Function at 0x1b816fa
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jne 0x1b79bdf
cmp byte [ebp + 0x10], 0
jmp 0x1b84d3d
pop ebp
jmp 0x1757077
pop edi
xadd ebx, esi
mov esi, ebx
pop ebx
add eax, ecx
pop esi
jmp 0x1afc947
mov eax, dword [ebp - 0xc]
adc si, si
mov dh, 0xdf
ror edx, cl
mov edx, dword [ebp + 0x10]
lea esi, [edi + ebx]
sar esi, 1
stc
mov eax, dword [eax + esi*4]
push edx
clc
ror dl, 0x87
mov edx, dword [ebp + 0xc]
cmc
add eax, ecx
jmp 0x17c2570
je 0x112529b
push 0
jmp 0x1a96619
je 0x179e19e
xor eax, eax
not esi
pop esi
jmp 0x1b4fd58
jns 0x178d310
lea edi, [esi - 1]
jmp 0x17d5f96
mov cl, byte [esi + 2]
test ch, dl
clc
jmp 0x1b168a0
sub ecx, eax
cmp ecx, 0x104
jmp 0x1a6ba71
je 0x178d2f1
cmp eax, edx
jb 0x10c6ae3
mov esi, dword [ebp - 0x10]
add esi, edx
cmp bp, 0x552f
cmc
cmp eax, esi
jmp 0x1b363ca
je 0x1b44de5
mov eax, dword [edx + ecx + 0x20]
cmp si, cx
cmc
stc
add eax, ecx
cmc
xor ebx, ebx
jmp 0x177892e
inc eax
cmp bh, bl
stc
cmp edi, ecx
jmp 0x1bb61f8
je 0x1acd509
lea eax, [ecx - 0x30]
jmp 0x17a910f
call fcn.01b816fa
add esp, 0xc
movzx edi, si
cmovl esi, ebx
mov edi, ecx
pop edi
xchg esi, esi
jmp 0x17ddc7f
push eax
push edx
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1b36919
ret
push edi
jmp 0x17472cc
jb 0x1b84d6a
lea eax, [ebp - 0x114]
push eax
movzx ax, bh
cbw
push edx
not ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
xchg bl, bh
pop ebx
movsx esi, bp
bswap si
not si
pop esi
mov esp, ebp
jmp 0x10c560c
call eax
mov edi, eax
test edi, edi
jmp 0x1b79df4
mov byte [esi], cl
je 0x17658d4
inc eax
cmp eax, 0x104
jmp 0x17658ce
ret
dec edi
mov dword [ebp - 0xc], eax
js 0x1b44de5
jmp 0x10cc490
ret
mov ecx, esi
jmp 0x11a9917
call fcn.01b816fa
add esp, 0xc
pop edi
bswap bx
pop ebx
pop esi
mov esp, ebp
mov ebp, esp
bswap bp
pop ebp
ret
jne 0x1b0f377
pop edi
pop ebx
test ebp, ebp
clc
btc esi, 0x56
sub eax, eax
mov esi, 0x59c76f07
not esi
pop esi
mov esp, ebp
mov ebp, esi
movzx ebp, sp
jmp 0x1b3b357
jle 0x1b44db3
lea ebx, [esi + 1]
adc ch, 0xfe
sal cx, cl
mov ecx, dword [ebp + 8]
test ax, 0x5662
cmp esp, 0x276e7f4d
clc
cmp ebx, edi
jmp 0x1b717b6
mov eax, dword [ecx + 0x3c]
cmp dword [eax + ecx], 0x4550
jmp 0x1a95d6f
jmp 0x1b44de5
inc esi
stc
cmc
cmp al, 9
jmp 0x1b85073
call fcn.01b04561
lea esp, [esp + 4]
test bp, 0x123b
cmp edi, ecx
test eax, eax
jmp 0x111d81b
mov edi, dword [edx + ecx + 0x18]
clc
test edi, edi
jmp 0x11b6378
mov dword [ebp - 0x10], eax
test ebp, ebx
cmp dh, ah
mov dword [ebp - 8], 0xffffffff
clc
cmc
cmp esi, 0xffff
jmp 0x1a5805f
call eax
mov edi, eax
test eax, ebp
test edi, edi
jmp 0x1b1eeee
jmp 0x178d31f
pop ebx
bswap esi
pop esi
mov esp, ebp
pop ebp
jmp 0x17e666f
ret
push edx
jmp 0x1761127
je 0x1bb61fe
mov byte [ebx + eax], dl
jmp 0x1a86d85
ja 0x17c262b
mov eax, esi
cmp ecx, 0x7c2306d2
sub eax, dword [edx + ecx + 0x10]
jmp 0x1b182ee
jae 0x178d2f1
sub edi, edi
cmp sp, 0x41ba
cmp bp, dx
test ecx, ecx
jmp 0x1abc28a
ret
inc edi
jmp 0x11c9371
je 0x1118d4a
mov eax, dword [eax + ecx + 0x7c]
clc
push ebx
push edi
stc
jmp 0x17c35a8
jne 0x1118d4a
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
stc
cmp sp, bx
test edx, edx
jmp 0x1a9286e
push ecx
jmp 0x1b41bb1
je 0x1bb61fe
lea ebx, [ebp - 0x114]
neg dl
sub ebx, eax
mov dl, byte [eax]
test edx, edi
test dl, dl
jmp 0x17f0dee
jne 0x11cfd26
push 0
jmp 0x17ed9fa
je 0x1118d4a
mov eax, 0x5a4d
test ebx, eax
cmp word [ecx], ax
jmp 0x1118d44
mov eax, dword [ebp + 0xc]
jmp 0x17514d1
test esi, esi
jmp 0x1acdf6d
mov esp, ebp
movzx ebp, cx
pop ebp
jmp 0x177dd3f
je 0x178d2f1
cmp cl, 0x2e
je 0x177f8a7
mov cl, byte [esi + 1]
inc esi
cmc
test esi, 0x2df632e
test cl, cl
jmp 0x178d2eb
add esi, 2
clc
sub edx, edx
test edi, 0x280262c4
test cl, cl
jmp 0x11cfd20
mov dword [ebp - 8], eax
jmp 0x17a2341
jne 0x1b79dfa
lea edx, [ebp - 0x114]
movzx ax, dh
push edx
cwde
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x17686cd
jae 0x10c6ae3
add eax, ecx
bt esi, 0x27
mov cl, byte [eax]
xchg esi, esi
sbb si, 0x510a
mov esi, eax
test cl, cl
jmp 0x1b0f371
call eax
pop edi
xchg si, bx
pop ebx
pop esi
mov esp, ebp
pop ebp
jmp 0x1b77bdf
pop ebp
jmp 0x17729ab
push edi
jmp 0x17874d9
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
test di, di
mov edx, dword [ecx + eax + 0x24]
bsr cx, di
test cl, ch
lea ecx, [edx + esi*2]
movzx edx, word [ecx + eax]
test ch, cl
shr ch, 0x32
mov dword [ebp - 8], edx
mov ecx, eax
add eax, edi
rcr dx, cl
mov edx, dword [ebp - 4]
shr ah, 0xd2
rcr ah, 0x39
mov eax, dword [ebp - 8]
clc
cmc
cmp eax, dword [edx + ecx + 0x14]
jae 0x178d2f1
mov esi, dword [edx + ecx + 0x1c]
cmc
cmp edx, edi
test ax, di
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
test eax, eax
jmp 0x11ad3bf
mov esp, ebp
pop ebp
jmp 0x1a71fef
jle 0x10cc485
jmp 0x1b44ddc
ret
cmp byte [esi + 1], 0x23
mov cx, cx
cmovle ecx, ebp
lea ecx, [esi + 1]
jmp 0x10d647c
je 0x178d2f1
mov edx, dword [ebp + 8]
cmp edi, edx
jmp 0x10c2a2f
push ebp
mov ebp, esp
xchg ch, cl
mov ecx, dword [ebp + 8]
lea esp, [esp - 0x114]
push esi
cmp bl, 0xc1
test ecx, ecx
jmp 0x1b86ddc
je 0x1ad721b
mov edi, dword [ebp + 0xc]
lea ecx, [ebp - 0x114]
xor esi, 0x2e7028b
xor eax, eax
test edx, esp
or bh, 0x20
sub edi, ecx
rcr cl, 0x27
lea esp, [esp]
rcl si, 0x86
stc
mov cl, al
cmc
mov ebx, 0x3a0f2150
btc si, 0xed
rol ebx, cl
rcr si, 0x99
cmp ax, si
lea esi, [ebp + eax - 0x114]
cmp edi, 0x33230723
bt ecx, edi
movsx ecx, sp
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
jmp 0x176d95a
ja 0x1acd509
movsx eax, cl
mov cl, byte [esi]
lea edx, [edx + edx*4]
cmc
lea edx, [eax + edx*2 - 0x30]
test cl, cl
jmp 0x1acd503
je 0x1118d4a
mov esi, dword [ebp + 0xc]
jmp 0x1aeabd0
jb 0x1abc29a
lea ecx, [ebp - 0x114]
mov eax, ebp
movzx ax, bh
push ecx
mov eax, ebx
cmovbe ax, dx
cwde
mov byte [ebp + edi - 0x114], 0
setnp ah
mov al, 5
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x17d39c0