Function at 0xef4ca7
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xef2686
jmp 0xefa2b1
jne 0xfb7ef6
mov eax, dword [edx + 0x78]
jmp 0xef9bbb
jae 0xfadb0f
mov dword [ebp + 8], 0
stc
test ecx, ecx
jbe 0xfbe269
lea ebx, [ebp - 0x114]
sub ebx, eax
xadd dl, dl
jmp 0xf9959d
push edx
setno ah
lahf
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
test eax, eax
je 0xfadb0f
cmp eax, edi
jne 0xef74a1
cmp byte [ebp + 0x10], 0
jmp 0xfabb91
je 0xfb7ef6
mov edx, dword [edx + 0x7c]
clc
jmp 0xef9003
ja 0xf96baf
sub ecx, dword [eax + edi + 0x10]
test esp, 0x72c53e34
stc
cmp ecx, dword [eax + edi + 0x14]
jmp 0xef45ef
je 0xfb7ef6
mov eax, 0x5a4d
cmp word [edi], ax
jmp 0xfb7ef0
call eax
test eax, eax
jmp 0xfbb29f
mov esp, ebp
pop ebp
jmp 0xef3259
jb 0xfabbba
lea eax, [ebp - 0x114]
jmp 0xef5083
mov cl, byte [esi + 2]
test si, sp
lea esi, [esi + 2]
test sp, di
xor edx, edx
cmp ch, 0x75
test bh, 0x16
test cl, cl
jmp 0xfb38f9
mov dword [ebp + 8], esi
jmp 0xb10d8f
je 0xf9b257
cmp eax, 1
jne 0xefa2b1
inc esi
jmp 0xeefdf4
cmp esi, dword [eax + edi + 0x14]
jae 0xfadb0f
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
ror ecx, cl
xadd ch, cl
rcl ch, cl
mov ecx, dword [edx + edi]
clc
test ecx, ecx
jmp 0xefb6b5
call eax
pop esi
bswap ebx
cmove edi, ecx
mov bx, dx
pop ebx
pop edi
jmp 0xef28c0
mov esp, ebp
movsx ebp, cx
pop ebp
ret
ret
push ecx
jmp 0xfa4c86
mov esp, ebp
pop ebp
jmp 0xf94c3d
jae 0xfadb0f
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
test esp, edi
jmp 0xf97fef
push ebp
mov ebp, esp
test ecx, esp
cmc
clc
lea esp, [esp - 0x114]
test edi, 0x4cd72ad9
test dx, ax
cmp bl, al
push edi
sar edi, 0x97
shr edi, 0x1d
mov edi, dword [ebp + 8]
test edi, edi
jmp 0xfae483
push eax
movzx eax, sp
cbw
xchg ah, ah
push edi
movsx eax, bp
bswap eax
jmp 0xb10198
jl 0xef22a7
jmp 0xf93690
mov esp, ebp
mov ebp, 0x492d775b
pop ebp
jmp 0xefa2cb
jle 0xf93680
mov eax, dword [ebp - 4]
bts esi, ecx
mov esi, dword [ebp - 8]
cmp bx, 0x6870
jmp 0xef22a7
ret
cmp byte [esi + 1], 0x23
cmovnp cx, dx
mov cx, 0x6c98
lea ecx, [esi + 1]
jmp 0xfa510c
push eax
jmp 0xf97c5c
jae 0xfb5444
lea eax, [ecx + edi]
movsx esi, di
not esi
xor cl, 1
mov cl, byte [eax]
shl esi, 0xb5
mov esi, eax
stc
test cl, cl
jmp 0xfb8f77
add al, dl
cmp bp, 0x5d7a
cmp bl, ch
clc
xor al, byte [ebx + esi]
mov byte [esi], al
je 0xeee5a8
inc edx
cmp edx, 0x104
jmp 0xeee5a2
push ebx
cmp bp, 0x1e8a
cmc
push esi
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
test di, 0x2bc8
mov dword [ebp - 8], esi
cmp bh, 0xe3
test cl, cl
cmp ax, cx
cmp ecx, 0xffff
jmp 0xeeb497
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0xef9997
jmp 0xefa2b1
mov dword [ebp - 4], eax
test eax, eax
jmp 0xb99a1e
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0xef6bba
ret
jne 0xefb6bb
pop esi
xor ebx, 0x7fbb6e3b
sal di, 0x47
pop ebx
shld di, dx, 0x46
sub eax, eax
movsx edi, sp
not di
pop edi
mov esp, ebp
cmovae bp, sp
mov ebp, 0x4c550e74
pop ebp
jmp 0xef6c43
je 0xfb5f34
mov cl, byte [esi + 1]
jmp 0xfadafd
je 0xfadb0f
cmp ecx, eax
jb 0xfb5444
mov edx, dword [ebp - 0x10]
clc
add edx, eax
stc
cmp si, 0x45ae
cmp ecx, edx
jmp 0xef7bb5
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xeede7f
ja 0xfa4af6
movsx ecx, cl
stc
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
test cl, cl
jmp 0xfa4af0
inc eax
mov dword [ebp + 8], edx
cmc
stc
cmp edx, ecx
jmp 0xfbe263
mov esp, ebp
movsx ebp, bp
cmovns ebp, ecx
pop ebp
ret
mov ecx, dword [ebp + 0xc]
sbb dh, 0x49
mov edx, dword [ebp - 0xc]
btr esi, esi
movsx ax, bh
mov eax, dword [ebp + 8]
bt esi, esp
lea esi, [ebx + eax]
btr ax, 0x4f
jmp 0xfb6ebc
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xfb08bc
ret
push eax
jmp 0xf96b92
call fcn.00ef4ca7
add esp, 0xc
not di
pop esi
movzx ebx, sp
mov ebx, esi
pop ebx
not edi
movzx edi, dx
pop edi
jmp 0xef4298
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
je 0xef22a7
mov edx, dword [eax + edi + 0x20]
dec ebx
add edx, edi
stc
cmp bx, 0x16d
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0xef55e7
je 0xfbe269
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
inc edx
jmp 0xf8e646
add edx, edi
cmp ebp, 0x2db04bdf
cmc
cmp dword [edx], 0x4550
jmp 0xb117df
call fcn.00ef4ca7
add esp, 0xc
movsx edi, ax
cmovs edi, edx
pop esi
pop ebx
xchg di, di
pop edi
jmp 0xef56df
mov ecx, dword [ecx + edi]
stc
test si, cx
test ecx, ecx
jmp 0xefade7
mov dl, byte [eax]
test edx, edx
stc
test dl, dl
jmp 0xf96c6f
ret
mov ecx, dword [ebp - 4]
movsx eax, cx
mov edx, dword [ecx + edi + 0x24]
xchg cl, ch
cmovno eax, edx
movzx ecx, di
lea eax, [edx + esi*2]
mov dl, 0xd2
xchg dl, dl
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0xef9682
jne 0xfb38ff
push 0
jmp 0xfbafe7
mov byte [ebp + eax - 0x114], 0
cbw
jmp 0xefb74d
je 0xeefd97
push 0
push ecx
jmp 0xf95a97
test ecx, ecx
jmp 0xeec2fe
push eax
cwde
cbw
push edi
setnp al
not eax
jmp 0xf93872
call fcn.00eef531
add esp, 4
test ebx, ecx
cmp eax, 0xffffffff
je 0xefa2ae
test eax, eax
jmp 0xef1876
je 0xfade82
mov ebx, dword [ebp + 0xc]
lahf
lea eax, [ebp - 0x114]
rol cl, 0x59
xor edx, edx
test cx, sp
not cl
sub ebx, eax
not esi
mov eax, 0x25ec6568
cwde
mov edi, edi
movzx eax, bp
mov eax, 0x4809380d
mov cl, dl
rol esi, 0xdc
cmc
rol eax, cl
add esi, 0x6460572e
dec si
sub si, 0x531d
lea esi, [ebp + edx - 0x114]
jmp 0xef8626
mov edx, dword [edi + 0x3c]
test ax, si
test ebp, 0x29159a4
jmp 0xf97230
inc esi
cmp ecx, 0x7b1b100f
test dx, di
test cl, cl
jne 0xfb8f7f
pop esi
pop ebx
or di, dx
xor eax, eax
mov edi, 0x7e791ce2
mov edi, esp
pop edi
jmp 0xf8ff83
mov eax, dword [ebp + 0xc]
jmp 0xfaaa63
je 0xfb7ef6
mov ecx, dword [ebp + 0xc]
jmp 0xfa9b25
pop edi
jmp 0xeee4a3
call eax
pop esi
movzx ebx, cx
xchg ebx, edi
pop ebx
not edi
pop edi
jmp 0xfb638f
je 0xfa4af6
mov bl, cl
cmp ch, ch
test esp, esi
cmp ebx, 0x22820e02
sub bl, 0x30
jmp 0xfc0bf1
pop esi
pop ebx
movzx eax, ax
not ah
lea eax, [ecx + edi]
jmp 0xfaea0f
mov ecx, esi
cmp ax, bp
test di, bx
sub ecx, eax
cmp bh, 0x7a
cmp ecx, 0x104
jmp 0xb11b44
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
test cx, sp
push eax
btc ax, 0x24
sar esi, 1
add ah, 0xa9
mov eax, dword [edx + esi*4]
test edi, 0x174d1879
add eax, edi
jmp 0xfaae12
je 0xfad3e0
xor eax, eax
mov edi, 0x28553149
pop edi
jmp 0xfbea44
je 0xfadb0f
mov edi, edi
cmp cl, 0x2e
jmp 0xefb326
push edx
jmp 0xef7b4d
jne 0xb98b3f
lea edx, [ebp - 0x114]
not ah
movsx eax, ax
jmp 0xb98b2b
jb 0xf9959d
mov eax, dword [ebp + 8]
movzx ecx, dx
bswap cx
lea ecx, [ebp - 0x114]
jmp 0xef3ffd
mov esp, ebp
mov bp, 0x6a9c
movzx ebp, bp
mov bp, bp
pop ebp
jmp 0xf99fed
inc esi
stc
clc
cmp bl, 9
jmp 0xf8e301