 7
je 0x1b4d8fcd
push ebx
call fcn.1b4d73d4
mov dword [esp - 0x3a], ecx
push 0x5f
call fcn.1b4d8edd
lodsb al, byte [esi]
jne 0x1b4d8ee0
jnp 0x1b4d8e70
int1
salc
push edi
inc esp
sub eax, 0xc108c483
add esp, 8
shl eax, 2
add esp, 8
shl eax, 2
add ebx, eax
dec ecx
jne 0x1b4d8ec2
jmp 0x1b4d8fcd
push eax
call 0x1b4d8f10
xor al, byte [ebx - 0x2081c700]
sub al, 0xf5
mov bh, bl
sbb byte [ecx + 0x56], dh
xlatb
les ebp, [ebp - 0x3b7c8c1e]
or byte [ebx - 0x7af0fb08], al
mov cl, 0
add byte [eax], al
add ebx, 4
push eax
add eax, edx
mov eax, esp
cmp dword [eax - 0x3f], esi
pop eax
mov cl, byte [esi + 1]
shr cl, 6
and cl, 3
push 0x72391b48
call fcn.1b4d8f41
loope 0x1b4d8f43
invalid
or byte [ecx - 0x7f51db84], cl
stc
add ecx, dword [edi]
test dword [ecx], eax
add byte [eax], al
movzx ecx, byte [esi + 1]
js 0x1b4d8f5a
xor esi, 0
mov dword [esp - 0x5b], edi
and ecx, 0x3f
push 0x2544418d
call 0x1b4d8f6e
inc edx
push ebx
nop
add esp, 8
cmp ebx, eax
add ecx, 8
add edi, 0
add ecx, 0
shl ecx, 2
add ebx, ecx
jmp 0x1b4d8fcd
push ebx
call fcn.1b4d73d4
mov ecx, eax
mov edx, dword [ebp + 0xc]
xor edi, edi
push dword [ebp + 0x10]
push 0
push edi
mov edi, esp
push eax
lea eax, [edi - 0x2477b4b9]
mov eax, esp
mov dword [eax - 0x2a], ebx
pop eax
push ecx
or ecx, 0x36f77ee0
mov ecx, esp
or dword [ecx - 0x5b], eax
pop ecx
xchg dword [edi + 4], edx
or edx, 0x388d5c3f
or edx, 0xffffffff
not edx
sub edx, dword [edi + 4]
dec edx
not edx
pop edi
lea esp, [esp - 4]
xchg dword [esp], ebx
dec ebx
shr ebx, 0x13
jno 0x1b4d9020
test ecx, esi
jmp 0x1b4d9032
shr ebx, 0xd
push esi
lea esi, [eax]
mov esi, esp
add ebx, dword [esi + 4]
jmp 0x1b4d9053
mov esi, dword [esi]
push esi
call 0x1b4d9060
and dword [esi + 7], eax
xor al, 0x5d
add esp, 8
push edx
sub edx, edx
jne 0x1b8dece1
mov edx, esp
sub dword [edx - 0x33], edi
pop edx
add esp, 8
lea esp, [esp - 4]
call fcn.1b4d748c
cmp eax, 0xffffffff
jne 0x1b4d91b8
mov eax, 0xf3
cmp dword [edx + 0x54], 1
je 0x1b4d90b4
mov eax, 0xf2
cmp dword [edx + 0x54], 2
je 0x1b4d90b4
mov eax, 0x66
cmp dword [edx + 0x54], 3
jne 0x1b4d90bd
cmp dword [ebp - 8], eax
jne 0x1b4d91b8
test esi, edi
push esi
xor esi, esi
je 0x1b4d90d8
mul dword [ebp + ecx*8 - 0x7e]
xchg ebx, eax
ror cl, 1
into
out dx, eax
cld
test edx, ebx
or ebp, eax
add dword [esi + 0x7e29f48b], esp
call 0x7fc8143f
add dword [edi], ecx
test dword [ecx - 0x76000000], esi
inc esi
add eax, eax
call 0x7050b4f7
mov esi, esp
sub dword [esi - 0x18], edi
pop esi
cmp dword [edx + 0x64], 1
jne 0x1b4d9199
mov al, byte [esi + 1]
shr al, 6
and al, 3
push ebp
call 0x1b4d90fc
add dword [eax], 0x39
jle 0x1b4d90da
sub al, 0x83
les ecx, [eax]
and eax, 3
push eax
call fcn.1b4d8caa
test dword [edx + 0x68], eax
je 0x1b4d91b8
test dword [edx + 0x70], 0x100
jne 0x1b4d915e
xor dword [esp - 0x6c], esi
mov al, byte [esi + 1]
shr al, 3
jmp 0x1b4d9135
and al, 7
and eax, 7
sub esp, 0xa
mov dword [esp + 6], eax
add esp, 6
call fcn.1b4d8caa
push 0x1d
call 0x1b4d9152
xchg edx, eax
arpl word [ebx + 0x428508c4], ax
jo 0x1b4d9168
test byte [edx], bl
add byte [eax], al
xor ecx, 0
test dword [edx + 0x6c], 0x100
jne 0x1b4d9199
or dword [esp - 0x6d], esi
push eax
call 0x1b4d917d
push ecx
mov dh, 0xb7
and al, 0x8d
add esp, 8
mov al, byte [esi + 1]
and al, 7
and eax, 7
push eax
call fcn.1b4d8caa
cmp edi, ebx
test dword [edx + 0x6c], eax
je 0x1b4d91b8
cmp edi, 0
je 0x1b4d91b6
cmp dword [edx + 0x54], 0
je 0x1b4d91b8
cmp dword [edx + 0x54], 4
jae 0x1b4d91b8
mov edi, ebx
lea ebx, [ebx + 4]
dec ecx
jne 0x1b4d8fda
mov eax, 6
cmp edi, 0
je 0x1b4d973f
mov ebx, edi
push 0x45
call 0x1b4d91e8
lcall 0x54a7, 0x66c1a8cb
std
inc ebx
sar cl, 0x3e
lahf
in al, dx
add esp, 8
test esi, ebx
push dword [ebp + 0x10]
push edx
sub esp, 4
jno 0x1b4d91f8
or ebx, ebx
xor dword [esp], ebx
jne 0x1b4d91ff
and edx, edx
xor ebx, dword [esp]
cmp dword [esp - 0x14], esi
and dword [esp - 0x6e], edx
xor dword [esp], ebx
mov ebx, dword [esp]
call fcn.1b4d748c
cmp eax, 0xffffffff
jne 0x1b4d973f
inc esi
xor eax, eax
jo 0x1b4d9229
push es
xor eax, 0
jb 0x1b4d9231
add edx, 0
xor edi, edi
mov ecx, dword [edx + 4]
push ebx
call 0x1b4d9241
ja 0x1b4d9222
dec ebp
add dl, byte [ebx]
pop ebx
mov ebx, esp
xor dword [ebx - 0x56], edi
pop ebx
cmp dword [esp - 0x46], esi
cmp ecx, 0
je 0x1b4d9277
cmp byte [edi + edx + 8], 0x66
jne 0x1b4d9262
inc al
cmp byte [edi + edx + 8], 0x67
jne 0x1b4d926f
inc ah
inc edi
dec ecx
jne 0x1b4d9255
cmp dword [esp - 9], edx
jmp 0x1b4d9283
mov cl, ah
and eax, 1
and dword [esp - 0x3c], eax
push edi
or edi, 0x5576a47b
mov edi, esp
or dword [edi - 0x57], esi
pop edi
and ecx, 1
mov dword [edx + 0x1c], eax
mov dword [edx + 0x20], ecx
mov dword [edx + 0x30], 0xffffffff
mov dword [edx + 0x3c], 0xffffffff
push ebx
sub ebx, ebx
je 0x1b4d92c6
invalid
mov ebx, esp
or dword [ebx - 0x4a], eax
pop ebx
cmp dword [edx + 0x64], 1
jne 0x1b4d94f4
mov al, byte [esi]
mov byte [edx + 0x2d], al
mov al, byte [esi]
shr al, 6
and al, 3
and eax, 3
push ebx
shl ebx, 0x13
cmp ecx, eax
shl ebx, 0xd
xor ebx, edx
lea ebx, [ebx + 0x30]
add ebx, 0
mov dword [ebx], eax
pop ebx
mov al, byte [esi]
shr al, 3
and al, 7
mov dword [edx + 0x34], eax
mov al, byte [esi]
and al, 7
mov dword [edx + 0x38], eax
inc esi
cmp dword [edx + 0x30], 3
je 0x1b4d94f4
cmp dword [edx], 0x10
je 0x1b4d9473
test edi, esi
add esi, 0
cmp dword [edx + 0x20], 1
je 0x1b4d9488
cmp dword [edx + 0x38], 4
jne 0x1b4d93c7
jmp 0x1b4d934c
mov al, byte [esi]
mov byte [edx + 0x2e], al
mov al, byte [esi]
shr al, 6
jbe 0x1b4d935a
test ecx, eax
and al, 3
and eax, 3
push ebx
xchg ebx, edx
mov edx, ebx
add ebx, 0x3c
mov dword [ebx], eax
pop ebx
push ebp
call 0x1b4d937a
and dh, byte [ebx + 0xf6ee970]
pushfd
movsd dword es:[edi], dword [esi]
jp 0x1b4d93a5
add esp, 8
mov al, byte [esi]
shr al, 3
and al, 7
mov dword [edx + 0x40], eax
mov al, byte [esi]
and al, 7
mov dword [edx + 0x44], eax
inc esi
push 0xd59b3446
call 0x1b4d939b
pop es
xor al, 0x83
les ecx, [eax]
cmp dword [edx + 0x44], 5
jne 0x1b4d93c7
add byte [eax], al
add byte [ebx + 0xf00307a], al
test dword [0xb9000000], edx
add al, 0
add byte [eax], al
cmp dword [edx + 0x30], 0
jne 0x1b4d93c7
mov ecx, 4
mov eax, dword [esi]
jmp 0x1b4d93e9
mov dword [edx + 0x4c], 0
cmp dword [edx + 0x30], 0
je 0x1b4d9458
cmp dword [edx + 0x30], 1
je 0x1b4d942c
mov eax, dword [esi]
mov ecx, 4
push 0
push 0x331ed90a
call 0x1b4d93ff
jnp 0x1b4d938f
int1
salc
push edi
inc esp
sub eax, 0x83b0f362
les ecx, [eax]
push ebx
add ebx, 0x449e50dc
mov ebx, esp
and dword [ebx - 0x59], esi
pop ebx
xor dword [esp], ecx
pop dword [edx + 0x4c]
mov dword [edx + 0x50], eax
mov eax, esi
sub eax, dword [ebp + 8]
mov dword [edx + 0x48], eax
add esi, ecx
jmp 0x1b4d94f4
movzx eax, byte [esi]
xor ecx, ecx
jne 0x1b8df0ac
add ecx, 0x78f2c38a
push edx
xor edx, 0x10be1903
mov edx, esp
and dword [edx - 0x45], eax
pop edx
xor ecx, 0x78f2c38b
jmp 0x1b4d93e9
cmp dword [edx + 0x38], 5
je 0x1b4d93e2
jmp 0x1b4d94f4
jmp 0x1b4d947e
cmp dword [edx + 0x20], 1
je 0x1b4d9330
cmp dword [edx + 0x30], 0
je 0x1b4d94dc
push ebx
lea ebx, [esi]
mov ebx, esp
mov dword [ebx - 0x22], edx
pop ebx
cmp dword [edx + 0x30], 1
je 0x1b4d94be
movzx eax, word [esi]
mov ecx, 2
jmp 0x1b4d93e9
movzx eax, byte [esi]
or ecx, 0xffffffff
not ecx
add ecx, 1
jmp 0x1b4d93e9
cmp dword [edx + 0x38], 6
je 0x1b4d94a5
jmp 0x1b4d94f4
mov ecx, dword [edx + 0x80]
or ecx, ecx
je 0x1b4d9604
xor ebx, ebx
push ecx
mov dword [edx + ebx + 0xa4], 0
mov dword [edx + ebx + 0xa8], 0
mov dword [edx + ebx + 0xac], 0
mov dword [edx + ebx + 0xb0], 0
mov dword [edx + ebx + 0xb4], 0
test dword [edx + ebx + 0x88], 4
je 0x1b4d95f9
test dword [edx + ebx + 0x8c], 8
jne 0x1b4d95f9
jmp 0x1b4d9567
jmp 0x1b4d957e
test dword [edx + ebx + 0x8c], 1
jne 0x1b4d95b6
mov ecx, dword [edx + ebx + 0x98]
cmp dword [edx + 0x1c], 0
je 0x1b4d95c6
mov ecx, dword [edx + ebx + 0x9c]
jmp 0x1b4d95c6
mov ecx, dword [edx + 0x78]
cmp dword [edx + 0x20], 0
je 0x1b4d95c6
mov ecx, dword [edx + 0x7c]
lea edi, [edx + ebx + 0xa8]
shr ecx, 3
mov dword [edx + ebx + 0xa4], ecx
cmp ecx, 0
je 0x1b4d95f9
mov eax, esi
sub eax, dword [ebp + 8]
mov dword [edx + ebx + 0xa0], eax
mov al, byte [esi]
mov byte [edi], al
inc esi
inc edi
dec ecx
jne 0x1b4d95ec
add ebx, 0x3c
pop ecx
dec ecx
jne 0x1b4d9504
cmp dword [ebp - 4], 1
jne 0x1b4d9639
movzx eax, byte [esi]
shl eax, 2
add eax, 0x800
mov edi, dword [ebp + 0x10]
mov ebx, dword [edi + eax]
push edi
push dword [ebp + 0xc]
push ebx
call fcn.1b4d748c
inc esi
sub esi, dword [ebp + 8]
mov dword [edx + 0x24], esi
jmp 0x1b4d973f
sub esi, dword [ebp + 8]
mov dword [edx + 0x24], esi
mov dword [edx + 0x18], 0xffffffff
mov ecx, dword [edx + 4]
cmp ecx, 0
je 0x1b4d969b
xor eax, eax
and dword [esp - 0x50], ecx
lea esi, [edx + 8]
mov al, byte [esi]
lea edi, [edi]
sub edi, 0
push 0xd76bddb
call 0x1b4d9679
js 0x1b4d96c0
mov dh, 0xb7
and al, 0x8d
inc edx
push ebx
nop
mov dword [esi + 0x8c483af], ecx
cmp al, 0x26
jb 0x1b4d9693
cmp al, 0x65
ja 0x1b4d9693
push edx
lea edx, [edx + 0x18]
mov dword [edx], eax
pop edx
inc esi
dec ecx
jne 0x1b4d965b
mov ecx, dword [edx + 0x80]
or ecx, ecx
je 0x1b4d973a
push eax
not eax
mov eax, esp
cmp dword [eax - 0x41], ebx
pop eax
xor ebx, ebx
push ecx
test dword [edx + ebx + 0x8c], 1
jne 0x1b4d9709
mov ecx, dword [edx + ebx + 0x98]
jae 0x1b4d96d2
sub ecx, 0
lea esp, [esp - 0x59]
mov dword [esp + 0x55], 0xd7a5e9f
lea esp, [esp + 0x55]
xor dword [esp], 0xd7a5e9f
sub eax, dword [esp]
lea esp, [esp + 4]
cmp dword [edx + 0x1c], 0
je 0x1b4d9719
mov ecx, dword [edx + ebx + 0x9c]
jmp 0x1b4d9719
mov ecx, dword [edx + 0x78]
cmp dword [edx + 0x20], 0
je 0x1b4d9719
mov ecx, dword [edx + 0x7c]
mov dword [edx + ebx + 0x94], ecx
lea esp, [esp - 0x18]
xchg dword [esp + 0x18], ecx
mov dword [esp + 0x18], ecx
lea esp, [esp + 0x1c]
add ebx, 0x3c
dec ecx
jne 0x1b4d96b4
mov eax, 0xffffffff
call fcn.1b4c984c
xchg dword [esp], ebx
mov dword [esp], ebx
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
pop edx
xor dword [esp], esi
jmp 0x1b4d976f
div bh
xor esi, dword fs:[esp]
xor esi, dword [esp]
push 0xffffffffffffff93
call 0x1b4d978d
ror cl, 1
into
out dx, eax
cld
test edx, ebx
or ebp, eax
add dword [esi + 0x323d94e7], esp
add dword [eax], 0x39
jle 0x1b4d976c
add esp, 8
xor dword [esp], esi
push esp
call fcn.1b4d97a6
sti
sbb byte [ecx + 0x56], dh
xlatb
les ebp, [ebp - 0x56cf8c1e]
iretd