Function at 0xd72c64
Capabilities:
Link function at runtime on windows
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
ja 0x10b69e5
movsx eax, cl
mov cl, byte [esi]
test cx, si
clc
lea edx, [edx + edx*4]
clc
lea edx, [eax + edx*2 - 0x30]
test cl, cl
jmp 0x10b69df
mov eax, dword [ebp + 8]
setns dl
shr cx, 0x95
mov ecx, dword [ebp - 4]
jmp 0xd550d0
ja 0x119a3b1
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
jmp 0x110d34b
call fcn.00d72c64
add esp, 0xc
mov di, di
movsx edi, bx
pop edi
movsx ebx, bx
pop ebx
jmp 0x10e75b5
inc edi
jmp 0x11a1d8e
je 0xd680ba
mov edi, dword [ebp + 0xc]
lea ecx, [ebp - 0x114]
xor eax, eax
shr esi, 0xea
xor esi, 0x52b94747
sub edi, ecx
lea esp, [esp]
mov cl, al
btc ebx, edi
bt si, 0x8d
clc
mov ebx, 0x7a080880
rol ebx, cl
lea esi, [ebp + eax - 0x114]
bts ecx, edi
lea ecx, [eax + ebx]
test eax, 0x1e5f0e00
clc
cmp bp, 0x4ba8
xor cl, byte [edi + esi]
jmp 0x10997ba
jmp 0x14310cf
ret
mov edx, dword [ecx + eax + 0x24]
lea ecx, [edx + esi*2]
bts edx, edx
bt edx, 0x8c
cmp di, bp
movzx edx, word [ecx + eax]
xchg cl, ch
jmp 0x10dca77
jne 0x10646c8
mov edx, dword [eax + ecx + 0x78]
cmp cx, di
mov dword [ebp - 4], edx
clc
cmp edi, 0x222b7bc6
jmp 0x1187f95
mov eax, dword [ebp + 0xc]
jmp 0x10f00ce
push eax
push edx
movzx eax, di
mov ah, cl
movsx ax, bh
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1195816
push ebp
mov ebp, esp
shl cl, 0x97
movsx ecx, bp
mov ecx, dword [ebp + 8]
clc
cmp edi, 0x4c4e6bc4
sub esp, 0x114
push esi
clc
cmp di, bp
jmp 0x10dad62
jmp 0x10dca8e
mov eax, dword [eax + ecx]
cmc
cmp ch, bl
test eax, eax
je 0x10475c8
cmp eax, edx
jb 0x10d6abe
mov esi, dword [ebp - 0x10]
test eax, ebp
add esi, edx
cmp eax, esi
jae 0x10d6abe
lea eax, [eax + ecx]
xadd cl, cl
clc
mov cl, byte [eax]
mov esi, eax
test cl, cl
jmp 0x1055f62
inc esi
cmc
test cl, cl
jmp 0x10475c2
ret
jae 0x10475c8
sub edi, edi
jmp 0x1445153
jne 0x1055f68
pop edi
bsf esi, edx
pop ebx
sub eax, eax
pop esi
jmp 0x10e78b7
je 0x10475c8
cmp cl, 0x2e
jmp 0x10ba339
je 0x1090332
push 0
push ecx
push edi
jmp 0x13fc650
cmp byte [esi + 1], 0x23
cmovg ecx, esi
lea ecx, [esi + 1]
jmp 0x105dd99
je 0x1075320
xor eax, eax
pop esi
mov esp, ebp
mov ebp, edi
movsx ebp, cx
bswap bp
pop ebp
jmp 0x1090cfb
push edi
jmp 0xd3221a
mov eax, dword [ecx + 0x3c]
cmc
cmp cl, ch
cmp dword [eax + ecx], 0x4550
jmp 0xd565db
jns 0x14310bc
lea edi, [esi - 1]
jmp 0xd3c8bf
jne 0x105e0ae
cmp byte [ebp + 0x10], 0
jmp 0xd38ee0
mov cl, byte [esi + 2]
test ah, bh
cmc
lea esi, [esi + 2]
test bx, sp
sub edx, edx
test cl, cl
jmp 0x13d2f1a
ret
call eax
mov edi, eax
jmp 0x1191174
dec edi
mov dword [ebp - 0xc], eax
jmp 0x1410264
je 0x13f0861
mov byte [ebx + eax], dl
jmp 0xd36821
je 0x10475c8
mov edx, dword [ebp + 8]
cmp sp, 0x3f15
test ebp, 0x174479c3
cmp edi, edx
jmp 0x108f467
mov byte [esi], cl
jmp 0x1191126
ret
jne 0x13d2f20
push 0
jmp 0x10fc7d9
je 0x13e0b77
mov cl, byte [esi + 1]
jmp 0x102c718
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
test al, 0x28
btr esi, edi
or si, dx
lea esi, [edi + ebx]
test di, 0xc16
sar esi, 1
mov eax, dword [eax + esi*4]
cmp edi, 0x68a273dc
test dl, 0xac
test bx, si
push edx
mov edx, dword [ebp + 0xc]
test eax, esi
test edi, 0x3692271c
add eax, ecx
jmp 0x1188f3e
pop edi
bts bx, sp
pop ebx
bt esi, 0xcc
xor si, 0x599f
add eax, ecx
mov esi, ebx
pop esi
jmp 0x111c5c0
ret
test ecx, ecx
jmp 0x110ce94
mov dword [ebp - 8], edx
btc dx, bx
xchg dx, cx
mov ecx, eax
cmp dh, 0x4c
btc ax, 0x5f
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
test eax, 0x9640062
cmp eax, dword [edx + ecx + 0x14]
jae 0x10475c8
mov esi, dword [edx + ecx + 0x1c]
stc
lea eax, [esi + eax*4]
jmp 0x1027f9b
pop esi
jmp 0x142f7e9
mov esp, ebp
jmp 0x1422921
push eax
mov ah, 0x53
mov ax, sp
bswap ax
push edx
cmovb eax, edx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop ebx
cmovp esi, ecx
movsx esi, ax
pop esi
jmp 0x13d1f93
push edx
jmp 0x1072642
ret
cmp al, 9
jmp 0xd1c47d
je 0x10646c8
mov esi, dword [ebp + 0xc]
cmp si, ax
test esi, esi
jmp 0x1435ee8
mov dword [ebp - 8], eax
jmp 0xd77078
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0xffffffff
cmp esi, 0xffff
jmp 0xd2182a
mov esp, ebp
bswap bp
pop ebp
jmp 0x10d6c01
test edx, edx
jmp 0x1411d5b
call fcn.00d7bfe2
add esp, 4
test dh, ah
test eax, eax
jmp 0x108ef63
sub ebx, ebx
jmp 0x1092b21
je 0x119113a
inc eax
cmp esp, ebx
cmp eax, 0x104
jb 0xd38f03
lea eax, [ebp - 0x114]
jmp 0xd69e71
test edi, edi
jne 0x1098d9d
lea edx, [ebp - 0x114]
xchg ah, ah
movzx eax, di
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov edi, eax
test edi, edi
jmp 0x1098d97
inc esi
jmp 0x11049c8
call eax
pop edi
pop ebx
movzx esi, di
cmovb esi, ebp
pop esi
mov esp, ebp
movzx ebp, bp
pop ebp
jmp 0x103a3ef
mov edi, dword [edx + ecx + 0x18]
test edi, edi
je 0x10dca8e
mov eax, dword [edx + ecx + 0x20]
test edx, esi
cmc
add eax, ecx
test si, 0x14a1
jmp 0x118aa92
inc eax
test esp, 0x6de1eb7
clc
cmp edi, ecx
jmp 0x13f085b
mov esp, ebp
bswap bp
pop ebp
jmp 0x10b339f
je 0x10b69e5
lea eax, [ecx - 0x30]
jmp 0x1194923
mov ecx, esi
test si, 0x70d5
cmc
sub ecx, eax
cmp si, bx
cmc
cmp ecx, 0x104
jmp 0x103c4d4
jb 0x140a5dc
lea ecx, [ebp - 0x114]
bswap ax
mov al, dl
push ecx
mov byte [ebp + edi - 0x114], 0
not ah
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x1091661
call fcn.00d72c64
add esp, 0xc
movsx bx, bl
mov esi, edi
pop edi
movsx bx, bh
bswap bx
pop ebx
movzx esi, ax
pop esi
mov esp, ebp
pop ebp
jmp 0xd50197
je 0x13f0861
lea ebx, [ebp - 0x114]
sub ebx, eax
neg dl
mov dl, byte [eax]
cmc
test dl, dl
jmp 0x10979a2
js 0x10dca8e
jmp 0x10cd2f6
je 0x10646c8
mov eax, dword [eax + ecx + 0x7c]
clc
push ebx
cmp cx, bp
cmc
push edi
jmp 0x11159db
pop ebp
jmp 0xd149a7
mov esp, ebp
pop ebp
jmp 0x10feaed
jle 0xd1cb63
lea ebx, [esi + 1]
sal cx, 0xe0
sub ch, 0xec
bt ecx, ebp
mov ecx, dword [ebp + 8]
cmp ebp, 0x48e5417d
cmp ebx, edi
jle 0x10cd2f3
jmp 0x10dca8b
je 0x10646c8
mov eax, 0x5a4d
cmp esi, esi
cmp word [ecx], ax
jmp 0x10646c2
test ecx, ecx
jmp 0x140a5cc