Function at 0xaf3efb
Capabilities:
Link function at runtime on windows
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
push ebp
mov ebp, esp
cmc
test sp, 0x2c2c
lea esp, [esp - 0x114]
cmp bx, 0x27f0
push edi
mov edi, eax
xor edi, esi
mov edi, dword [ebp + 8]
test edi, edi
je 0x119aeab
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x119aeab
mov eax, 0x5a4d
test cx, sp
cmp word [edi], ax
jmp 0x119aea5
jae 0xd76e62
mov edx, dword [eax + edi + 0x1c]
test ecx, 0x3ca02ef8
clc
lea ecx, [edx + ecx*4]
jmp 0xb22fe2
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
test eax, 0x1c6c0763
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
cmp esp, 0x5ee3569d
btc eax, 0xcf
adc ax, bp
mov eax, dword [ebp + 0x10]
cmc
jmp 0xe557dd
mov ecx, dword [ecx + edi]
jmp 0xba2c85
ja 0xb62732
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0xb19a7e
inc esi
cmp bl, 9
jmp 0xd94efd
ret
dec ebx
stc
add edx, edi
jmp 0xb96061
jne 0x11a902a
cmp byte [ebp + 0x10], 0
jmp 0x1184399
call eax
test eax, eax
jmp 0xbc913e
push eax
push edi
cwde
mov al, cl
movzx eax, bp
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
bswap bx
pop ebx
xchg edi, edi
pop edi
jmp 0x11cedb2
mov esp, ebp
cmovl bp, ax
pop ebp
jmp 0x1190ab7
mov ebx, dword [eax + edi + 0x18]
cmp dl, 0xb3
test ebx, ebx
jmp 0x11b4f16
ret
mov esp, ebp
mov bp, dx
pop ebp
jmp 0xb3c17f
mov esp, ebp
mov bp, 0x2a1
bswap bp
jmp 0x117fb1f
push ecx
jmp 0xd89e07
pop esi
jmp 0x1199247
mov dword [ebp + 8], 0
clc
mov dword [ebp - 0xc], edx
cmp ch, dh
test ebx, ebx
jmp 0xbbcd7e
jae 0xd76e62
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
and cl, 0xd5
mov ecx, dword [edx + edi]
stc
cmp bx, sp
test ecx, ecx
jmp 0xd75062
test ecx, ecx
jmp 0x119778c
je 0x11844bb
inc edx
cmp edx, 0x104
jmp 0x11844b5
je 0x119aeab
mov edx, dword [edx + 0x7c]
test si, 0x25cc
push ebx
cmp esi, 0x7e9a2ad7
stc
cmp edi, esi
push esi
stc
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
cmp edi, 0x430f18bd
test esp, ebx
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0xb287ef
jl 0xd80d88
jmp 0xb1a55e
jne 0xbc915f
lea edx, [ebp - 0x114]
lahf
push edx
movzx ax, ch
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
test eax, eax
je 0xd76e62
cmp eax, edi
jmp 0xb48bf7
ret
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
cmc
cmp dword [edx], 0x4550
jne 0x119aeab
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
cmc
jmp 0xe39ea3
inc eax
clc
test bx, 0x3d97
mov dword [ebp + 8], edx
cmp ebx, 0x2ed70467
cmc
cmp edx, ecx
jmp 0x11d08cc
call eax
pop esi
xchg di, di
movzx edi, di
pop ebx
movzx edi, sp
pop edi
jmp 0xb81487
push edx
jmp 0x11746de
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
or cl, 0xf7
mov cl, byte [esi]
test cl, cl
jmp 0xd5c535
lea ebx, [esi - 1]
jmp 0xd80d72
jne 0xe297da
push 0
jmp 0xd4dcf5
je 0xe48a70
push 0
push ecx
push eax
call fcn.00af3efb
add esp, 0xc
pop esi
xchg bl, bh
jmp 0x11c6209
je 0xd76e62
mov edi, edi
clc
cmc
cmp cl, 0x2e
je 0xe64a26
mov cl, byte [esi + 1]
jmp 0xd76e57
je 0xd76e62
cmp ecx, eax
jb 0xb86025
mov edx, dword [ebp - 0x10]
cmp bl, 0x4c
test sp, 0x80
lea edx, [edx + eax]
cmp ecx, edx
jmp 0xe36247
inc esi
clc
cmc
test cl, cl
jne 0xd72940
pop esi
xadd edi, edi
pop ebx
rcr edi, 0xbc
sub eax, eax
mov di, di
bswap edi
pop edi
jmp 0xe5fa67
sub ecx, eax
test esi, ebp
cmc
cmp ecx, 0x104
jmp 0xe6ca91
ret
cmp dword [ebp + 8], ebx
jle 0xb1a553
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
stc
cmp esi, 0x1542234e
cmp esi, dword [eax + edi + 0x14]
jmp 0xb9a352
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xb52a14
ja 0xd5c53b
movsx ecx, cl
test ah, 0xe6
jmp 0xd5507e
pop edi
jmp 0x11b187a
je 0xd5c53b
mov bl, cl
test bp, 0x4b71
test si, sp
clc
sub bl, 0x30
jmp 0xb36152
mov ecx, dword [ebp - 4]
movsx dx, dh
xchg ah, dh
cwd
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
bswap ecx
movzx ecx, word [eax + edi]
xchg dh, dl
lea edx, [ebx + 1]
jmp 0x11857bf
ret
mov eax, dword [ebp + 0xc]
push eax
cbw
cwde
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xd4986a
je 0xe2b0bb
cmp eax, 1
jne 0xd80d72
inc esi
mov dword [ebp + 8], esi
jmp 0xd80d72
jae 0xb86025
lea eax, [ecx + edi]
mov cl, byte [eax]
and esi, 0x2b6c3536
mov esi, eax
test cl, cl
jmp 0xd72936
test eax, eax
jmp 0xbb39f0
je 0x11d08d2
mov byte [ebx + eax], dl
mov dx, cx
cdq
not dh
mov edx, dword [ebp + 8]
inc edx
jmp 0xd40f77
mov cl, byte [esi + 2]
test dx, ax
cmp edi, 0x345d7314
lea esi, [esi + 2]
sub edx, edx
jmp 0xe5c70b
push eax
neg al
sar esi, 1
mov eax, dword [edx + esi*4]
cmp dx, bp
add eax, edi
jmp 0x11a531d
ret
test cl, cl
jmp 0xe297d4
mov esp, ebp
mov ebp, 0x897414
pop ebp
jmp 0xe5b0d6
mov ecx, esi
jmp 0xd7e627
jae 0xd76e62
mov dword [ebp + 8], 0
test cx, ax
test ecx, ecx
jbe 0x11d08d2
lea ebx, [ebp - 0x114]
xor dl, 0xd2
sub ebx, eax
adc dl, 0xee
mov dl, byte [eax]
test dl, dl
jmp 0xe3e914
jmp 0xd80d72
pop edi
jmp 0xb704e5
push eax
call fcn.00af3efb
add esp, 0xc
cmovl di, di
pop esi
movsx edi, cx
pop ebx
xchg edi, edi
pop edi
jmp 0x1178df8
mov esp, ebp
cmovne ebp, esp
bswap bp
mov ebp, 0x16515837
pop ebp
jmp 0xd2f91f
pop ebp
jmp 0xb69cdf
je 0xe334d0
mov ebx, dword [ebp + 0xc]
btc si, di
lea eax, [ebp - 0x114]
bts esi, edx
setbe cl
dec si
xor edx, edx
inc esi
rol si, 0x29
sub ebx, eax
mov al, 0x2a
mov edi, edi
mov eax, 0x5bd700f5
btr esi, 0xd6
mov cl, dl
cmc
rcl esi, 0xc0
rol eax, cl
lea esi, [ebp + edx - 0x114]
test sp, cx
add al, dl
test sp, 0x6df7
xor al, byte [ebx + esi]
mov byte [esi], al
jmp 0xba687b
jb 0x11843c2
lea eax, [ebp - 0x114]
jmp 0xb5680b
je 0xd58ff9
test eax, eax
jmp 0xe345c4
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x1166161
ret
jne 0xd75068
pop esi
rcl bh, cl
pop ebx
sub eax, eax
jmp 0x116785c
pop ebx
jmp 0x11b67b8
je 0xd40cd4
sub eax, eax
bswap edi
pop edi
jmp 0x11aa4ce
call fcn.00d846bd
lea esp, [esp + 4]
cmp edi, 0x2a9513fe
cmc
clc
cmp eax, 0xffffffff
jmp 0x11854bf
cmp byte [esi + 1], 0x23
movzx cx, bh
lea ecx, [esi + 1]
jmp 0xd6450a
mov esp, ebp
pop ebp
jmp 0xd7ee67
mov esp, ebp
bswap ebp
pop ebp
jmp 0xe2ed23
je 0xd80d88
mov edx, dword [eax + edi + 0x20]
jmp 0xb40678
lea eax, [ecx + edi]
movsx edi, cx
mov edi, esi
pop edi
jmp 0xb597d4
pop ebx
not di
jmp 0xe224a5
mov esp, ebp
mov ebp, 0x552e7c0a
bswap bp
pop ebp
jmp 0xae61e4
jb 0xe6cab7
mov eax, dword [ebp + 8]
xchg ecx, ecx
mov ecx, 0x14df7eec
movsx ecx, bx
lea ecx, [ebp - 0x114]
jmp 0xb836d0