Function at 0xec4823
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0xe261f3
jae 0xe787bd
mov dword [ebp + 8], 0
test ecx, ecx
jbe 0xecbc03
lea ebx, [ebp - 0x114]
shr dl, 0xa
sub ebx, eax
mov dl, byte [eax]
cmp cl, 0x1d
test dl, dl
jmp 0xd0e104
pop esi
bswap eax
movzx ax, ch
cbw
pop ebx
lea eax, [ecx + edi]
movsx edi, dx
cmovg di, di
pop edi
mov esp, ebp
movsx ebp, ax
pop ebp
jmp 0xa11193
mov ecx, esi
test al, 0xb5
stc
sub ecx, eax
cmp ecx, 0x104
jmp 0x98460c
jb 0xd40714
lea eax, [ebp - 0x114]
jmp 0xd7f100
mov edx, dword [edi + 0x3c]
stc
clc
lea edx, [edx + edi]
cmp di, 0x1c5f
jmp 0xe6ff93
je 0xdafa8b
mov edx, dword [edx + 0x7c]
cmc
cmp ebx, edx
push ebx
cmp dh, 0xd9
jmp 0xd6b798
mov esp, ebp
pop ebp
jmp 0xe170eb
mov ecx, dword [ebp - 4]
movzx edx, si
cwde
mov edx, dword [ecx + edi + 0x24]
not cl
bswap cx
nop
lea eax, [edx + esi*2]
movsx cx, ch
mov ch, 0x38
movsx edx, cx
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0xe5d4a7
jne 0xd7fc55
lea edx, [ebp - 0x114]
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xd7fc4b
push edx
push eax
jmp 0xdb7d46
call eax
pop esi
mov bx, ax
movsx ebx, ax
pop ebx
mov di, 0x7be3
pop edi
jmp 0xe70159
ret
push eax
jmp 0xd4997a
inc esi
test cl, cl
jmp 0xe787b7
cmp byte [esi + 1], 0x23
setbe cl
lea ecx, [esi + 1]
jmp 0xd862c2
jb 0x989135
mov edx, dword [ebp - 0x10]
cmc
lea edx, [edx + eax]
cmp si, 0x69f7
cmp ecx, edx
jae 0x989135
lea eax, [ecx + edi]
bts si, di
rcr cl, cl
mov cl, byte [eax]
mov esi, eax
test cl, cl
je 0xe787bd
mov edi, edi
cmc
test esp, 0x42d123ab
cmp cl, 0x2e
je 0x98e265
mov cl, byte [esi + 1]
jmp 0xa17323
ja 0xd72d57
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0xe207e9
ret
je 0xecbc03
mov byte [ebx + eax], dl
cwd
movsx dx, cl
jmp 0xe9f4d7
je 0xea85f5
mov bl, cl
cmc
sub bl, 0x30
jmp 0xda0437
inc edx
jmp 0xe77226
jne 0xdafa8b
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
test eax, eax
jmp 0x9a2cb1
je 0xe787bd
cmp ecx, eax
jmp 0xcfba27
mov esp, ebp
not bp
cmovge ebp, edx
movzx ebp, bx
pop ebp
jmp 0xda8707
je 0xe6f5b5
mov ebx, dword [ebp + 0xc]
cmovp esi, ebp
xadd eax, esi
shl eax, cl
lea eax, [ebp - 0x114]
xor edx, edx
test dl, 0x93
and cl, al
sub ebx, eax
setae cl
rol ax, cl
mov edi, edi
ror ah, cl
mov eax, 0xb2552ef
mov cl, dl
bt esi, 0x4b
rol eax, cl
not esi
sub esi, ebx
lea esi, [ebp + edx - 0x114]
test dh, 0x46
add al, dl
xor al, byte [ebx + esi]
jmp 0xe49e44
push eax
push edi
mov eax, ebp
mov eax, 0x6b300fb0
movzx eax, sp
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
pop ebx
movzx edi, sp
mov edi, 0x2ac06708
pop edi
jmp 0xdc3137
call fcn.00ec4823
add esp, 0xc
movsx edi, bp
jmp 0xd7fa1c
pop ebx
movzx edi, si
bswap edi
pop edi
jmp 0xeb0fe9
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
clc
cmp ecx, 0xffff
jmp 0xd04362
jae 0xe787bd
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
xor cx, 0x56f2
rcl ecx, cl
mov ecx, dword [edx + edi]
cmc
test ecx, ecx
jmp 0xd3cae4
push esi
or esi, 0xffffffff
test di, 0x702e
jmp 0xd56972
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
je 0xe2620c
mov edx, dword [eax + edi + 0x20]
jmp 0xe6200b
push eax
mov al, cl
bswap eax
push edi
mov ax, si
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xa10117
pop esi
xchg di, bx
jmp 0xd4b42c
call eax
test eax, eax
je 0xe787bd
cmp eax, edi
jne 0xcf9254
cmp byte [ebp + 0x10], 0
jmp 0xd406ea
mov ecx, dword [ebp + 0xc]
shrd edx, edi, 0x19
sub si, 0x7a7
cmc
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
bt si, 0xba
add esi, edx
lea esi, [ebx + eax]
adc ax, di
mov eax, dword [ebp + 0x10]
push eax
sar esi, 1
bsf ax, sp
bts eax, edx
mov eax, dword [edx + esi*4]
test esp, 0x68536262
add eax, edi
call fcn.009b7931
add esp, 4
test ebp, 0x7c7f3a73
cmp eax, 0xffffffff
je 0x97dd13
test eax, eax
je 0x9da14a
cmp eax, 1
jmp 0xead0e6
je 0xeaa404
push 0
jmp 0xe2d80d
ja 0xea85f5
movsx ecx, cl
test bp, 0x2c26
clc
cmp dx, 0x6d10
lea edx, [edx + edx*4]
clc
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
clc
cmp sp, si
test cl, cl
jmp 0xea85ef
inc esi
cmp bl, 9
jmp 0xd9e46b
ret
push ecx
jmp 0xe26a54
je 0xdafa8b
mov ecx, dword [ebp + 0xc]
cmp si, sp
test sp, bp
test ecx, ecx
je 0xdafa8b
mov eax, 0x5a4d
test esp, ebx
cmp word [edi], ax
je 0x994a9a
xor eax, eax
not edi
pop edi
jmp 0xd3ed94
call fcn.00ec4823
add esp, 0xc
not esi
movsx edi, sp
mov si, dx
pop esi
pop ebx
bswap edi
pop edi
jmp 0xe8b12f
mov dword [ebp + 8], esi
jmp 0x97dd16
mov esp, ebp
pop ebp
jmp 0xe5be8b
ret
jae 0xe787bd
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
test bp, sp
stc
mov ecx, dword [ecx + edi]
test ecx, ecx
jne 0xd3caea
pop esi
or di, ax
pop ebx
btc edi, edx
and di, bp
xor edi, 0x420a1ae2
xor eax, eax
xchg di, di
pop edi
jmp 0xe8ead3
jle 0xd84678
mov eax, dword [ebp - 4]
btr si, 0xa4
sub si, 0x2fed
mov esi, dword [ebp - 8]
cmp esp, eax
stc
cmp esi, dword [eax + edi + 0x14]
jmp 0xd69c03
mov byte [ebp + eax - 0x114], 0
lahf
mov al, 0x25
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xe4aafa
push ecx
jmp 0xa130fe
mov dword [ebp + 8], edx
jmp 0x97dd16
mov byte [esi], al
je 0x98fd22
inc edx
clc
cmp ax, ax
cmp edx, 0x104
jmp 0x98fd1c
call eax
test eax, eax
jmp 0x9fe7ae
pop ebp
jmp 0xe981e7
ret
mov dword [ebp - 8], ecx
jmp 0xe3764b
dec ebx
cmp ebp, 0x5a0a40e7
lea edx, [edx + edi]
cmc
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
cmp di, 0x63e5
test ebx, ebx
jmp 0xec5c0e
mov eax, dword [ebp + 0xc]
jmp 0xd44250
cmp dword [edx], 0x4550
jmp 0xd38402
mov esp, ebp
jmp 0xe594a6
inc eax
jmp 0xecbbf1
jne 0xcfba5f
pop esi
add di, si
btr bx, di
bt ebx, eax
pop ebx
shr edi, 0x27
xor eax, eax
pop edi
jmp 0x9caa19
mov esp, ebp
pop ebp
jmp 0xd062c3
mov esp, ebp
bswap bp
xchg ebp, ebp
pop ebp
jmp 0xeb7676
ret
mov edx, dword [ebp + 8]
jmp 0xd1c8ad
jne 0xd14053
push 0
jmp 0xa04925
mov cl, byte [esi + 2]
add esi, 2
cmp ecx, esp
sub edx, edx
test cl, cl
jmp 0xd1404d
jne 0x97dd16
inc esi
jmp 0xdc11e7
mov esp, ebp
pop ebp
ret
ret
push ebp
mov ebp, esp
test al, 7
cmp al, 0x55
lea esp, [esp - 0x114]
push edi
sal edi, 0x79
sar di, 0xb5
mov edi, dword [ebp + 8]
test edi, edi
jmp 0xdafa64
jl 0xe2620c
jmp 0xd84688
mov dword [ebp + 8], edx
test edi, 0x5e22d04
stc
cmp edx, ecx
jb 0x98462c
mov eax, dword [ebp + 8]
not ecx
movzx ecx, si
lea ecx, [ebp - 0x114]
jmp 0xda89a1