Function at 0xef687c3
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x20
push 0xef9e0d8
call fcn.0ef35d34
mov eax, dword [0xefdd1c4]
mov dword [ebp - 0x30], eax
mov eax, dword [0xefdd1c0]
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov dword [ebp - 4], ecx
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x50], ecx
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [0xefdd1cc]
cmp dword [eax], ecx
jne 0xef68887
mov ecx, 0xa4
mov dword [eax], ecx
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x38], ecx
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x3c], 0xa9
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x40], 0xc2
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x44], 0xcb
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x48], pe_nt_image_headers32
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x4c], 0x3e0
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x6c], 0x10000
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x70], 0x3e4
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x74], 0x103e4
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x78], 0x203e4
mov eax, dword [0xefdd1cc]
mov dword [eax + 0x7c], 0x303e4
lea eax, [ebp - 0x24]
push eax
mov ebx, 0x3c0
push ebx
call fcn.0ef4ddfb
or byte [ebp - 0x24], 0x20
lea eax, [ebp - 0x1a]
push eax
push 0x3da
call fcn.0ef4ddfb
push 0x10
push ebx
call fcn.0ef4de18
lea eax, [ebp - 0x1b]
push eax
lea edi, [ebx + 1]
push edi
call fcn.0ef4ddfb
movzx esi, byte [ebp - 0x1b]
and esi, 0x40
lea eax, [ebp - 0x1a]
push eax
push 0x3da
call fcn.0ef4ddfb
push dword [ebp - 0x24]
push ebx
call fcn.0ef4de18
test esi, esi
je 0xef68905
mov eax, dword [0xefdd1cc]
add eax, 8
push eax
push 0x3b4
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
add eax, 9
push eax
push 0x3b5
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
mov cl, byte [ebp - 0x24]
mov byte [eax + 0x14], cl
mov eax, dword [0xefdd1cc]
add eax, 0x15
push eax
push edi
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
add eax, 0x16
push eax
push 0x3cc
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
mov byte [eax + 0x17], 0xff
mov eax, dword [0xefdd1cc]
add eax, 0x18
push eax
push 0x3c4
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
add eax, 0x19
push eax
push 0x3c5
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
add eax, 0x1a
push eax
push 0x3c6
call fcn.0ef4ddfb
call fcn.0ef4ba6e
mov ecx, dword [0xefdd1cc]
mov byte [ecx + 0x1b], al
mov eax, dword [0xefdd1cc]
add eax, 0x1c
push eax
push 0x3c8
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
add eax, 0x1d
push eax
push 0x3c9
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
add eax, 0x22
push eax
push 0x3ce
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
add eax, 0x23
push eax
push 0x3cf
call fcn.0ef4ddfb
test esi, esi
jne 0xef689f8
mov eax, dword [0xefdd1cc]
add eax, 0x28
push eax
push 0x3d4
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
add eax, 0x29
push eax
push 0x3d5
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
add eax, 0x2e
push eax
push 0x3ca
call fcn.0ef4ddfb
mov eax, dword [0xefdd1cc]
mov esi, dword [eax + 0x38]
add esi, eax
mov byte [ebp - 0x20], 0
push dword [ebp - 0x20]
push 0x3c4
call fcn.0ef4de18
lea eax, [ebp - 0x19]
push eax
push 0x3c5
call fcn.0ef4ddfb
mov al, byte [ebp - 0x19]
mov byte [esi], al
inc esi
inc byte [ebp - 0x20]
cmp byte [ebp - 0x20], 5
jb 0xef68a19
mov eax, dword [0xefdd1cc]
mov esi, dword [eax + 0x3c]
add esi, eax
mov byte [ebp - 0x20], 0
push dword [ebp - 0x20]
push 0x3d4
call fcn.0ef4de18
lea eax, [ebp - 0x19]
push eax
push 0x3d5
call fcn.0ef4ddfb
mov al, byte [ebp - 0x19]
mov byte [esi], al
inc esi
inc byte [ebp - 0x20]
cmp byte [ebp - 0x20], 0x19
jb 0xef68a51
mov eax, dword [0xefdd1cc]
mov esi, dword [eax + 0x40]
add esi, eax
mov byte [ebp - 0x20], 0
push dword [ebp - 0x20]
push 0x3ce
call fcn.0ef4de18
lea eax, [ebp - 0x19]
push eax
push 0x3cf
call fcn.0ef4ddfb
mov al, byte [ebp - 0x19]
mov byte [esi], al
inc esi
inc byte [ebp - 0x20]
cmp byte [ebp - 0x20], 9
jb 0xef68a89
mov eax, dword [0xefdd1cc]
mov esi, dword [eax + 0x44]
add esi, eax
mov byte [ebp - 0x20], 0
lea eax, [ebp - 0x1a]
push eax
push 0x3da
call fcn.0ef4ddfb
push dword [ebp - 0x20]
push ebx
call fcn.0ef4de18
lea eax, [ebp - 0x19]
push eax
push edi
call fcn.0ef4ddfb
mov al, byte [ebp - 0x19]
mov byte [esi], al
inc esi
inc byte [ebp - 0x20]
cmp byte [ebp - 0x20], 0x15
jb 0xef68ac1
lea eax, [ebp - 0x1a]
push eax
push 0x3da
call fcn.0ef4ddfb
push 0x20
push ebx
call fcn.0ef4de18
mov eax, dword [0xefdd1cc]
mov esi, dword [eax + 0x48]
add esi, eax
xor edi, edi
push edi
push 0x3c7
call fcn.0ef4de18
xor bl, bl
lea eax, [ebp - 0x19]
push eax
push 0x3c9
call fcn.0ef4ddfb
mov al, byte [ebp - 0x19]
mov byte [esi], al
inc esi
inc bl
cmp bl, 3
jb 0xef68b20
inc edi
mov eax, 0x100
cmp di, ax
jb 0xef68b1e
mov ecx, dword [0xefdd1cc]
mov eax, dword [ecx + 0x4c]
add eax, ecx
mov byte [eax], 0
inc eax
mov byte [eax], 0
inc eax
mov byte [eax], 0
mov byte [eax + 1], 0
cmp dword [0xefb2b00], 0
jne 0xef68c36
mov dword [ebp - 0x20], 0xb8000
mov ebx, 0xa0000
mov eax, dword [0xefdd1cc]
mov edx, dword [eax + 0x70]
add edx, eax
mov esi, dword [eax + 0x74]
add esi, eax
mov ecx, dword [eax + 0x78]
add ecx, eax
mov edi, dword [eax + 0x7c]
add edi, eax
mov dword [ebp - 0x28], edi
xor edi, edi
cmp word [ebp + 8], di
jne 0xef68be9
mov eax, dword [ebp - 0x20]
mov al, byte [eax]
mov byte [edx], al
inc edx
inc dword [ebp - 0x20]
mov byte [edx], 0
inc edx
mov eax, dword [ebp - 0x20]
mov al, byte [eax]
mov byte [esi], al
inc esi
inc dword [ebp - 0x20]
mov byte [esi], 0
inc esi
inc edi
cmp edi, 0x8000
jb 0xef68b9d
xor esi, esi
mov al, byte [ebx]
mov byte [ecx], al
inc ecx
inc ebx
mov al, byte [ebx]
mov byte [ecx], al
inc ecx
inc ebx
mov al, byte [ebx]
mov byte [ecx], al
inc ecx
inc ebx
mov al, byte [ebx]
mov byte [ecx], al
inc ecx
inc ebx
inc esi
cmp esi, 0x4000
jb 0xef68bc6
jmp 0xef68c36
mov edi, dword [0xefbc440]
and dword [ebp + 8], 0
cmp dword [eax + 0x6c], 0
jbe 0xef68c36
mov al, byte [edi]
mov byte [edx], al
inc edx
inc edi
mov al, byte [edi]
mov byte [esi], al
inc esi
inc edi
mov al, byte [edi]
mov byte [ecx], al
inc ecx
inc edi
mov al, byte [edi]
mov ebx, dword [ebp - 0x28]
mov byte [ebx], al
inc dword [ebp - 0x28]
inc edi
inc dword [ebp + 8]
mov eax, dword [0xefdd1cc]
mov ebx, dword [ebp + 8]
cmp ebx, dword [eax + 0x6c]
jb 0xef68bf9
jmp 0xef68c36
mov dword [0xefdd950], 1
call fcn.0ef6bfc8
push dword [0xefdd1d8]
mov edi, dword [fcn.0ef31174]
call edi
test eax, eax
jne 0xef68caa
push dword [0xefdd1c0]
call edi
cmp dword [0xefdd9c0], 0
jne 0xef68c8f
mov byte [0xefb2dc4], 0
push dword [0xefdd1c0]
mov esi, dword [fcn.0ef311b0]
call esi
push dword [0xefdd4ac]
call esi
push dword [0xefdd4b4]
call edi
jmp 0xef68cb0
push 0x40c
push 0xef33258
call dword [fcn.0ef31060]
push eax
push 0x3e9
call fcn.0ef5cb1f
mov esi, dword [fcn.0ef311b0]
push 0x927c0
xor ebx, ebx
push ebx
lea eax, [ebp - 0x30]
push eax
push 2
call dword [0xef311cc]
test eax, eax
je 0xef68d1e
push 0x41d
call dword [fcn.0ef31090]
push dword [0xefdd1c0]
call edi
cmp dword [0xefdd9c0], ebx
jne 0xef68d03
mov byte [0xefb2dc4], bl
push dword [0xefdd1c0]
call esi
push dword [0xefdd4ac]
call esi
push dword [0xefdd4b4]
call edi
jmp 0xef68d1e
push 0x41a
push 0xef33258
call dword [fcn.0ef31060]
push eax
push 0x3e9
call fcn.0ef5cb1f
push dword [0xefdd1d8]
call edi
test eax, eax
jne 0xef68d76
push dword [0xefdd1c0]
call edi
cmp dword [0xefdd9c0], ebx
jne 0xef68d5b
mov byte [0xefb2dc4], 0
push dword [0xefdd1c0]
call esi
push dword [0xefdd4ac]
call esi
push dword [0xefdd4b4]
call edi
jmp 0xef68d76
push 0x41e
push 0xef33258
call dword [fcn.0ef31060]
push eax
push 0x3e9
call fcn.0ef5cb1f
call fcn.0ef35d79
ret 4