Function at 0x178e1b6
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
je 0x120eec6
mov edx, dword [eax + edi + 0x20]
jmp 0x1c21865
ret
ret
pop esi
bswap bx
xchg al, bl
pop ebx
lea eax, [ecx + edi]
pop edi
jmp 0x1c02576
push eax
call fcn.0178e1b6
add esp, 0xc
pop esi
movsx bx, bh
movzx edi, ax
pop ebx
pop edi
mov esp, ebp
mov bp, 0x3240
movzx ebp, bp
pop ebp
jmp 0x11f695f
ret
je 0x120a9eb
mov cl, byte [esi + 1]
jmp 0x17ae241
cmp eax, 0xffffffff
jmp 0x1be969b
mov ebx, dword [eax + edi + 0x18]
cmc
test ebx, ebx
jmp 0x113d799
call eax
test eax, eax
jmp 0x17b2d30
je 0x179b6d0
mov ecx, dword [ebp + 0xc]
jmp 0x1ba38b1
jae 0x1b55b37
mov ecx, dword [eax + edi + 0x1c]
sar dh, cl
bts dx, sp
lea edx, [ecx + esi*4]
cmc
mov ecx, dword [edx + edi]
cmp ebx, 0x1a3d10d1
test ecx, ecx
jmp 0x17f3794
mov dword [ebp + 8], esi
jmp 0x1c2b723
jne 0x17f379a
pop esi
cmovae di, di
pop ebx
sub eax, eax
xchg edi, edi
mov edi, esp
cmovle edi, ebx
pop edi
jmp 0x1bcfba6
ret
ret
mov esp, ebp
bswap ebp
pop ebp
jmp 0x1790ee3
je 0x17d19b6
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
sub edx, edx
xor esi, edx
btr esi, 0xa7
sub ebx, eax
mov edi, edi
btr eax, esi
rol cl, 0xf6
mov eax, 0x63b8529a
mov cl, dl
bswap si
rol eax, cl
lea esi, [ebp + edx - 0x114]
stc
jmp 0x1baa3f9
mov ecx, esi
cmp cl, 0xe4
sub ecx, eax
cmp di, 0x5e7e
cmp bx, sp
cmp ecx, 0x104
jae 0x1b55b37
mov dword [ebp + 8], 0
cmp dh, 0x1b
test ecx, ecx
jbe 0x1bd6f02
lea ebx, [ebp - 0x114]
sub ebx, eax
cmc
mov dl, byte [eax]
test dl, dl
je 0x1bd6f02
mov byte [ebx + eax], dl
cwd
setno dh
mov edx, dword [ebp + 8]
inc edx
jmp 0x1bd6eee
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x1b61244
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0x11eed34
mov cl, byte [esi + 2]
cmp si, cx
test bp, bx
lea esi, [esi + 2]
stc
xor edx, edx
test cl, cl
je 0x1b9116e
mov bl, cl
test cx, si
stc
sub bl, 0x30
jmp 0x1c68dcf
ret
jne 0x179b6d0
mov eax, dword [edx + 0x78]
cmc
test sp, 0x47ab
mov dword [ebp - 4], eax
test dl, 0xc
cmp ebp, ebx
cmc
test eax, eax
jmp 0x1bebfbc
jle 0x17ecfd0
mov eax, dword [ebp - 4]
jmp 0x120eec3
push ebp
mov ebp, esp
lea esp, [esp - 0x114]
clc
stc
cmp sp, di
push edi
test cx, si
bswap edi
add di, 0x2778
mov edi, dword [ebp + 8]
stc
test edi, edi
jmp 0x11e9640
mov esp, ebp
pop ebp
jmp 0x177cf7f
je 0x1b55b37
cmp eax, edi
jne 0x17dcf53
cmp byte [ebp + 0x10], 0
jmp 0x1205c28
je 0x179b6d0
mov eax, 0x5a4d
test bp, sp
clc
cmp word [edi], ax
jmp 0x179b6ca
ret
mov edx, dword [edi + 0x3c]
stc
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jmp 0x177ecf1
push eax
call fcn.0178e1b6
add esp, 0xc
pop esi
jmp 0x1beef85
je 0x179632d
sub eax, eax
pop edi
jmp 0x17d236c
pop ebp
jmp 0x1148793
inc esi
cmc
clc
test cl, cl
jmp 0x1b55b31
jne 0x178eca9
lea edx, [ebp - 0x114]
lahf
cbw
push edx
mov eax, 0x1f2140fb
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
jmp 0x17f1cb4
mov eax, dword [ebp + 0xc]
push eax
push edi
movsx eax, dx
lahf
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x17f8974
mov esp, ebp
mov ebp, 0xac7b6d
pop ebp
jmp 0x113dcf1
cmp byte [esi + 1], 0x23
jmp 0x17e7a37
lea ecx, [esi + 1]
je 0x177cc85
push 0
jmp 0x1c24506
mov ecx, dword [ebp + 0xc]
cwd
mov edx, dword [ebp - 0xc]
bts eax, esi
mov eax, dword [ebp + 8]
movsx esi, sp
lea esi, [ebx + eax]
xadd eax, eax
sal al, cl
mov eax, dword [ebp + 0x10]
stc
push eax
sar esi, 1
nop
mov eax, dword [edx + esi*4]
cmp ebx, 0x1a72726f
add eax, edi
call fcn.0179b4ab
lea esp, [esp + 4]
cmc
jmp 0x1155eb0
call eax
test eax, eax
jmp 0x178eca3
je 0x1b55b37
cmp ecx, eax
jmp 0x1bdb72a
call eax
pop esi
pop ebx
pop edi
jmp 0x11f98fe
jne 0x1b9e8b1
pop esi
sub di, sp
pop ebx
xor eax, eax
cmove di, si
pop edi
jmp 0x178e8b0
mov ecx, dword [ebp - 4]
movsx edx, ax
lahf
movsx ax, al
mov edx, dword [ecx + edi + 0x24]
setno ch
nop
lea eax, [edx + esi*2]
jmp 0x1bb5f29
jl 0x120eec6
jmp 0x17ecfdb
call eax
pop esi
not edi
pop ebx
movsx edi, di
pop edi
mov esp, ebp
jmp 0x179db4a
jae 0x1b55b37
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
cmp ecx, esp
test si, 0x3466
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0x11f4c67
ja 0x1b9116e
movsx ecx, cl
test ebp, esp
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
ror cl, 6
mov cl, byte [esi]
test cl, cl
jne 0x177cc9c
push 0
push edx
jmp 0x17987db
jae 0x1140e7e
lea eax, [ecx + edi]
bt si, sp
mov cl, byte [eax]
btc si, 0x3a
btr esi, 0x70
mov esi, eax
cmc
test cl, cl
je 0x1b55b37
mov edi, edi
test ch, 0xa9
cmp cl, 0x2e
jmp 0x114c1e7
test ecx, ecx
jmp 0x178f5ea
add al, dl
xor al, byte [ebx + esi]
mov byte [esi], al
je 0x1bdd231
inc edx
cmp edx, 0x104
jmp 0x1bdd22b
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0x1c2171b
jmp 0x1bcb016
lea ebx, [esi - 1]
test ebp, 0x4823175f
cmp esi, 0x44b03ec4
cmc
cmp dword [ebp + 8], ebx
jmp 0x1782ddc
mov esp, ebp
cmovg ebp, eax
pop ebp
jmp 0x11f632f
push eax
push edi
movzx ax, al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x1b7ed55
inc eax
cmp edx, ecx
test esi, esi
stc
mov dword [ebp + 8], edx
test bx, sp
cmp edx, ecx
jb 0x120aa21
mov eax, dword [ebp + 8]
mov ch, 0x7d
movzx ecx, si
jmp 0x1bddca5
jb 0x1140e7e
mov edx, dword [ebp - 0x10]
test esi, esi
lea edx, [edx + eax]
test eax, 0x17f4384a
cmp ecx, edx
jmp 0x1b9e889
jb 0x1205c49
lea eax, [ebp - 0x114]
jmp 0x1bd0c8f
lea ecx, [ebp - 0x114]
push ecx
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x115f790
je 0x1bcb006
test eax, eax
jmp 0x1c0650a
je 0x179b6d0
mov edx, dword [edx + 0x7c]
push ebx
cmp si, 0x1378
push esi
test ebx, esi
or esi, 0xffffffff
cmp si, 0xb20
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp ecx, 0xffff
ja 0x1156932
sub ecx, dword [eax + edi + 0x10]
clc
cmp ecx, dword [eax + edi + 0x14]
jmp 0x1b81c48
pop ebx
bswap edi
pop edi
jmp 0x1c0702e
mov esp, ebp
movsx ebp, sp
pop ebp
jmp 0x113a011
je 0x1b5e6cc
cmp eax, 1
jmp 0x1c34b45
mov esp, ebp
pop ebp
jmp 0x113e9fd
mov dword [ebp - 8], ecx
jmp 0x1c6d457
dec ebx
cmc
add edx, edi
mov dword [ebp + 8], 0
jmp 0x120df31
push ecx
jmp 0x114645c
jmp 0x1bcb016
jne 0x1bcb016
inc esi
jmp 0x11f2eef
inc esi
stc
cmp esp, 0x1c15671c
cmp bl, 9
jmp 0x1b9114f
mov dword [ebp + 8], edx
jmp 0x1bbae49