Function at 0xd6c903
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jne 0xd80475
pop esi
test cx, bp
add bx, 0x2b39
pop ebx
cmovge edi, ebx
bts di, di
sbb di, bx
sub eax, eax
movsx edi, bp
pop edi
jmp 0x1412d4e
ret
mov ebx, dword [eax + edi + 0x18]
cmp bp, 0x3d73
test ebx, ebx
jmp 0xd10e90
ret
je 0xd6fd1d
mov edx, dword [eax + edi + 0x20]
jmp 0xdc062f
jae 0xcf9339
mov edx, dword [eax + edi + 0x1c]
cmp si, dx
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
cmp si, ax
cmp edx, 0x205a345e
stc
test ecx, ecx
jne 0x10d1614
pop esi
xadd edi, edi
pop ebx
xor eax, eax
movzx edi, bp
pop edi
jmp 0x109ef3c
call fcn.00d6c903
add esp, 0xc
pop esi
mov bh, 0xc
cmovno ebx, esp
pop ebx
xchg di, di
pop edi
jmp 0xd8e5e9
jmp 0xfeb3b5
or esi, 0xffffffff
test di, 0x293b
mov dword [ebp - 0x10], edx
cmp ebx, esi
test sp, 0x2491
mov dword [ebp - 8], esi
stc
clc
cmp cx, 0x76c2
cmp ecx, 0xffff
ja 0xd0a1bc
sub ecx, dword [eax + edi + 0x10]
stc
test ebp, edi
cmp ecx, dword [eax + edi + 0x14]
jmp 0xd1d656
jmp 0xfeb3b5
test ecx, ecx
jbe 0xd7afda
lea ebx, [ebp - 0x114]
setae dl
sub ebx, eax
mov dl, byte [eax]
cmp ecx, esp
test bx, si
test dl, dl
jmp 0xfd4a3c
ret
mov byte [esi], al
jmp 0xfde168
mov ecx, esi
cmp esi, 0x2be135f6
cmp edi, ebx
cmc
sub ecx, eax
cmp ecx, 0x104
jmp 0xd5ce70
jne 0xfeb3b5
inc esi
jmp 0xff3926
push edx
mov eax, ecx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xd922d5
jl 0xd6fd1d
jmp 0xde7698
ret
jae 0xcf9339
mov dword [ebp + 8], 0
jmp 0xd2fa16
push ecx
push eax
jmp 0xd210d6
push ebx
push esi
cmp ebx, esi
test esi, ebx
jmp 0xd2d1fd
jne 0xd8c9f9
push 0
jmp 0xde3efd
push ebp
mov ebp, esp
cmp dh, 0xec
test bp, 0x3403
sub esp, 0x114
cmp ch, ah
clc
test esp, 0x38b5218c
push edi
mov edi, dword [ebp + 8]
test eax, esi
clc
test edi, edi
jmp 0x1071d1a
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0xd75214
jne 0xd922df
lea edx, [ebp - 0x114]
mov ax, 0x16ce
jmp 0xd3f2d5
jle 0xde768d
mov eax, dword [ebp - 4]
bswap si
cmp eax, edi
mov esi, dword [ebp - 8]
test si, 0x75c9
cmp esi, dword [eax + edi + 0x14]
jae 0xcf9339
mov ecx, dword [eax + edi + 0x1c]
add dx, 0x7ccf
lea edx, [ecx + esi*4]
mov cx, cx
xor cx, si
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0x10d160e
mov eax, dword [ebp + 0xc]
push eax
push edi
cwde
cbw
movzx eax, sp
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xda6fcd
je 0x10b6a8a
push 0
jmp 0xd60781
jb 0xd2fa29
mov eax, dword [ebp + 8]
mov cl, ah
bswap ecx
lea ecx, [ebp - 0x114]
jmp 0xd8c8a6
je 0xcf9339
mov edi, edi
test dl, 0x60
stc
cmp cl, 0x2e
jmp 0x1419ae2
push ecx
jmp 0xf9cacf
je 0xd67f89
mov bl, cl
sub bl, 0x30
jmp 0xdbfcee
mov esp, ebp
cmovbe ebp, ecx
pop ebp
jmp 0x1060b27
call eax
test eax, eax
je 0xcf9339
cmp eax, edi
jmp 0xfd2021
lea ebx, [esi - 1]
test ch, 0x43
stc
jmp 0xfeb3b5
call eax
pop esi
cmovae edi, ebp
jmp 0x10a3075
call eax
pop esi
bswap ebx
pop ebx
mov di, 0x5238
pop edi
jmp 0x140f943
inc esi
jmp 0xdc80ac
jb 0x104fa36
mov edx, dword [ebp - 0x10]
add edx, eax
cmp sp, 0x4f47
clc
cmp ecx, edx
jmp 0x108356d
jb 0xfa121c
lea eax, [ebp - 0x114]
jmp 0xfaadb2
inc esi
cmp bl, 9
ja 0xd67f89
movsx ecx, cl
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
shl cl, cl
mov cl, byte [esi]
stc
cmc
clc
test cl, cl
jmp 0xd67f83
dec ebx
stc
lea edx, [edx + edi]
cmp eax, 0x64384f43
mov dword [ebp + 8], 0
test al, 0xf5
clc
cmp bl, 0x11
mov dword [ebp - 0xc], edx
clc
cmp esp, 0x69ce4b25
stc
test ebx, ebx
jmp 0xd47e94
call fcn.00d6c903
add esp, 0xc
cmovge si, bx
not bx
mov edi, 0x76b47b72
pop esi
cmova bx, sp
pop ebx
pop edi
mov esp, ebp
bswap ebp
cmovne bp, si
pop ebp
jmp 0xd52063
test cl, cl
jmp 0xcf9333
mov dword [ebp + 8], edx
cmp esp, 0x2fb50d30
clc
cmp edx, ecx
jmp 0xd7afd4
pop edi
jmp 0xfb95e0
inc eax
jmp 0xdd5dce
mov cl, dl
rol eax, cl
btr esi, 0xd0
lea esi, [ebp + edx - 0x114]
add al, dl
test ebp, edx
cmp sp, dx
test bp, 0x4317
xor al, byte [ebx + esi]
jmp 0xd33330
push edx
jmp 0x10c0f2a
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
shrd ax, bp, 0xf5
mov eax, dword [ebp + 8]
rol esi, 0x4e
neg si
xchg esi, esi
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
test eax, esi
push eax
mov eax, ebp
xor ax, 0x64c0
sub ax, 0x3613
sar esi, 1
shr eax, cl
shl ah, cl
shr al, 0xcb
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x13e0d61
inc edx
jmp 0xdda6d8
mov byte [ebp + eax - 0x114], 0
cmove ax, bx
movzx eax, cx
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
test eax, eax
jmp 0xd6e5db
je 0xd73b48
mov ebx, dword [ebp + 0xc]
neg si
lea eax, [ebp - 0x114]
xchg esi, esi
mov cl, 0xeb
xor edx, edx
dec cl
sub ebx, eax
cwde
mov edi, edi
cwde
movzx eax, sp
mov eax, 0x14f87689
jmp 0xde1eb1
push eax
xchg ah, al
push edi
mov ax, di
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xdb40ec
ret
mov esp, ebp
pop ebp
jmp 0xfad8e3
jne 0xd6ce23
cmp byte [ebp + 0x10], 0
jmp 0xfa11f9
je 0xd7afda
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
jmp 0xf9c9f6
je 0xdbc126
inc edx
clc
cmp edx, 0x104
jmp 0xdbc120
test cl, cl
jmp 0xd80469
pop edi
jmp 0xff3358
cmp dword [ebp + 8], ebx
jmp 0xd6fd07
mov esp, ebp
pop ebp
jmp 0x10da067
mov dword [ebp + 8], esi
jmp 0xd27497
pop esi
pop ebx
lea eax, [ecx + edi]
jmp 0xdd6b35
je 0xda2559
test eax, eax
jmp 0x14180d6
ret
mov ecx, dword [ebp - 4]
mov ah, 0x29
bswap ax
cdq
mov edx, dword [ecx + edi + 0x24]
cwde
not eax
lea eax, [edx + esi*2]
movsx dx, bh
movzx ecx, word [eax + edi]
xchg dh, dh
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
jmp 0x1072335
mov esp, ebp
bswap bp
not bp
pop ebp
jmp 0xd0b363
je 0x10c5635
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x10c5635
mov eax, 0x5a4d
stc
clc
cmp word [edi], ax
jmp 0x10c562f
mov dword [ebp + 8], edx
jmp 0xd2dd14
pop ebp
jmp 0xd321bb
jae 0x104fa36
lea eax, [ecx + edi]
bts esi, eax
mov cl, byte [eax]
ror esi, 0xcf
test bl, 0x80
mov esi, eax
jmp 0xfe22b8
mov esp, ebp
jmp 0x10755ee
pop ebx
pop edi
jmp 0x106d155
mov cl, byte [esi + 2]
stc
add esi, 2
cmp bp, bp
cmp eax, 0x2b850e56
test ch, 0x8a
sub edx, edx
cmp ecx, 0x1f7110ef
cmp bp, dx
test cl, cl
jmp 0xd8c9f3
push eax
jmp 0xdc6bd4
je 0x140c700
xor eax, eax
jmp 0xfea380
je 0xcf9339
cmp ecx, eax
jmp 0xdb9ea5
ret
je 0x10c5635
mov edx, dword [edx + 0x7c]
jmp 0xd62273
call fcn.00de1ef2
add esp, 4
cmp eax, 0xffffffff
jmp 0x1058235
jne 0x10c5635
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
cmc
test eax, eax
jmp 0x13d7780
mov edx, dword [edi + 0x3c]
add edx, edi
cmp ebp, eax
cmp dword [edx], 0x4550
jmp 0x140c0a5
mov esp, ebp
pop ebp
jmp 0xcfde17
mov esp, ebp
pop ebp
ret
je 0x106ad27
cmp eax, 1
jmp 0xd3c805
je 0xd35916
mov cl, byte [esi + 1]
jmp 0xdb5f4c