Function at 0x22f6902
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
inc esi
clc
test al, ah
cmp ecx, eax
cmp bl, 9
ja 0x14bfb13
movsx ecx, cl
lea edx, [edx + edx*4]
cmc
lea edx, [ecx + edx*2 - 0x30]
rcl cl, 0x7f
mov cl, byte [esi]
cmc
stc
jmp 0x14bfb0b
lea edx, [ebx + 1]
jmp 0x13d6ba2
mov edx, dword [edi + 0x3c]
test bx, 0x2b8
lea edx, [edx + edi]
jmp 0x1156f4d
push ecx
jmp 0x144ecd5
push eax
cwde
push edi
bswap eax
lahf
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
call eax
pop esi
bswap bx
jmp 0x11305dc
mov ecx, dword [ebp - 4]
cmovae edx, ecx
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
mov dx, 0x3818
jmp 0x10d43fc
jle 0x112cff4
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmc
cmp esi, dword [eax + edi + 0x14]
jae 0x13e88f7
mov ecx, dword [eax + edi + 0x1c]
add dl, cl
bt dx, 0x3c
ror dx, cl
lea edx, [ecx + esi*4]
setne ch
or ch, 0x20
clc
mov ecx, dword [edx + edi]
cmp edx, esi
test ecx, ecx
jmp 0x1383862
pop ebx
xchg edi, edi
jmp 0x14217d1
mov esp, ebp
pop ebp
jmp 0x115e0c3
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0x10ff951
mov esp, ebp
pop ebp
jmp 0x22eae3f
je 0x11279e4
inc edx
cmp edx, 0x104
jb 0x1158e5b
lea eax, [ebp - 0x114]
jmp 0x10dc037
mov ecx, dword [ebp + 0xc]
adc ah, 0x5a
rcl edx, 0x35
test cx, cx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
or si, dx
lea esi, [ebx + eax]
mov ah, 0xfe
rcr ax, cl
xor ax, ax
mov eax, dword [ebp + 0x10]
test edi, 0x4f526649
push eax
movsx eax, si
sar esi, 1
add ah, 0x63
adc eax, esi
shr eax, cl
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x13d8e07
jne 0x13a64ea
lea edx, [ebp - 0x114]
bswap ax
mov ax, 0x1cb7
push edx
bswap eax
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA]
jmp 0x13a64e0
pop ebx
pop edi
jmp 0x1387c03
jl 0x10ff95e
jmp 0x112d003
call fcn.022f6902
add esp, 0xc
pop esi
jmp 0x1101a75
cmp dword [edx], 0x4550
jmp 0x13fa8c5
je 0x22f5caa
mov ebx, dword [ebp + 0xc]
neg esi
cmp ecx, 0x7d905241
lea eax, [ebp - 0x114]
xor edx, edx
sub ebx, eax
rol cl, cl
mov edi, edi
xchg si, ax
mov eax, 0xc4e6cb9
rcr cl, 0x6d
bts si, ax
mov cl, dl
btc si, bx
rol eax, cl
sbb esi, 0x68fa5d1b
lea esi, [ebp + edx - 0x114]
add al, dl
xor al, byte [ebx + esi]
jmp 0x145a8a0
ret
jmp 0x11078fc
je 0x13e88f7
cmp ecx, eax
jmp 0x143489a
call eax
pop esi
movzx edi, sp
pop ebx
bswap edi
pop edi
mov esp, ebp
bswap bp
pop ebp
jmp 0x1491093
pop esi
setb bh
movzx ebx, ax
pop ebx
lea eax, [ecx + edi]
bswap edi
pop edi
jmp 0x13b46f8
mov esp, ebp
mov ebp, ebp
pop ebp
jmp 0x14bb593
inc edx
inc eax
jmp 0x14bfe2f
ret
jmp 0x11078fc
call eax
test eax, eax
je 0x13e88f7
cmp eax, edi
jmp 0x1443f8f
mov esp, ebp
xchg ebp, ebp
not ebp
pop ebp
ret
mov esp, ebp
mov ebp, edx
movsx ebp, dx
pop ebp
jmp 0x13a47eb
mov cl, byte [esi + 2]
add esi, 2
sub edx, edx
clc
test cl, cl
jmp 0x13e6e26
je 0x13b6e7d
push 0
jmp 0x10d9db9
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0x1401576
je 0x13e88f7
mov edi, edi
cmp cl, 0x2e
jmp 0x1442331
mov dword [ebp - 8], ecx
jmp 0x1447864
ret
call fcn.013cd4b6
add esp, 4
stc
cmp eax, 0xffffffff
je 0x11078f9
test eax, eax
je 0x10ff442
cmp eax, 1
jmp 0x14aedb3
test edi, edi
jmp 0x14c1481
jae 0x13e88f7
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0x1443d59
dec ebx
cmp cx, sp
stc
lea edx, [edx + edi]
stc
cmp sp, 0x137b
mov dword [ebp + 8], 0
cmc
test eax, 0x35bc3ce8
mov dword [ebp - 0xc], edx
stc
test eax, 0x1b5721ae
jmp 0x22f5ca3
push eax
push edi
lahf
cbw
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0x1384a6b
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x13c0845
mov ecx, esi
sub ecx, eax
cmc
clc
stc
cmp ecx, 0x104
jmp 0x13dc058
je 0x14bfb13
mov bl, cl
cmp edx, 0x745171db
stc
test edx, eax
sub bl, 0x30
jmp 0x10d221d
inc esi
test cl, cl
jne 0x13d171c
pop esi
pop ebx
clc
shrd di, bx, 0x60
add di, 0x6860
sub eax, eax
pop edi
jmp 0x1101bce
pop ebx
pop edi
jmp 0x231ac1a
jb 0x1443d6d
mov eax, dword [ebp + 8]
xchg ecx, ecx
not ecx
lea ecx, [ebp - 0x114]
jmp 0x142ce3d
jne 0x14be33e
mov eax, dword [edx + 0x78]
stc
mov dword [ebp - 4], eax
cmp sp, sp
test eax, eax
jmp 0x144ad40
mov esp, ebp
pop ebp
jmp 0x1421007
je 0x10ff95e
mov edx, dword [eax + edi + 0x20]
jmp 0x13dccce
push edx
jmp 0x1493c8b
ret
pop edi
jmp 0x1109294
push ecx
jmp 0x14bbb7e
jb 0x1385e57
mov edx, dword [ebp - 0x10]
lea edx, [edx + eax]
cmp ebp, 0x44a96028
clc
test esi, 0xfc673de
cmp ecx, edx
jae 0x1385e57
lea eax, [ecx + edi]
sal cl, cl
mov cl, byte [eax]
mov esi, eax
cmp ah, 0xa5
cmp bx, bp
test cl, cl
jmp 0x13d1714
je 0x13e68e7
mov cl, byte [esi + 1]
jmp 0x13e88ee
jbe 0x13f0b1e
lea ebx, [ebp - 0x114]
cmc
mov dl, 0xfe
sub ebx, eax
shr dl, 0xef
mov dl, byte [eax]
test dl, dl
je 0x13f0b1e
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
jmp 0x1398aad
jne 0x13e5c99
cmp byte [ebp + 0x10], 0
jmp 0x1158e3a
mov dword [ebp + 8], edx
jmp 0x116396a
je 0x14be33e
mov edx, dword [edx + 0x7c]
push ebx
clc
push esi
cmc
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
test cl, 0x60
test esi, ebp
mov dword [ebp - 8], esi
cmc
cmp ecx, 0xffff
ja 0x13c5502
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0x23209ee
push eax
jmp 0x1154daf
mov dword [ebp + 8], esi
jmp 0x13a5c6a
mov byte [esi], al
jmp 0x11279d1
ret
push eax
call fcn.022f6902
add esp, 0xc
not di
pop esi
jmp 0x13ed271
jne 0x1383868
pop esi
movzx edi, bp
bt edi, 0
pop ebx
bt edi, 0xc1
sub edi, edx
sub eax, eax
bswap edi
xchg edi, edi
movzx edi, bp
pop edi
jmp 0x13b1faa
pop edi
jmp 0x13fd164
jne 0x11078fc
inc esi
jmp 0x145a359
ret
mov byte [ebp + eax - 0x114], 0
xchg al, ah
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA]
call eax
test eax, eax
jmp 0x112e6a7
je 0x14be33e
mov eax, 0x5a4d
cmc
cmp word [edi], ax
je 0x10d967b
xor eax, eax
jmp 0x14a7f56
test cl, cl
jne 0x13e6e2c
push 0
jmp 0x14189a5
mov dword [ebp + 8], edx
stc
cmp edx, ecx
jmp 0x13f0b18
je 0x14be33e
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x14be329
ret
test ebx, ebx
jmp 0x113718e
mov eax, dword [ebp + 0xc]
jmp 0x13df266
push ebp
mov ebp, esp
clc
sub esp, 0x114
test bp, di
clc
push edi
or di, cx
mov edi, dword [ebp + 8]
jmp 0x13db3ec
mov esp, ebp
movsx ebp, ax
pop ebp
jmp 0x13d8cef
jae 0x13e88f7
mov edx, dword [eax + edi + 0x1c]
cmp esi, 0x3a4849b0
cmc
lea ecx, [edx + ecx*4]
test al, 0x7d
cmp cl, 9
mov ecx, dword [ecx + edi]
cmc
cmp bl, 0x6f
test ecx, ecx
jmp 0x149c6fe