Function at 0x178d88f
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
jae 0x1d3ec68
mov ecx, dword [eax + edi + 0x1c]
dec edx
lea edx, [ecx + esi*4]
bsr ecx, eax
mov ecx, dword [edx + edi]
cmp ah, ah
test ecx, ecx
je 0x1d3ec68
cmp ecx, eax
jmp 0x1d74924
push eax
jmp 0x1d157b1
mov edx, dword [edi + 0x3c]
add edx, edi
cmp dword [edx], 0x4550
jmp 0x1d7f6f9
mov eax, dword [edx + esi*4]
stc
add eax, edi
jmp 0x1ddd86c
jne 0x1db99e1
cmp byte [ebp + 0x10], 0
jmp 0x21c351c
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x1db17c6
call eax
pop esi
bswap edi
movsx edi, bx
jmp 0x1d33c56
pop esi
jmp 0x1d4f245
jmp 0x1db17c6
ret
jne 0x17490b7
pop esi
dec bl
inc bl
cmp esi, esp
pop ebx
btc edi, 0x3a
sub eax, eax
mov di, 0x4a8f
pop edi
mov esp, ebp
pop ebp
ret
push ebp
mov ebp, esp
jmp 0x1d28841
jne 0x1db17c6
inc esi
jmp 0x1cf109a
push ecx
jmp 0x1cad5d9
mov ecx, dword [ebp - 4]
xchg dl, al
mov edx, dword [ecx + edi + 0x24]
cbw
bswap eax
mov cx, si
lea eax, [edx + esi*2]
mov cx, sp
bswap cx
movsx ecx, ax
movzx ecx, word [eax + edi]
bswap edx
lea edx, [ebx + 1]
jmp 0x176615f
jb 0x1d6a9d7
mov eax, dword [ebp + 8]
movsx ecx, bx
mov cx, bp
movzx ecx, ax
lea ecx, [ebp - 0x114]
jmp 0x1d1570f
mov byte [ebp + eax - 0x114], 0
setg ah
movsx eax, bx
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
test eax, eax
jmp 0x21db5d1
je 0x1db17c2
test eax, eax
jmp 0x1ddd87f
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0x1cf6830
call eax
test eax, eax
jmp 0x1e1c2c5
sub bl, 0x30
jmp 0x1de60ca
push eax
jmp 0x1cdfb5d
mov cl, byte [esi + 2]
add esi, 2
cmc
stc
sub edx, edx
test si, 0x1443
test cl, cl
jmp 0x1cda5c7
ret
jae 0x1d3ec68
mov edx, dword [eax + edi + 0x1c]
test cx, ax
lea ecx, [edx + ecx*4]
jmp 0x1d03fe9
ret
ret
je 0x1e07259
mov bl, cl
jmp 0x1caaf68
ret
push esi
or esi, 0xffffffff
cmp esp, 0x47c66307
mov dword [ebp - 0x10], edx
stc
clc
mov dword [ebp - 8], esi
jmp 0x1d4a8c7
call fcn.0178d88f
add esp, 0xc
pop esi
pop ebx
cmovle edi, edi
pop edi
jmp 0x21da80e
mov dword [ebp + 8], esi
jmp 0x1779ffc
je 0x1dd2093
mov edx, dword [eax + edi + 0x20]
jmp 0x1d27a31
mov esp, ebp
movsx ebp, bp
movzx ebp, si
pop ebp
jmp 0x17405a7
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0x178d112
push ecx
jmp 0x179be3f
call fcn.0178d88f
add esp, 0xc
cmovg ebx, edi
pop esi
movzx ebx, si
mov di, 0x65f4
mov bx, sp
pop ebx
pop edi
jmp 0x21e687b
je 0x21bf5d2
inc edx
cmp edx, 0x104
jmp 0x21bf5cc
je 0x21cda08
mov ecx, dword [ebp + 0xc]
cmp di, di
test dx, ax
test ecx, ecx
jmp 0x1d84a93
dec ebx
add edx, edi
test cl, 0x86
cmc
jmp 0x1ddbd4a
sub esp, 0x114
cmc
stc
push edi
shl edi, 0x75
btc edi, eax
bsf edi, ecx
mov edi, dword [ebp + 8]
clc
test edi, edi
jmp 0x1d24858
pop ebx
pop edi
jmp 0x21d1aca
jne 0x1df9920
pop esi
pop ebx
inc edi
xor eax, eax
pop edi
jmp 0x1dec8c6
cmp ecx, 0xffff
ja 0x1ca0cda
sub ecx, dword [eax + edi + 0x10]
cmc
test si, bp
cmp ecx, dword [eax + edi + 0x14]
jmp 0x1cbf7d6
pop ebx
mov ax, cx
movzx eax, di
cwde
lea eax, [ecx + edi]
pop edi
jmp 0x1d7b71d
je 0x1d68080
mov cl, byte [esi + 1]
jmp 0x21c3536
push eax
cmovle eax, edi
xchg al, ah
lahf
push edi
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x17742c6
mov ecx, esi
cmc
cmp ebx, edx
sub ecx, eax
stc
cmp esp, 0x63f60bb3
cmp ecx, 0x104
jmp 0x1d6a9ba
jae 0x1d3ec68
mov dword [ebp + 8], 0
test ecx, ecx
jbe 0x1796773
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
test cl, dl
test dl, dl
jmp 0x1d82018
sub ebx, eax
cmc
mov edi, edi
mov eax, 0x16b50183
clc
mov cl, dl
rol eax, cl
lea esi, [ebp + edx - 0x114]
add al, dl
clc
cmc
xor al, byte [ebx + esi]
jmp 0x1dbbec1
jb 0x1775145
mov edx, dword [ebp - 0x10]
test ax, 0x1cc3
lea edx, [edx + eax]
cmp di, ax
cmp ecx, edx
jmp 0x1dc7c4c
test cl, cl
jmp 0x1e07253
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0x1dca8fb
jne 0x21cda08
mov eax, dword [edx + 0x78]
clc
cmp dx, dx
mov dword [ebp - 4], eax
test bp, 0x745
clc
test eax, eax
jmp 0x1de8b4a
je 0x1796773
mov byte [ebx + eax], dl
xchg dx, dx
bswap dx
cmove dx, dx
mov edx, dword [ebp + 8]
jmp 0x1dd020b
je 0x21cda08
mov eax, 0x5a4d
jmp 0x21cd9ff
mov eax, dword [ebp + 0xc]
jmp 0x1d62723
lea ebx, [esi - 1]
stc
cmp dword [ebp + 8], ebx
jmp 0x1dd2085
cmp byte [esi + 1], 0x23
jmp 0x1dfa40a
mov byte [esi], al
jmp 0x1d1909e
jae 0x1775145
lea eax, [ecx + edi]
shl cl, cl
neg esi
mov cl, byte [eax]
adc esi, esp
test al, 0xad
sub esi, 0x18dc06a4
mov esi, eax
cmp esp, 0x452f0333
test cl, cl
jmp 0x1df9916
ret
inc edx
inc eax
mov dword [ebp + 8], edx
cmc
clc
cmp edx, ecx
jmp 0x179676d
jle 0x1de7e1e
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp edi, ebx
cmp esi, dword [eax + edi + 0x14]
jmp 0x1749099
mov dword [ebp + 8], 0
stc
mov dword [ebp - 0xc], edx
cmp ebx, 0x738e0539
cmp ebp, edx
test ebx, ebx
jl 0x1dd2093
jmp 0x1de7e29
call fcn.01df0deb
lea esp, [esp + 4]
cmp eax, 0xffffffff
jmp 0x179c7c5
je 0x1792ee8
cmp eax, 1
jmp 0x178f6b6
inc esi
test cl, 0xcc
cmp ecx, 0x362708ad
cmp bl, 9
ja 0x1e07259
movsx ecx, cl
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
jmp 0x1d74b28
mov ecx, dword [ebp + 0xc]
sar dl, cl
cdq
mov edx, dword [ebp - 0xc]
add eax, edi
mov eax, dword [ebp + 8]
xor si, di
sal si, 0x5e
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
push eax
rcr eax, 0xbd
and eax, edi
sar esi, 1
btc eax, 0xa5
btr eax, edi
jmp 0x1758fae
mov esp, ebp
pop ebp
jmp 0x1cdd67b
je 0x21cda08
mov edx, dword [edx + 0x7c]
test dx, 0x2a98
push ebx
jmp 0x1cde7b5
mov esp, ebp
pop ebp
jmp 0x1cc82e7
je 0x1d3ec68
mov edi, edi
cmp ebx, ecx
cmp cl, 0x2e
jmp 0x1d568f6
lea ecx, [esi + 1]
jmp 0x21c7890
jne 0x1cda5cd
push 0
jmp 0x21d3182
je 0x1d3ec68
cmp eax, edi
jmp 0x175ffe4
jb 0x1d6be0b
lea eax, [ebp - 0x114]
push eax
movzx eax, dx
cmova eax, ebp
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
bswap bx
not edi
movzx edi, si
pop ebx
cmovo edi, eax
xchg di, di
mov di, sp
pop edi
jmp 0x1cfc1a4
je 0x1d85c96
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
sbb cl, al
rcr cl, cl
xor edx, edx
jmp 0x1d6be06
inc esi
stc
cmc
test cl, cl
jmp 0x1d3ec62
je 0x1cb39a0
push 0
jmp 0x178f7ed
cmp word [edi], ax
je 0x1757a96
sub eax, eax
bswap di
not edi
pop edi
jmp 0x1de7f80
mov esp, ebp
pop ebp
jmp 0x177b8fe
push edx
jmp 0x17518d6
mov esp, ebp
cmovae ebp, eax
mov ebp, 0x5fcc4da4
movsx ebp, ax
pop ebp
jmp 0x1cb8f43
jne 0x1e1c2cb
lea edx, [ebp - 0x114]
push edx
movsx eax, si
movzx eax, bx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x1ca16cb
mov esp, ebp
movzx ebp, cx
pop ebp
jmp 0x1cda3ab