Function at 0x185af87
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0x235ee94
mov edx, dword [edx + 0x7c]
test esi, edi
push ebx
push esi
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
clc
cmp dx, 0x412d
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0x20c2c18
inc edx
inc eax
cmc
stc
cmp edx, 0x6c35cf6
mov dword [ebp + 8], edx
cmc
cmp edx, ecx
jb 0x20c2ef0
mov eax, dword [ebp + 8]
setno cl
cmove cx, si
lea ecx, [ebp - 0x114]
jmp 0x185198a
push eax
movsx ax, cl
cwde
push edi
movzx ax, al
movsx ax, al
not ah
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1946c19
pop edi
mov esp, ebp
bswap ebp
jmp 0x235eeb1
jmp 0x1956420
ret
add eax, edi
jmp 0x18572f5
ret
mov edx, dword [edi + 0x3c]
cmp bp, si
lea edx, [edx + edi]
clc
cmp dx, si
cmp dword [edx], 0x4550
jne 0x235ee94
mov eax, dword [edx + 0x78]
cmc
mov dword [ebp - 4], eax
test eax, eax
jmp 0x18475a0
test cl, cl
je 0x209d944
mov bl, cl
clc
sub bl, 0x30
jmp 0x185228f
ret
ret
ret
push ecx
push eax
call fcn.0185af87
add esp, 0xc
movzx edi, ax
movsx esi, dx
xchg bh, bh
pop esi
jmp 0x20ce89f
push ecx
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
test eax, eax
jne 0x20a1d57
lea edx, [ebp - 0x114]
cmovne eax, esi
mov ax, 0x5de3
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x18585a5
inc esi
cmc
cmp ch, bl
test bp, ax
cmp bl, 9
jmp 0x209d91f
mov ecx, dword [ebp + 0xc]
xadd dx, si
mov edx, dword [ebp - 0xc]
btc si, 0xbf
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
rcl al, 0x18
mov eax, dword [ebp + 0x10]
push eax
rcr al, cl
sar esi, 1
shld eax, esp, 0xe9
movsx eax, ax
rol al, 0xaf
mov eax, dword [edx + esi*4]
jmp 0x184c9c5
je 0x18582cb
cmp eax, 1
jne 0x1956420
inc esi
jmp 0x2365f7b
jl 0x20a1969
jmp 0x185269d
call fcn.020a7a25
lea esp, [esp + 4]
jmp 0x20aedfe
pop esi
pop ebx
movsx eax, ax
bswap eax
lea eax, [ecx + edi]
pop edi
jmp 0x1947552
mov ecx, dword [ebp - 4]
xchg dl, dh
lahf
cbw
mov edx, dword [ecx + edi + 0x24]
mov eax, 0x2bbb5291
lea eax, [edx + esi*2]
not cl
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0x194783e
call eax
test eax, eax
jmp 0x20a1d51
jmp 0x1956420
mov esp, ebp
pop ebp
jmp 0x20a93a3
je 0x235ee94
mov ecx, dword [ebp + 0xc]
stc
clc
test ecx, ecx
je 0x235ee94
mov eax, 0x5a4d
cmp bx, di
stc
cmp word [edi], ax
jmp 0x235ee8e
push ebp
mov ebp, esp
cmp ax, cx
test sp, 0x731c
lea esp, [esp - 0x114]
cmc
stc
push edi
sbb di, 0x731d
or edi, esp
mov edi, dword [ebp + 8]
cmp dx, bx
test edi, edi
jmp 0x185a905
call eax
pop esi
pop ebx
pop edi
mov esp, ebp
mov ebp, 0x68b63c39
mov bp, di
pop ebp
jmp 0x1850c3f
je 0x20a3352
cmp ecx, eax
jmp 0x20c059a
mov esp, ebp
jmp 0x236ad3d
mov dword [ebp - 8], ecx
jmp 0x20bcf53
lea ebx, [esi - 1]
jmp 0x1956420
cmp dword [ebp + 8], ebx
jmp 0x20a1950
mov ecx, esi
sub ecx, eax
cmp sp, bp
clc
cmp ecx, 0x104
jae 0x20a3352
mov dword [ebp + 8], 0
test ax, cx
cmc
test ecx, ecx
jmp 0x20c2ee2
ja 0x209d944
movsx ecx, cl
test bx, 0x575d
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
dec cl
not cl
mov cl, byte [esi]
test ecx, edi
test cl, cl
jne 0x184e6dc
push 0
jmp 0x23647dd
jle 0x185268e
mov eax, dword [ebp - 4]
shr si, 0x28
shrd si, sp, 0x6f
mov esi, dword [ebp - 8]
test bx, sp
cmc
cmp esi, dword [eax + edi + 0x14]
jmp 0x235f690
je 0x20a3352
cmp eax, edi
jmp 0x20a41e3
jne 0x235d771
pop esi
bt edi, ebp
pop ebx
or edi, ebp
xor eax, eax
pop edi
jmp 0x185a8cf
jne 0x2365326
cmp byte [ebp + 0x10], 0
je 0x20b35c5
mov ebx, dword [ebp + 0xc]
sbb cl, bl
lea eax, [ebp - 0x114]
xor edx, edx
rol si, 6
sub ebx, eax
movsx ax, bh
rcr cl, cl
mov edi, edi
ror cl, 0xb7
rcr eax, cl
lahf
mov eax, 0x16061b37
mov cl, dl
rol si, 0x44
bswap esi
rol eax, cl
lea esi, [ebp + edx - 0x114]
test eax, 0x29fd7708
cmp ecx, 0x1dc15c21
add al, dl
cmp bp, bx
cmc
xor al, byte [ebx + esi]
mov byte [esi], al
jmp 0x2362ace
mov ebx, dword [eax + edi + 0x18]
test esp, edx
test ebx, ebx
jmp 0x236ad75
ret
ret
cmp eax, 0xffffffff
je 0x1948eb8
test eax, eax
jmp 0x18535ad
jae 0x1857dcf
lea eax, [ecx + edi]
mov cl, byte [eax]
mov esi, eax
cmc
cmp ch, 0x94
test cl, cl
jmp 0x235d769
mov eax, dword [ebp + 0xc]
jmp 0x20c0016
mov esp, ebp
mov ebp, 0x1edf5c55
pop ebp
jmp 0x184ea3d
mov dword [ebp + 8], edx
jmp 0x184b44c
push eax
jmp 0x236da6d
call eax
pop esi
movsx ebx, ax
pop ebx
mov di, 0x3318
pop edi
jmp 0x20b38b7
push eax
push edi
movsx eax, di
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x20bf4ec
jb 0x1857dcf
mov edx, dword [ebp - 0x10]
test ebx, edi
test ch, 0xaa
lea edx, [edx + eax]
test esi, eax
cmp ecx, edx
jmp 0x20b0b34
pop ebp
jmp 0x20a4915
ret
ja 0x20a4687
sub ecx, dword [eax + edi + 0x10]
clc
cmp ecx, dword [eax + edi + 0x14]
jae 0x20a3352
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
cmc
stc
clc
mov ecx, dword [ecx + edi]
cmc
test ecx, ecx
jmp 0x2367b76
jbe 0x184814b
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
cmc
clc
test dl, dl
jmp 0x236ac10
mov esp, ebp
bswap bp
pop ebp
jmp 0x20c1de9
mov cl, byte [esi + 2]
cmc
lea esi, [esi + 2]
clc
sub edx, edx
jmp 0x184e6d4
inc esi
stc
test bh, 0x79
test cl, cl
jmp 0x20a334c
pop ebx
pop edi
mov esp, ebp
movzx ebp, cx
mov ebp, 0x75b34e5d
jmp 0x20c0efc
je 0x20a3352
mov edi, edi
cmp cl, 0x2e
je 0x1956d6c
mov cl, byte [esi + 1]
jmp 0x20ce361
je 0x184e0de
sub eax, eax
pop edi
jmp 0x20ca2f7
pop ebp
jmp 0x184ba79
jae 0x20a3352
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
test si, dx
xchg ch, cl
mov ecx, dword [edx + edi]
test cx, sp
test ecx, ecx
jmp 0x1946f2b
je 0x2362ae5
inc edx
clc
cmp eax, edi
stc
cmp edx, 0x104
jb 0x20a4214
lea eax, [ebp - 0x114]
jmp 0x1848668
push edx
jmp 0x20bd3ca
cmp byte [esi + 1], 0x23
not ch
movzx ecx, si
jmp 0x236ffef
mov dword [ebp + 8], esi
jmp 0x1858cd9
jne 0x1946f31
pop esi
shrd di, sp, 0xba
pop ebx
btr edi, edx
sbb di, di
xor eax, eax
mov di, 0x1a6d
pop edi
mov esp, ebp
xchg bp, bp
not bp
pop ebp
jmp 0x184e76b
dec ebx
add edx, edi
mov dword [ebp + 8], 0
stc
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x1856f4b
je 0x184814b
mov byte [ebx + eax], dl
setae dl
mov dx, dx
mov edx, dword [ebp + 8]
jmp 0x1848135
pop ebp
jmp 0x184d0ad
je 0x20a1969
mov edx, dword [eax + edi + 0x20]
jmp 0x236939b
call fcn.0185af87
add esp, 0xc
mov esi, 0x2e6f2ce9
pop esi
mov bh, bl
not bl
pop ebx
jmp 0x184af36
lea ecx, [esi + 1]
je 0x20ca8ad
push 0
jmp 0x1851575