Function at 0x4ec7fcb4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc0
mov eax, dword [section..data]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x54]
mov dword [ebp - 0x94], eax
add eax, 0x24
add ecx, edx
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x88], ecx
mov ecx, dword [eax + 0x18]
push esi
mov esi, dword [ebp + 0x10]
add ecx, edx
push edi
mov edi, dword [eax + 0x10]
mov dword [ebp - 0x98], ecx
mov ecx, dword [eax + 0x68]
add edi, edx
test ecx, ecx
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], edi
je 0x4ecadb0a
add ecx, edx
mov dword [ebp - 0x90], ecx
mov eax, dword [eax + 0x40]
test eax, eax
je 0x4ecadb16
add eax, edx
mov dword [ebp - 0x9c], eax
mov eax, dword [esi]
mov dword [ebx], eax
mov eax, dword [ebp - 0x88]
xor ecx, ecx
mov ch, byte [eax + 4]
mov cl, byte [eax + 5]
mov dword [ebx + 4], 0x7c
mov dword [ebx + 0x6c], ecx
cmp dword [esi + 0x14], 0
jne 0x4ecce270
mov eax, dword [esi + 0xc]
add eax, 0x7e
mov dword [ebx + 0x10], eax
mov eax, dword [esi + 0x2c]
mov ecx, dword [ebx + 0x10]
add eax, ecx
mov dword [ebx + 0xc], eax
mov ecx, dword [esi + 0x34]
lea eax, [eax + ecx + 2]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x94]
cmp word [eax + 0xe6], 0x300
jne 0x4ecce4ef
movzx eax, word [eax + 0xe8]
cmp ax, 0x400
je 0x4ecadb22
cmp ax, 0x500
je 0x4ecadb22
cmp ax, 0x300
je 0x4ecadb22
mov eax, dword [esi + 0xc]
shr eax, 1
push eax
mov eax, dword [ebx + 4]
push dword [esi + 8]
add eax, ebx
push eax
call fcn.4ec7daa5
mov ecx, dword [esi + 0x14]
test ecx, ecx
jne 0x4ecce4a0
mov eax, dword [esi + 0x34]
shr eax, 1
push eax
mov eax, dword [ebx + 0xc]
push dword [esi + 0x30]
add eax, ebx
push eax
call fcn.4ec7daa5
mov eax, dword [esi + 0x2c]
shr eax, 1
push eax
mov eax, dword [ebx + 0x10]
push dword [esi + 0x28]
add eax, ebx
push eax
call fcn.4ec7daa5
mov eax, dword [esi + 0x24]
shr eax, 1
push eax
mov eax, dword [ebx + 8]
push dword [esi + 0x20]
add eax, ebx
push eax
call fcn.4ec7daa5
mov eax, dword [ebp - 0x94]
mov dword [ebx + 0x20], 0xa8071
cmp dword [eax + 0xc4], 0
jne 0x4ecce574
lea ecx, [ebp - 0x8c]
push ecx
push eax
push 0x47495344
call fcn.4ec7d7c0
test eax, eax
je 0x4ec7fe51
cmp dword [ebp - 0x8c], 0
je 0x4ec7fe51
mov dword [ebx + 0x20], 0xe8071
mov ax, word [esi + 0x10]
and word [ebx + 0x28], 0
mov word [ebx + 0x26], ax
cmp dword [esi + 0x14], 0
jne 0x4ecce59d
mov eax, dword [ebp - 0x90]
test eax, eax
je 0x4ec7fe92
movzx edx, byte [eax + 0xe]
xor ecx, ecx
mov ch, byte [eax + 0xc]
mov cl, byte [eax + 0xd]
movzx eax, byte [eax + 0xf]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
jne 0x4ecce5ae
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
call fcn.4ec7f635
mov word [ebx + 0x24], ax
mov word [ebp - 0xa4], ax
xor eax, eax
mov ah, byte [edi + 0x12]
xor ecx, ecx
mov al, byte [edi + 0x13]
mov word [ebx + 0x2a], ax
mov eax, dword [ebp - 0x98]
mov ch, byte [eax + 4]
mov cl, byte [eax + 5]
mov word [ebx + 0x30], cx
xor ecx, ecx
mov ch, byte [eax + 6]
mov cl, byte [eax + 7]
mov word [ebx + 0x32], cx
xor ecx, ecx
mov ch, byte [eax + 8]
mov cl, byte [eax + 9]
mov eax, dword [ebp - 0x9c]
test eax, eax
mov word [ebx + 0x34], cx
je 0x4ecce5b7
xor ecx, ecx
mov ch, byte [eax + 0x4a]
mov cl, byte [eax + 0x4b]
mov word [ebx + 0x2c], cx
xor ecx, ecx
mov ch, byte [eax + 0x4c]
mov cl, byte [eax + 0x4d]
mov word [ebx + 0x2e], cx
xor ecx, ecx
mov ch, byte [eax + 0x44]
mov cl, byte [eax + 0x45]
mov word [ebx + 0x36], cx
xor ecx, ecx
mov ch, byte [eax + 0x46]
mov cl, byte [eax + 0x47]
mov word [ebx + 0x38], cx
xor ecx, ecx
mov ch, byte [eax + 0x48]
mov cl, byte [eax + 0x49]
mov word [ebx + 0x3a], cx
movzx edx, byte [edi + 0x25]
xor ecx, ecx
mov ch, byte [edi + 0x24]
movsx ecx, cx
or ecx, edx
mov dword [ebx + 0x5c], ecx
movzx edx, byte [edi + 0x2b]
xor ecx, ecx
mov ch, byte [edi + 0x2a]
movsx ecx, cx
or ecx, edx
mov dword [ebx + 0x60], ecx
movzx edx, byte [edi + 0x29]
xor ecx, ecx
mov ch, byte [edi + 0x28]
movsx ecx, cx
or ecx, edx
mov dword [ebx + 0x64], ecx
movzx edx, byte [edi + 0x27]
xor ecx, ecx
mov ch, byte [edi + 0x26]
movsx ecx, cx
or ecx, edx
mov dword [ebx + 0x68], ecx
mov cx, word [ebx + 0x64]
sub cx, word [ebx + 0x5c]
test eax, eax
mov word [ebx + 0x3e], cx
je 0x4ecce5ea
xor edx, edx
mov dh, byte [eax + 2]
movzx ax, byte [eax + 3]
mov dword [ebp - 0xa8], eax
mov eax, edx
mov edx, dword [ebp - 0xa8]
or eax, edx
test ax, ax
mov word [ebx + 0x3c], ax
je 0x4ecce5e0
movsx ecx, word [ebx + 0x2a]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mov word [ebx + 0x40], ax
mov eax, ecx
push 4
cdq
pop ecx
idiv ecx
mov ecx, dword [ebp - 0x90]
test ecx, ecx
mov word [ebx + 0x42], ax
je 0x4ecce5fe
xor eax, eax
mov ah, byte [ecx + 0xa]
mov al, byte [ecx + 0xb]
mov word [ebx + 0x44], ax
xor eax, eax
mov ah, byte [ecx + 8]
mov al, byte [ecx + 9]
mov word [ebx + 0x46], ax
mov eax, dword [ebp - 0x9c]
test eax, eax
je 0x4ecce627
xor edx, edx
mov dh, byte [eax + 0x1a]
mov dl, byte [eax + 0x1b]
mov word [ebx + 0x48], dx
xor edx, edx
mov dh, byte [eax + 0x1c]
mov dl, byte [eax + 0x1d]
mov word [ebx + 0x4a], dx
test eax, eax
je 0x4ecce66b
movzx dx, byte [eax + 5]
xor ecx, ecx
mov ch, byte [eax + 4]
or ecx, edx
cmp cx, 0xa
mov word [ebx + 0x1c], cx
jb 0x4ecce64e
mov ecx, dword [ebp - 0x90]
lea esi, [eax + 0x20]
lea edi, [ebx + 0x70]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp byte [ebx + 0x73], 9
mov esi, dword [ebp - 0xac]
je 0x4ecce662
and dword [ebx + 0x50], 0
mov eax, dword [ebp - 0x98]
xor edx, edx
mov dword [ebx + 0x4c], 1
mov dh, byte [eax + 0x14]
movzx edi, byte [eax + 0x15]
movsx edx, dx
or edx, edi
mov dword [ebx + 0x54], edx
xor edx, edx
mov dh, byte [eax + 0x12]
movzx eax, byte [eax + 0x13]
xor edi, edi
movsx edx, dx
or edx, eax
cmp ecx, edi
mov dword [ebx + 0x58], edx
je 0x4ecadb3d
movzx edx, byte [ecx + 6]
xor eax, eax
mov ah, byte [ecx + 4]
mov al, byte [ecx + 5]
movzx ecx, byte [ecx + 7]
shl eax, 8
or eax, edx
shl eax, 8
or ecx, eax
lea eax, [ecx + ecx*4]
shl eax, 1
sar eax, 0x10
movsx eax, ax
mov dword [ebx + 0x18], eax
mov esi, dword [esi + 4]
cmp esi, edi
mov dword [ebx + 0x14], esi
je 0x4ecce6c6
lea ecx, [esi + ebx]
mov esi, dword [ebp - 0xa4]
and esi, 0x21
xor edx, edx
xor eax, eax
sub esi, edi
mov dword [ebp - 0x98], edi
jne 0x4ecadae2
lea eax, [ecx + 0x20]
mov dword [ebp - 0x98], eax
mov dword [ecx], 0xc
mov dword [ecx + 4], 0x20
mov dword [ecx + 8], 0x34
lea edx, [ecx + 0xc]
lea eax, [ecx + 0x34]
mov cl, byte [ebx + 0x72]
mov byte [ebp - 0xbd], cl
mov cx, word [ebx + 0x1c]
mov word [ebp - 0xbc], cx
mov cx, word [ebx + 0x24]
and cx, 0xffbf
test edx, edx
mov word [ebp - 0xba], cx
mov cx, word [ebx + 0x3c]
mov word [ebp - 0xb8], cx
mov cx, word [ebx + 0x3e]
mov word [ebp - 0xb6], cx
mov ecx, dword [ebx + 0x54]
mov dword [ebp - 0xb4], ecx
mov ecx, dword [ebx + 0x58]
mov byte [ebp - 0xc0], 0
mov byte [ebp - 0xbf], 0
mov byte [ebp - 0xbe], 0
mov dword [ebp - 0xb0], ecx
je 0x4ec80191
push 5
pop ecx
lea esi, [ebp - 0xc0]
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov byte [eax + 3], 8
or byte [edx + 6], 0x20
inc word [edx + 8]
inc word [edx + 0xa]
mov word [edx + 4], 0x2bc
mov edx, dword [ebp - 0x98]
test edx, edx
je 0x4ecadb02
push 5
pop ecx
push 0x21
lea esi, [ebp - 0xc0]
mov edi, edx
rep movsd dword es:[edi], dword [esi]
or byte [edx + 6], 1
pop ebx
mov dword [edx + 0xc], 7
mov dword [edx + 0x10], ebx
test eax, eax
je 0x4ecce6c6
push 5
pop ecx
lea esi, [ebp - 0xc0]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
or word [eax + 6], bx
inc word [eax + 8]
inc word [eax + 0xa]
mov byte [eax + 3], 8
mov word [eax + 4], 0x2bc
mov dword [eax + 0xc], 7
mov dword [eax + 0x10], ebx
jmp 0x4ecce6c6
leave
ret 0x10
dec esi
je 0x4ecadaee
sub esi, 0x1f
jne 0x4ec8010a
mov dword [ecx], edi
mov dword [ecx + 4], edi
mov dword [ecx + 8], 0xc
lea eax, [ecx + 0xc]
jmp 0x4ec8010a
push 0x21
pop ebx
jmp 0x4ec801bd
and dword [ebp - 0x90], 0
jmp 0x4ec7fd25
and dword [ebp - 0x9c], 0
jmp 0x4ec7fd38
push eax
call fcn.4ed1f606
jmp 0x4ecce282
cmp eax, 0x44534947
je 0x4ec7fe4a
jmp 0x4ec7fe51
mov dword [ebx + 0x18], edi
jmp 0x4ec800bb
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0xc]
lea eax, [eax + ecx + 0x82]
jmp 0x4ec7fd64
push 0x20
pop ecx
mov dword [ebp - 0x88], eax
xor eax, eax
lea edi, [ebp - 0x84]
rep stosd dword es:[edi], eax
mov edi, dword [esi + 0xc]
lea eax, [edi - 2]
push eax
push dword [esi + 8]
lea eax, [ebp - 0x84]
push 0x80
push eax
call fcn.4ed1f5a2
lea eax, [ebp - 0x84]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4ecce2b9
sub eax, ecx
inc eax
push eax
lea eax, [ebp - 0x84]
push eax
mov eax, dword [ebx + 4]
push edi
add eax, ebx
push eax
push dword [ebp - 0x88]
call fcn.4ed1b226
cmp eax, 0xffffffff
je 0x4ecce495
mov edx, dword [esi + 0x14]
test edx, edx
je 0x4ecce362
mov eax, dword [ebx + 4]
add eax, ebx
add eax, dword [esi + 0xc]
push 0x20
pop ecx
mov dword [ebp - 0x8c], eax
xor eax, eax
lea edi, [ebp - 0x84]
rep stosd dword es:[edi], eax
mov edi, dword [esi + 0x18]
lea eax, [edi - 2]
push eax
push edx
push 0x80
lea eax, [ebp - 0x84]
push eax
call fcn.4ed1f5a2
lea eax, [ebp - 0x84]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4ecce32a
sub eax, ecx
inc eax
push eax
lea eax, [ebp - 0x84]
push eax
push edi
mov edi, dword [ebp - 0x8c]
push edi
push dword [ebp - 0x88]
call fcn.4ed1b226
cmp eax, 0xffffffff
je 0x4ecce495
mov eax, dword [esi + 0x18]
shr eax, 1
and word [edi + eax*2], 0
push 0x20
pop ecx
xor eax, eax
lea edi, [ebp - 0x84]
rep stosd dword es:[edi], eax
mov edi, dword [esi + 0x34]
lea eax, [edi - 2]
push eax
push dword [esi + 0x30]
lea eax, [ebp - 0x84]
push 0x80
push eax
call fcn.4ed1f5a2
lea eax, [ebp - 0x84]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4ecce393
sub eax, ecx
inc eax
push eax
lea eax, [ebp - 0x84]
push eax
mov eax, dword [ebx + 0xc]
push edi
add eax, ebx
push eax
push dword [ebp - 0x88]
call fcn.4ed1b226
cmp eax, 0xffffffff
je 0x4ecce495
push 0x20
pop ecx
xor eax, eax
lea edi, [ebp - 0x84]
rep stosd dword es:[edi], eax
mov edi, dword [esi + 0x2c]
lea eax, [edi - 2]
push eax
push dword [esi + 0x28]
lea eax, [ebp - 0x84]
push 0x80
push eax
call fcn.4ed1f5a2
lea eax, [ebp - 0x84]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4ecce3f1
sub eax, ecx
inc eax
push eax
lea eax, [ebp - 0x84]
push eax
mov eax, dword [ebx + 0x10]
push edi
add eax, ebx
push eax
push dword [ebp - 0x88]
call fcn.4ed1b226
cmp eax, 0xffffffff
je 0x4ecce495
mov eax, dword [ebp - 0x94]
mov ax, word [eax + 0xe8]
cmp ax, 0x500
je 0x4ecce4d0
cmp ax, 0x400
je 0x4ecce4d0
push 0x20
pop ecx
xor eax, eax
lea edi, [ebp - 0x84]
rep stosd dword es:[edi], eax
mov edi, dword [esi + 0x24]
lea eax, [edi - 2]
push eax
push dword [esi + 0x20]
lea eax, [ebp - 0x84]
push 0x80
push eax
call fcn.4ed1f5a2
lea eax, [ebp - 0x84]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4ecce46c
sub eax, ecx
inc eax
push eax
lea eax, [ebp - 0x84]
push eax
mov eax, dword [ebx + 8]
push edi
add eax, ebx
push eax
push dword [ebp - 0x88]
call fcn.4ed1b226
cmp eax, 0xffffffff
jne 0x4ecce4e4
mov edi, dword [ebp - 0xa0]
jmp 0x4ec7fdb6
mov edx, dword [esi + 0x18]
mov eax, dword [ebx + 4]
shr edx, 1
add eax, ebx
add eax, dword [esi + 0xc]
push edx
push ecx
push eax
mov dword [ebp - 0x8c], eax
call fcn.4ec7daa5
mov eax, dword [esi + 0x18]
mov ecx, dword [ebp - 0x8c]
shr eax, 1
and word [ecx + eax*2], 0
jmp 0x4ec7fdd5
mov eax, dword [esi + 0x24]
shr eax, 1
push eax
mov eax, dword [ebx + 8]
push dword [esi + 0x20]
add eax, ebx
push eax
call fcn.4ec7daa5
mov edi, dword [ebp - 0xa0]
jmp 0x4ec7fe11
mov ecx, dword [esi + 0xc]
movzx eax, word [eax + 0xea]
shr ecx, 1
push ecx
push dword [esi + 8]
lea ecx, [ebx + 0x7c]
push ecx
push eax
call fcn.4ed1f9ef
mov eax, dword [esi + 0x34]
shr eax, 1
push eax
push dword [esi + 0x30]
mov eax, dword [ebx + 0xc]
add eax, ebx
push eax
mov eax, dword [ebp - 0x94]
movzx eax, word [eax + 0xea]
push eax
call fcn.4ed1f9ef
mov eax, dword [esi + 0x2c]
shr eax, 1
push eax
push dword [esi + 0x28]
mov eax, dword [ebx + 0x10]
add eax, ebx
push eax
mov eax, dword [ebp - 0x94]
movzx eax, word [eax + 0xea]
push eax
call fcn.4ed1f9ef
mov eax, dword [esi + 0x24]
shr eax, 1
push eax
push dword [esi + 0x20]
mov eax, dword [ebx + 8]
add eax, ebx
push eax
mov eax, dword [ebp - 0x94]
movzx eax, word [eax + 0xea]
push eax
call fcn.4ed1f9ef
jmp 0x4ec7fe11
mov eax, dword [eax + 0x1c]
push 8
push eax
mov dword [ebp - 0x8c], eax
call fcn.4ed1f6a2
lea eax, [eax*4 + 0xc]
push eax
push dword [ebp - 0x8c]
call fcn.4ed1f6a2
jmp 0x4ecadb2d
or byte [ebx + 0x23], 8
mov ax, word [esi + 0x1c]
mov word [ebx + 0x28], ax
jmp 0x4ec7fe68
or byte [ebx + 0x22], 0x40
jmp 0x4ec7fe92
mov cx, word [ebx + 0x30]
xor edx, edx
mov dx, word [ebx + 0x32]
mov word [ebx + 0x2c], cx
mov word [ebx + 0x36], cx
mov cx, word [ebx + 0x32]
mov word [ebx + 0x38], cx
mov cx, word [ebx + 0x34]
neg edx
mov word [ebx + 0x2e], dx
jmp 0x4ec7ff2a
movsx eax, cx
cdq
sub eax, edx
sar eax, 1
jmp 0x4ecce5f5
movsx eax, cx
shl eax, 1
push 3
cdq
pop ecx
idiv ecx
mov word [ebx + 0x3c], ax
jmp 0x4ec7ffad
movsx eax, word [ebx + 0x2a]
add eax, 7
cdq
push 0xe
pop ecx
idiv ecx
push 0xfffffffffffffff6
pop ecx
mov word [ebx + 0x44], ax
movsx eax, word [ebx + 0x2a]
add eax, 5
cdq
idiv ecx
mov ecx, dword [ebp - 0x90]
jmp 0x4ec7ffea
mov ax, word [ebx + 0x44]
mov word [ebx + 0x48], ax
movsx eax, word [ebx + 0x30]
cdq
push 3
pop ecx
idiv ecx
mov ecx, dword [ebp - 0x90]
mov word [ebx + 0x4a], ax
mov eax, dword [ebp - 0x9c]
jmp 0x4ec80014
movzx ecx, cx
mov cx, word [ecx*2 + 0x4edd33c0]
mov word [ebx + 0x1c], cx
jmp 0x4ec80036
or byte [ebx + 0x22], 0x40
jmp 0x4ec80056
mov byte [ebx + 0x70], 2
mov byte [ebx + 0x71], 0
mov ax, word [edi + 0x2c]
and ax, 0x100
neg ax
sbb al, al
and al, 3
add al, 5
mov byte [ebx + 0x72], al
mov eax, dword [ebx + 0x20]
and eax, 0x400000
neg eax
sbb al, al
mov byte [ebx + 0x74], 0
mov byte [ebx + 0x75], 0
mov byte [ebx + 0x76], 0
mov byte [ebx + 0x77], 0
mov byte [ebx + 0x78], 0
mov byte [ebx + 0x79], 0
and eax, 9
mov byte [ebx + 0x73], al
movzx eax, byte [ebx + 0x72]
mov ax, word [eax*2 + 0x4edd33c0]
mov word [ebx + 0x1c], ax
jmp 0x4ec80056
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.4ecfd994
jmp 0x4ec801f7