Function at 0x5ec9e0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1ec]
cmp eax, dword [ecx + 8]
jbe 0x5ed0cd
sub esp, 0x26c
mov eax, dword [esp + 0x270]
movzx ecx, byte [eax + 0x295]
test cl, cl
je 0x5ecbd9
lea eax, [0x685820]
mov dword [esp], eax
call fcn.0040b7c0
mov esi, dword [esp + 4]
mov dword [esp + 0x268], esi
lea edi, [esp + 0x5c]
call fcn.004631ac
lea eax, [0x685820]
mov dword [esp], eax
lea ecx, [esp + 0x5c]
mov dword [esp + 4], ecx
call fcn.00408fb0
mov eax, dword [esp + 8]
lea ecx, [0x685820]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004bbd20
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x270]
mov dword [esp], ecx
mov edx, dword [esp + 0x274]
mov dword [esp + 4], edx
call fcn.005dac10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x270]
mov dword [esp], ecx
lea edx, [0x651ca0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x268]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
call fcn.005db930
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x5ecbc4
lea edi, [esp + 0x5c]
mov esi, dword [esp + 0x268]
call fcn.004631ac
lea eax, [0x685820]
mov dword [esp], eax
lea eax, [esp + 0x5c]
mov dword [esp + 4], eax
call fcn.00408fb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x268]
mov edx, dword [ecx + 0x1c]
test edx, edx
setne dl
mov ebx, dword [ecx + 0x18]
test ebx, ebx
setne bl
or edx, ebx
test dl, dl
je 0x5ecbbb
mov dword [esp + 0x260], eax
lea eax, [0x662d60]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0044b410
mov eax, dword [esp + 0xc]
mov dword [esp + 0x25c], eax
lea edi, [esp + 0x164]
xor eax, eax
call fcn.00462cc4
mov eax, dword [esp + 0x270]
mov ecx, dword [eax + 0x78]
mov esi, dword [eax + 0x7c]
lea edx, [0x692c40]
cmp ecx, edx
jne 0x5ed0b6
lea edi, [esp + 0x164]
call fcn.00462fb8
mov ecx, dword [esp + 0x268]
mov ecx, dword [ecx + 0x18]
mov edx, dword [esp + 0x17c]
sub ecx, edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.005dac10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x270]
mov edx, dword [esp + 0x25c]
xor ebx, ebx
xor ebp, ebp
jmp 0x5ecf27
xor ecx, ecx
xor edx, edx
jmp 0x5ecf03
mov dword [esp + 0x27c], ecx
mov dword [esp + 0x280], edx
add esp, 0x26c
ret
lea eax, [0x685780]
mov dword [esp], eax
call fcn.0040b7c0
mov esi, dword [esp + 4]
mov dword [esp + 0x264], esi
lea edi, [esp + 0x44]
call fcn.004631d4
lea eax, [0x685780]
mov dword [esp], eax
lea ecx, [esp + 0x44]
mov dword [esp + 4], ecx
call fcn.00408fb0
mov eax, dword [esp + 8]
lea ecx, [0x685780]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004bbd20
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x270]
mov dword [esp], ecx
mov edx, dword [esp + 0x274]
mov dword [esp + 4], edx
call fcn.005dac10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x270]
mov dword [esp], ecx
lea edx, [0x651c60]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x264]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
call fcn.005db930
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x5ecd70
lea edi, [esp + 0x44]
mov esi, dword [esp + 0x264]
call fcn.004631d4
lea eax, [0x685780]
mov dword [esp], eax
lea eax, [esp + 0x44]
mov dword [esp + 4], eax
call fcn.00408fb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x264]
mov edx, dword [ecx + 0xc]
test edx, edx
je 0x5ecd6a
mov dword [esp + 0x260], eax
lea eax, [0x662d20]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0044b410
mov eax, dword [esp + 0xc]
mov dword [esp + 0x25c], eax
lea edi, [esp + 0x84]
xor eax, eax
call fcn.00462cc8
mov eax, dword [esp + 0x270]
mov ecx, dword [eax + 0x78]
mov esi, dword [eax + 0x7c]
lea edx, [0x693180]
cmp ecx, edx
jne 0x5eceed
lea edi, [esp + 0x84]
call fcn.00462fe0
mov ecx, dword [esp + 0x264]
mov ecx, dword [ecx + 0xc]
sub ecx, dword [esp + 0xa0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.005dac10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x270]
mov edx, dword [esp + 0x25c]
xor ebx, ebx
xor ebp, ebp
jmp 0x5ecdfa
xor ecx, ecx
xor edx, edx
jmp 0x5ecd85
mov dword [esp + 0x27c], ecx
mov dword [esp + 0x280], edx
add esp, 0x26c
ret
lea ebx, [0x685780]
mov ebp, dword [esp + 0x270]
mov dword [ebp + 0x128], ebx
mov dword [ebp + 0x130], ecx
mov ecx, dword [0x8e4520]
test ecx, ecx
jne 0x5ecdb6
mov dword [ebp + 0x12c], eax
mov dword [ebp + 0x134], edx
jmp 0x5ecdce
lea edi, [ebp + 0x12c]
call fcn.00462a70
lea edi, [ebp + 0x134]
mov eax, edx
call fcn.00462a70
mov byte [ebp + 0x2a4], 1
mov dword [esp + 0x27c], 0
mov dword [esp + 0x280], 0
add esp, 0x26c
ret
mov dword [edx + ebp*4], edi
add eax, 4
mov ebp, esi
mov esi, dword [ecx + 0x2ac]
add esi, 0xfffffffc
cmp eax, esi
jbe 0x5ece11
mov esi, dword [0x8bc9f8]
xor edi, edi
jmp 0x5ece54
mov dword [esp + 0x254], edx
mov esi, dword [ecx + 0x28c]
mov edi, dword [ecx + 0x288]
mov edx, dword [ecx + 0x290]
cmp eax, esi
ja 0x5ecee6
sub esi, eax
sub edx, eax
neg edx
sar edx, 0x1f
and edx, eax
cmp esi, 3
jbe 0x5eceda
mov edx, dword [edi + edx]
mov edi, edx
xor esi, esi
mov edx, dword [esp + 0x254]
test esi, esi
jne 0x5eceb4
test edi, edi
je 0x5eceb4
lea esi, [ebp + 1]
cmp ebx, esi
jae 0x5ecdf2
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x34], edi
mov dword [esp + 0x28], eax
lea eax, [0x662d20]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0044b610
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x270]
mov ebp, dword [esp + 0x2c]
mov edi, dword [esp + 0x34]
jmp 0x5ecdf2
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.00409220
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x260]
lea ecx, [0x659d00]
jmp 0x5ecd85
mov eax, 3
mov ecx, esi
call fcn.00462af0
mov ecx, esi
call fcn.00462b60
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x662460]
mov dword [esp + 8], eax
call fcn.00408df0
lea ebx, [0x685820]
jmp 0x5ecd8b
lea edi, [edx + ebx*8]
mov dword [edi], eax
lea edi, [edx + ebx*8 + 4]
mov eax, esi
mov esi, dword [esp + 0x24]
mov dword [edi], esi
mov esi, dword [esp + 0x3c]
mov ebx, eax
mov eax, esi
mov dword [esp + 0x30], ebx
lea esi, [eax + 8]
mov dword [esp + 0x3c], esi
cmp dword [ecx + 0x2ac], esi
jae 0x5ecf4f
mov edi, dword [0x8bc9f8]
xor eax, eax
xor eax, eax
mov dword [esp + 0x24], eax
xor eax, eax
jmp 0x5ed00b
mov dword [esp + 0x258], edx
mov edi, dword [ecx + 0x288]
mov esi, dword [ecx + 0x28c]
mov edx, dword [ecx + 0x290]
cmp eax, esi
ja 0x5ed0af
sub edx, eax
neg edx
sar edx, 0x1f
and edx, eax
sub esi, eax
cmp esi, 7
jbe 0x5ed0a3
movzx esi, byte [edi + edx]
mov eax, ebp
movzx ebp, byte [edi + edx + 1]
mov dword [esp + 0x38], ebp
shl ebp, 8
or esi, ebp
mov ebp, dword [esp + 0x38]
shr ebp, 0x18
movzx ebx, byte [edi + edx + 2]
mov dword [esp + 0x38], ebx
shl ebx, 0x10
or esi, ebx
mov ebx, dword [esp + 0x38]
shr ebx, 0x10
or ebx, ebp
movzx ebp, byte [edi + edx + 3]
mov dword [esp + 0x38], ebp
shl ebp, 0x18
or esi, ebp
mov ebp, dword [esp + 0x38]
shr ebp, 8
or ebp, ebx
movzx ebx, byte [edi + edx + 4]
or ebx, ebp
movzx ebp, byte [edi + edx + 5]
shl ebp, 8
or ebx, ebp
movzx ebp, byte [edi + edx + 6]
shl ebp, 0x10
or ebx, ebp
movzx edx, byte [edi + edx + 7]
shl edx, 0x18
or ebx, edx
mov edx, dword [esp + 0x258]
mov ebp, eax
mov eax, esi
mov dword [esp + 0x24], ebx
xor edi, edi
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x3c]
test edi, edi
jne 0x5ed07d
test eax, eax
xchg edi, ebx
sete bl
xchg edi, ebx
mov esi, dword [esp + 0x24]
test esi, esi
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x5ed07d
lea esi, [ebx + 1]
cmp ebp, esi
jae 0x5ecf0e
mov dword [esp + 0x20], eax
lea eax, [0x662d60]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0044b610
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x270]
mov ebx, dword [esp + 0x30]
jmp 0x5ecf0e
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00409220
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x260]
lea ecx, [0x659d40]
jmp 0x5ecf03
mov eax, 7
mov ecx, esi
call fcn.00462af0
mov ecx, esi
call fcn.00462b60
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x662460]
mov dword [esp + 8], eax
call fcn.00408df0
nop
call fcn.00461660
jmp fcn.005ec9e0