Function at 0xe593c1
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
inc edx
jmp 0xe47bc4
push edx
not ah
mov ax, sp
cmovp ax, di
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA]
jmp 0xeb5920
ja 0xccb100
movsx ecx, cl
cmp cx, 0x164d
cmc
test bp, 0x5ff3
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
sal cl, cl
mov cl, byte [esi]
test cl, cl
jmp 0xccb0fa
push ecx
jmp 0x91df1c
je 0x920309
xor eax, eax
pop edi
jmp 0xcddd1b
mov byte [ebp + eax - 0x114], 0
bswap eax
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA]
jmp 0xcdf3bb
mov edx, dword [edi + 0x3c]
test si, bx
test cl, 0x24
add edx, edi
cmp dword [edx], 0x4550
jne 0x91d8da
mov eax, dword [edx + 0x78]
jmp 0xd34a73
xor al, byte [ebx + esi]
jmp 0xea9b32
ret
mov ecx, dword [ebp - 4]
cwde
mov edx, dword [ecx + edi + 0x24]
movzx ecx, si
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0xcfe96e
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
cmp di, 0xcee
mov eax, dword [ebp + 8]
not si
lea esi, [ebx + eax]
rcr ax, cl
xor eax, 0x7a6f4eab
mov eax, dword [ebp + 0x10]
push eax
ror al, cl
btc ax, bx
ror eax, 0xee
sar esi, 1
add eax, 0x280f2511
sbb al, al
xchg al, ah
mov eax, dword [edx + esi*4]
jmp 0xeb0d9b
je 0x92646f
cmp eax, 1
jmp 0xd30760
call fcn.00e593c1
add esp, 0xc
pop esi
pop ebx
pop edi
jmp 0xd49148
dec ebx
cmp dx, si
jmp 0xe15458
je 0xe209c5
test eax, eax
jmp 0x94130a
ret
je 0xea1411
mov cl, byte [esi + 1]
jmp 0xec3f9f
cmp eax, 0xffffffff
jmp 0x96a89c
push esi
stc
jmp 0xcd3faa
jne 0xccc1c8
cmp byte [ebp + 0x10], 0
jmp 0xed4a20
jne 0xd18c5a
push 0
jmp 0xe2db29
pop ebp
jmp 0x96c913
cmp byte [esi + 1], 0x23
movzx ecx, di
lea ecx, [esi + 1]
jmp 0xd48cbf
ret
or esi, 0xffffffff
stc
cmc
cmp ebx, ebp
mov dword [ebp - 0x10], edx
cmp esp, edi
stc
mov dword [ebp - 8], esi
clc
cmp ecx, 0xffff
jmp 0xd4649f
ret
jb 0xe8bf0a
mov eax, dword [ebp + 8]
not cl
lea ecx, [ebp - 0x114]
jmp 0x914b65
mov esp, ebp
bswap ebp
pop ebp
jmp 0xe3d427
call eax
test eax, eax
jne 0xdffa00
lea edx, [ebp - 0x114]
cbw
jmp 0x90fca3
jb 0xcf4b04
mov edx, dword [ebp - 0x10]
lea edx, [edx + eax]
cmp ecx, edx
jae 0xcf4b04
lea eax, [ecx + edi]
mov cl, byte [eax]
movsx esi, di
add esi, eax
mov esi, eax
cmc
test cl, cl
jmp 0xdfc373
pop esi
xchg bh, bh
movsx ebx, cx
pop ebx
setno al
cwde
cmove ax, cx
lea eax, [ecx + edi]
pop edi
mov esp, ebp
mov bp, 0x5dd7
pop ebp
jmp 0xcd01c3
pop edi
jmp 0xe9a369
mov dword [ebp + 8], esi
jmp 0xe209c9
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0xe209c9
jl 0xd50a1f
jmp 0x937b6a
je 0xccb100
mov bl, cl
sub bl, 0x30
jmp 0xe9bd8d
push eax
call fcn.00e593c1
add esp, 0xc
mov di, di
jmp 0xe5f32b
jne 0xe209c9
inc esi
jmp 0xcfccb6
mov dword [ebp - 4], eax
test eax, eax
je 0x91d8da
mov edx, dword [edx + 0x7c]
clc
push ebx
jmp 0xcbb74a
jne 0xdfc37b
pop esi
bt di, sp
rcr bh, 0x34
sar bl, cl
pop ebx
mov di, 0x4289
bsr di, cx
xor eax, eax
pop edi
mov esp, ebp
movsx ebp, sp
movzx ebp, sp
pop ebp
jmp 0x924b27
ret
lea esp, [esp - 0x114]
push edi
test ebx, esi
shrd edi, edx, 0xba
mov edi, dword [ebp + 8]
jmp 0xe43f3d
ja 0xe8a0b9
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jae 0xd3b3d6
mov edx, dword [eax + edi + 0x1c]
cmp ecx, eax
lea ecx, [edx + ecx*4]
stc
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0xeac5d4
je 0xdf0b44
push 0
push ecx
push eax
jmp 0x9599f7
mov esp, ebp
pop ebp
jmp 0xcd876f
call fcn.00cd1c5b
add esp, 4
test dh, 0xf1
jmp 0x97cbc4
jle 0x937b5f
mov eax, dword [ebp - 4]
bt si, 0xd6
sub si, 0x2c4a
mov esi, dword [ebp - 8]
cmp esp, esi
cmc
cmp esi, dword [eax + edi + 0x14]
jmp 0xdf2881
je 0xd3b3d6
cmp ecx, eax
jmp 0xcf328d
mov cl, byte [esi + 2]
cmc
lea esi, [esi + 2]
test di, ax
sub edx, edx
cmc
cmp edx, 0x48ab1849
test cl, cl
jmp 0xd18c54
jae 0xd3b3d6
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
add cx, bp
mov ecx, dword [edx + edi]
cmp bl, 0xe8
test ecx, ecx
jmp 0xd59dd6
je 0xd3b3d6
mov edi, edi
cmp cl, 0x2e
jmp 0x9777ec
jae 0xd3b3d6
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0xe8bef9
je 0xd3b3d6
cmp eax, edi
jmp 0xcbfb8a
add edx, edi
mov dword [ebp + 8], 0
cmc
clc
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0xd08e32
je 0x91d8da
mov eax, 0x5a4d
cmp word [edi], ax
jmp 0x91d8d4
call eax
pop esi
pop ebx
xchg di, di
jmp 0xcf68f5
call eax
pop esi
pop ebx
pop edi
jmp 0xe2d55e
lea ebx, [esi - 1]
clc
cmp dword [ebp + 8], ebx
jmp 0xd50a06
mov edx, dword [ebp + 8]
jmp 0x903023
mov esp, ebp
jmp 0xe652c6
push edx
jmp 0xd1c532
je 0xd50a1f
mov edx, dword [eax + edi + 0x20]
jmp 0x9635ef
ret
test edi, edi
jmp 0xe557ae
inc eax
mov dword [ebp + 8], edx
stc
cmp edx, ecx
jmp 0xcdc368
je 0x91d8da
mov ecx, dword [ebp + 0xc]
clc
test dl, dh
test ecx, ecx
jmp 0xe1b076
mov eax, dword [ebp + 0xc]
push eax
movsx eax, sp
push edi
bswap eax
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0xe1b2c4
push ebp
mov ebp, esp
jmp 0xd463d0
pop esi
sets bl
mov bx, 0x4ca4
pop ebx
pop edi
jmp 0xea13ef
pop ebp
jmp 0xd3ddff
mov ebx, dword [eax + edi + 0x18]
stc
clc
cmc
test ebx, ebx
jmp 0xe3767d
jbe 0xcdc36e
lea ebx, [ebp - 0x114]
setl dl
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0xea5af8
mov esp, ebp
jmp 0xccbca8
inc esi
cmp bl, 9
jmp 0x912c5d
mov esp, ebp
pop ebp
ret
mov ecx, esi
stc
test esp, esi
sub ecx, eax
stc
test edx, ecx
cmp ecx, 0x104
jmp 0xdfcf96
je 0xea3cf2
inc edx
cmp edx, 0x104
jb 0xed4a40
lea eax, [ebp - 0x114]
push eax
nop
push edi
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress]
jmp 0xe1c16f
je 0xcdc36e
mov byte [ebx + eax], dl
jmp 0xe2d4a0
mov byte [esi], al
jmp 0xea3cdf
jne 0xd59ddc
pop esi
adc edi, 0x5b6249dc
pop ebx
sub eax, eax
mov di, di
pop edi
mov esp, ebp
movzx ebp, di
pop ebp
ret
add eax, edi
jmp 0xd4e953
call eax
test eax, eax
jmp 0xdff9fa
inc esi
test bh, 0x5a
cmp bh, 0xe4
clc
test cl, cl
jmp 0xd3b3d0
je 0xe58f6f
mov ebx, dword [ebp + 0xc]
or cl, 0xa3
inc si
lea eax, [ebp - 0x114]
sub edx, edx
sub ebx, eax
btc si, 0x76
mov edi, edi
mov eax, 0x273428e1
rcl cl, cl
mov cl, dl
rol si, 0xb8
rol eax, cl
movsx esi, si
add esi, ebx
test bl, cl
lea esi, [ebp + edx - 0x114]
stc
add al, dl
test edx, edi
jmp 0x923ed0