Function at 0x1ece15b
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jne 0xf895f0
push 0
jmp 0x1ebdfb1
ret
xor edx, edx
cmc
cmp si, ax
test cl, cl
je 0xf886a5
mov bl, cl
sub bl, 0x30
jmp 0x1ece8e1
je 0x1dbd229
cmp eax, 1
jmp 0x1ecb31b
jne 0x1ec5159
pop esi
pop ebx
xor di, dx
sub eax, eax
not edi
mov di, di
pop edi
mov esp, ebp
cmovno ebp, edi
pop ebp
jmp 0x1dbc14f
ret
mov byte [esi], al
jmp 0x1eca13f
je 0xf89e2b
cmp eax, edi
jne 0x1ed7de2
cmp byte [ebp + 0x10], 0
jmp 0x1ec2516
jbe 0x1ebf504
lea ebx, [ebp - 0x114]
dec dl
sub ebx, eax
test bx, bx
add dl, bl
or dl, 0xdd
mov dl, byte [eax]
test bx, bp
test dl, dl
jmp 0x1db9fd6
mov esp, ebp
bswap bp
movzx ebp, bp
pop ebp
jmp 0x1ebc3f9
ja 0x1ecee26
sub ecx, dword [eax + edi + 0x10]
test cl, 0x6d
cmp si, 0xc43
cmp ecx, dword [eax + edi + 0x14]
jmp 0x1ebc37f
jb 0x1ebc1e5
mov edx, dword [ebp - 0x10]
test bp, 0x6cb0
lea edx, [edx + eax]
cmp dh, cl
cmp ecx, edx
jmp 0x1db4dd3
je 0x1dba708
mov cl, byte [esi + 1]
jmp 0x1ebc99e
inc eax
clc
cmc
mov dword [ebp + 8], edx
test ecx, esp
cmc
cmp edx, ecx
jmp RegQueryValueExA
jae 0xf89e2b
mov ecx, dword [eax + edi + 0x1c]
or dh, 0x93
xchg dx, dx
bts dx, bp
lea edx, [ecx + esi*4]
sbb cx, sp
add ch, 0x61
shl ch, 0x41
mov ecx, dword [edx + edi]
test sp, bp
test ecx, ecx
jmp 0x1ec502c
jne 0x1dad25b
lea edx, [ebp - 0x114]
not eax
cmovnp ax, dx
mov ax, 0x694a
push edx
bswap eax
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA]
call eax
test eax, eax
jmp 0x1dad255
jae 0x1ebc1e5
lea eax, [ecx + edi]
ror esi, 0x52
mov cl, byte [eax]
and esi, esp
add si, ax
mov si, 0x7b86
mov esi, eax
test cx, bx
test cl, cl
jmp 0x1ec5150
push ecx
jmp 0x1dc5f60
call fcn.01ec11ef
add esp, 4
test cx, cx
stc
cmp eax, 0xffffffff
jmp 0x1ede20d
jmp 0x1ec9f04
mov dword [ebp - 8], esi
test dx, 0x2474
cmc
cmp ecx, 0xffff
jmp 0x1db2394
mov cl, byte [esi + 2]
cmc
add esi, 2
stc
jmp 0xf895e2
je 0x1ebf504
mov byte [ebx + eax], dl
movsx edx, cx
bswap edx
mov edx, dword [ebp + 8]
jmp 0x1ecec3d
mov ecx, esi
clc
sub ecx, eax
test sp, sp
cmp ecx, 0x104
jmp 0x1ec5c09
ret
mov ecx, dword [ebp - 4]
cwde
cwd
movsx edx, sp
mov edx, dword [ecx + edi + 0x24]
cmovg ecx, eax
lea eax, [edx + esi*2]
movzx ecx, cx
movsx ecx, si
cmovnp ecx, ebp
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0x1dc35ca
ret
mov esp, ebp
pop ebp
ret
cmp esi, dword [eax + edi + 0x14]
jmp 0x1db47ca
push esi
cmc
or esi, 0xffffffff
test ah, dl
mov dword [ebp - 0x10], edx
jmp 0x1db95a8
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x1db77d0
mov esp, ebp
mov ebp, eax
movzx ebp, bx
not ebp
pop ebp
jmp 0x1edd2f1
mov edx, dword [edi + 0x3c]
cmc
cmp cl, 0xb4
add edx, edi
stc
cmp dword [edx], 0x4550
jne 0x1ee10e1
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
test esp, edx
test eax, eax
je 0x1ee10e1
mov edx, dword [edx + 0x7c]
clc
push ebx
jmp 0x1dc27f0
call eax
test eax, eax
jmp 0x1db4a09
push eax
jmp 0x1ec2577
push eax
call fcn.01ece15b
add esp, 0xc
not bh
mov edi, ebp
pop esi
pop ebx
movzx edi, cx
pop edi
jmp 0x1edcb94
mov eax, dword [ebp + 0xc]
push eax
not al
mov al, 0xfc
push edi
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
call eax
pop esi
xchg di, bx
pop ebx
jmp 0x1ec0635
pop esi
setne bh
pop ebx
lea eax, [ecx + edi]
pop edi
mov esp, ebp
pop ebp
jmp 0x1ecef63
jae 0xf89e2b
mov edx, dword [eax + edi + 0x1c]
test bp, di
lea ecx, [edx + ecx*4]
stc
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0x1ecb7bd
ret
inc esi
test dx, bx
clc
test cl, cl
jmp 0xf89e25
je 0x1db9afb
push 0
jmp 0x1db4ffa
push edx
jmp 0x1dc5fc3
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA]
jmp 0x1dc48bd
jb 0x1daf5b3
mov eax, dword [ebp + 8]
movsx cx, ah
not ecx
mov ecx, 0x59b158b2
lea ecx, [ebp - 0x114]
push ecx
jmp 0x1ebf15d
pop edi
jmp 0x1daf74d
call eax
pop esi
xchg ebx, edi
movzx bx, ch
pop ebx
pop edi
jmp 0x1dc392d
je 0x1dc6f42
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
stc
xor edx, edx
rol cl, 0x3d
sub ebx, eax
mov edi, edi
btc eax, 0x16
bt eax, 0x62
mov eax, 0x35df147c
btc si, bp
mov cl, dl
rcr si, 0x49
cmc
bt esi, edx
rol eax, cl
bts si, ax
lea esi, [ebp + edx - 0x114]
cmp edx, edx
test di, 0x2223
add al, dl
clc
xor al, byte [ebx + esi]
jmp 0x1daba38
call fcn.01ece15b
add esp, 0xc
mov si, 0x5abb
bswap bx
pop esi
movsx edi, bx
xchg di, bx
pop ebx
pop edi
jmp 0x1ed0fde
je 0xf89e2b
cmp ecx, eax
jmp 0x1db29c3
je 0xf89e2b
mov edi, edi
cmc
cmp cl, 0x2e
jmp 0x1db3992
jae 0xf89e2b
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0x1daf59b
dec ebx
lea edx, [edx + edi]
cmc
mov dword [ebp + 8], 0
cmp edi, 0x1b967695
mov dword [ebp - 0xc], edx
test cx, sp
test eax, 0x24495232
cmp ch, bl
test ebx, ebx
jmp 0x1ed608e
mov esp, ebp
movzx ebp, ax
mov bp, 0x560c
pop ebp
jmp 0x1dbeb94
lea ebx, [esi - 1]
cmp edi, 0x5c91265a
cmp dword [ebp + 8], ebx
jmp 0x1ee085e
je 0x1eca158
inc edx
cmc
cmp sp, 0x60bc
cmp edx, 0x104
jb 0x1ec2537
lea eax, [ebp - 0x114]
jmp 0x1ecb896
jne 0x1ec9f04
inc esi
jmp 0x1ecbef3
jne 0x1ec5032
pop esi
or ebx, ebx
pop ebx
shl di, 0xab
add di, bp
sub eax, eax
pop edi
jmp 0x1ec9b68
push eax
mov ah, al
push edi
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0x1ec2374
mov dword [ebp + 8], esi
jmp 0x1ed2bed
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
movsx eax, si
shl esi, 0xd8
mov eax, dword [ebp + 8]
sbb si, 0x2909
rol esi, 0xb0
lea esi, [ebx + eax]
or ah, 0x2b
mov eax, edi
sar eax, 0x46
mov eax, dword [ebp + 0x10]
cmc
cmp esi, 0x28a7172d
test al, bh
push eax
sar esi, 1
sar al, 0x96
inc ax
mov eax, dword [edx + esi*4]
test ah, 0x54
add eax, edi
jmp 0x1db5530
push ebp
mov ebp, esp
cmp esp, esp
lea esp, [esp - 0x114]
cmp ebx, esi
test di, bx
push edi
sar edi, 0xa8
mov edi, dword [ebp + 8]
cmc
jmp 0x1ed7fd5
inc esi
cmp cx, si
test bp, di
cmp bl, 9
jmp 0x1ed5963
inc edx
jmp 0x1db3b69
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
je 0x1dc2337
mov edx, dword [eax + edi + 0x20]
jmp 0x1ec6412
ret
mov esp, ebp
pop ebp
jmp 0xf8918b
jmp 0x1ec9f04
je 0x1ee10e1
mov eax, 0x5a4d
cmp si, 0x7b00
test cx, bx
cmp esi, edx
cmp word [edi], ax
jmp 0x1ee10db
ja 0xf886a5
movsx ecx, cl
cmp ecx, edx
jmp 0x1eddda3
jl 0x1dc2337
jmp 0x1ecd2af
cmp byte [esi + 1], 0x23
cmova cx, bx
lea ecx, [esi + 1]
jmp 0x1ebcfb7
test edi, edi
je 0x1ee10e1
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x1ed449f
mov esp, ebp
pop ebp
jmp 0x1d7ddad
ret
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
ror cl, 0xe
dec cl
mov cl, byte [esi]
cmp bp, cx
test cl, cl
jmp 0xf8869f
je 0x1ec9efb
test eax, eax
jmp 0xf898cf
jle 0x1ecd2a3
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
jmp 0x1dc2337
je 0x1dc3dcb
xor eax, eax
mov di, sp
movzx edi, bp
pop edi
jmp 0x1dc0c5d