Function at 0x16ab0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor eax, eax
or ebx, ebx
je 0x13eb3
mov esi, eax
push ebx
lea eax, [sym.imp.ntoskrnl.exe_ExFreePool]
call dword [eax]
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push edx
call fcn.00015a3a
add ecx, 0xffffffff
je 0x13e9c
add edx, 0x11c
jmp 0x1464f
movzx esi, word [edx + 0x1a]
lea esi, [esi + edx + 0x1c]
mov edi, dword [ebp + 8]
call fcn.000146de
jne 0x1463b
mov eax, dword [edx + 8]
jmp 0x13e9e
stc
cmc
push edx
cmp ecx, dword [ebp - 8]
jmp 0x17609
stc
push esi
pushfd
cmp ecx, dword [ebp - 4]
mov byte [esp + 4], al
push esi
pushfd
lea esp, [esp + 0x10]
jae 0x15931
cmc
add ecx, 1
pushal
mov dword [ebp - 8], ecx
mov byte [esp + 4], 0xfb
pushal
push dword [esp]
push dword [esp]
lea esp, [esp + 0x48]
jmp 0x17630
pushal
mov word [esp + 0xc], bp
pushal
mov edx, dword [esp + 0x40]
not esi
pop ebx
mov ebx, dword [esp + 0x40]
pop esi
mov edi, dword [esp + 0x40]
call 0x14e6e
sar dword [esp + eax], 1
xlatb
mov bh, 0x98
sub dword [edi + 0x30], ebp
shl dword [eax], 1
outsd dx, dword [esi]
sub cl, dl
sub al, 0x6f
add byte [edi + 4], ch
sar dword [eax], 1
outsd dx, dword [esi]
xor cl, dl
or al, 0xd1
adc al, 0xd1
sbb byte [edi + 0x24], ch
shl dword [edi + ecx], 1
add byte [ecx], cl
dec ecx
add byte [eax + edi*4 + 0x27], bl
mov dl, 0
add byte [ecx], al
add byte [0x1cd15a3c], al
ror dword [ebp + ebp*2 + 1], 0
enter 0x3b3c, 0xffffffffffffffd1
adc byte [edi + 0x24], ch
add eax, 0x52d6524
outsd dx, dword [esi]
sbb al, 0x92
sbb al, 5
sbb al, 0xb
shl dword [ecx], 1
sbb al, 0x93
mov ch, 0xb
shl dword [ebx + ecx], 1
shl dword [ecx + edx*8], 1
adc byte [esp + ebp*4], al
push esp
add dword [eax], eax
add al, 0xfd
jns 0x14e29
add byte [edx + 0x2405043e], al
xchg edx, eax
and al, 0x61
cmp byte [esi], 4
add eax, 0x61249224
rcl dword [eax]
movsx ecx, word [ebx]
outsd dx, dword [esi]
or byte [eax], cl
ror dword [eax], 1
cmp ebp, dword [edi + 0x2c]
jbe 0x14e11
adc cl, dl
xor al, 0xd1
or byte [edx - 0x7cb2ef0], dl
sub al, 5
cmp al, 5
cmp byte [0xc8180504], al
and al, 0x92
sub byte [0x50c921c], al
or al, 5
xor byte [ecx + ebp], al
cdq
dec eax
add eax, 0x146f2920
enter 0xffffffffffff923c, 0x34
mov eax, 0x32a5348d
cmp byte [ebp - 0x57], bl
lea esi, [esi*4 - 0x36837eb6]
not si
mov esi, dword [esp + 0x48]
mov byte [esp], dh
mov esp, ebp
pushal
pushal
mov ebp, dword [esp + 0x40]
mov dword [esp + 8], 0x5a39a116
mov byte [esp + 8], 0x68
push dword [esp + 0x44]
ret 0x50
shld dx, dx, 5
cmc
movzx bx, cl
xor eax, eax
jmp 0x14da8
xadd dx, si
sub dh, 0x8b
mov esi, dword [eax + 0x3c]
and dl, 0x83
pushfd
inc dh
shl dh, cl
add esi, eax
shrd dx, cx, 0xb
btr dx, ax
add dh, ah
cmp ch, 0x53
mov edx, dword [esi + 0x78]
cmc
test edx, edx
mov byte [esp], al
lea esp, [esp + 4]
je 0x15931
or ch, dh
bt esp, 0x10
shld cx, si, cl
add edx, eax
sub ch, 0x7f
btr ecx, 0x15
bsr ecx, ebx
mov ecx, dword [esi + 0x7c]
pushal
pushal
add ecx, edx
mov byte [esp + 4], ah
mov dword [ebp - 0x10], ecx
bsr cx, bx
not ecx
bswap cx
mov ecx, dword [ebp + 0xc]
cmp ebp, 0x54c3b545
pushfd
cmp ecx, 0xffff
push 0xd61b8bf0
lea esp, [esp + 0x48]
jbe 0x14635
clc
mov edi, dword [edx + 0x24]
btc cx, bx
jmp 0x15e05
jmp 0x15cbc
test dl, 0xf8
cmc
cmc
test eax, eax
jmp 0x15a3f
je 0x15931
jmp 0x15942
add edi, eax
and bl, al
rol ch, 1
cmc
mov ebx, dword [edx + 0x20]
lea ecx, [edx*2 - 0x6d05f9f7]
rcl ch, cl
cmp ah, dh
add ebx, eax
bts cx, 0xf
mov dword [ebp - 8], 0
jmp 0x15e41
bt bx, 0xf
mov ecx, dword [edx + 0x18]
jmp 0x14989
cmc
cmp byte [edi - 1], 0
pushfd
call 0x1412b
shl dword [eax], 1
mov dl, 0xd7
mov bh, 0x98
sub ecx, edx
adc byte [edi + 4], ch
outsd dx, dword [esi]
sbb cl, dl
cmp al, 0x6f
adc al, 0xd1
or al, 0xd1
sub al, 0x6f
and al, 0xd1
sbb al, 0x6f
cmp byte [edi + 0x28], ch
sal dword [ecx + edx*8], 1
add cl, dl
add byte [0x47040f18], al
sal dword [ecx + edx*8], 1
xor byte [ebx + ebx*4], al
push ebp
add dword [eax], eax
shr dword [eax], 1
enter 0xffffffffffff9204, 0x18
add eax, 0x922ce114
cmp al, cl
add byte [0x9234c81c], al
sub al, bh
cmp al, 0x92
xor al, cl
add al, 0xb2
sub dword [ecx - 0x2ed698b8], ebx
or al, 5
and byte [edx + 0x5c89b828], dl
and al, 4
mov byte [esp], 0x56
lea esp, [esp + 4]
call fcn.00016ab0
pushal
mov esp, esi
push 0x1e67d45c
push 0x39234386
push dword [esp + 4]
lea esp, [esp + 0xc]
jmp 0x1593d
and ah, 0x82
btr ax, 8
push ebp
cmp ax, 0xd389
sbb eax, ecx
mov ebp, esp
bsf ax, di
bsr ax, cx
dec al
sub esp, 0x18
ror ah, cl
sar eax, 0x18
push esi
bt bp, 2
shl ah, cl
push edi
aad 0x5d
jmp 0x16f2b
jb 0x15e49
pushfd
jmp 0x15ec3
push ebx
bt si, ax
xor ah, 0x24
daa
lea eax, [ecx + 0x1e8cacf1]
push edx
neg ah
mov eax, dword [ebp + 8]
jmp 0x15a44
mov dword [esp], esi
push ebx
lea esp, [esp + 8]
jbe 0x15931
lea esi, [ecx + 0x70ee1043]
or di, 0x903e
bswap si
sub ecx, 1
shrd di, bx, 0xa
mov dword [ebp - 4], ecx
bswap ecx
pushfd
cmp dh, 0x80
mov ecx, dword [ebp - 8]
stc
stc
add ecx, dword [ebp - 4]
pushal
btc di, 7
bsf di, di
shr ecx, 1
cmc
rol esi, 0x10
mov edi, dword [ebx + ecx*4]
shl esi, 0x1d
not si
add edi, eax
or si, di
mov word [esp], 0x8b40
btc si, 6
bsf si, sp
mov esi, dword [ebp + 0xc]
add esp, 0x24
test ch, 0x1f
pushal
cmc
push dword [esp]
cmpsb byte [esi], byte es:[edi]
mov byte [esp], dh
lea esp, [esp + 0x24]
ja 0x14c09
jmp 0x16e54