Function at 0x103b9d62
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp + 0xc]
jmp 0x102ddc7c
ret
jne 0x105cd890
cmp byte [ebp + 0x10], 0
jmp 0x102a659c
jmp 0x1022882c
mov esp, ebp
movsx ebp, bx
not ebp
pop ebp
jmp 0x1020a8f6
je 0x103c6693
inc eax
jmp 0x1028f15c
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
rol dx, 0xd
cmovb dx, ax
mov edx, dword [ecx + eax + 0x24]
lea ecx, [edx + esi*2]
xor edx, esp
shrd dx, di, 0xb2
and dx, 0xf1c
movzx edx, word [ecx + eax]
mov dword [ebp - 8], edx
mov ecx, eax
mov edx, dword [ebp - 4]
nop
bsf ax, cx
sar ah, cl
mov eax, dword [ebp - 8]
test bp, 0x158f
cmp bx, 0x18a1
cmp eax, dword [edx + ecx + 0x14]
jae 0x103abe93
mov esi, dword [edx + ecx + 0x1c]
clc
lea eax, [esi + eax*4]
jmp 0x10243d0e
je 0x10366795
lea ebx, [ebp - 0x114]
sub ebx, eax
stc
xor dl, bl
mov dl, byte [eax]
test dl, dl
jmp 0x103edd03
js 0x1022882c
jmp 0x103dd0cc
push edx
jmp 0x1025e83f
mov eax, dword [eax + ecx]
cmp dl, ch
test eax, eax
jmp 0x1038377a
mov edi, dword [edx + ecx + 0x18]
test edi, edi
jmp 0x103c558d
ja 0x1024b804
mov eax, esi
test di, 0x288e
jmp 0x105dfaa2
ret
push edi
jmp 0x105be10f
mov cl, byte [esi + 2]
clc
test sp, si
add esi, 2
jmp 0x105eabca
jne 0x103024ab
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
cmc
jmp 0x10353365
cmp eax, 0x104
jmp 0x103c668d
jle 0x102287f7
lea ebx, [esi + 1]
ror ch, 0x39
sar ch, cl
test bp, 0x3691
mov ecx, dword [ebp + 8]
jmp 0x103bdd44
mov ecx, esi
sub ecx, eax
cmp ecx, 0x104
jae 0x103abe93
xor edi, edi
test edx, 0x7c2b7b0d
cmp esp, 0x5b8a0825
test ecx, ecx
jmp 0x1022ec0e
mov esp, ebp
mov bp, 0x5e9f
mov bp, cx
pop ebp
ret
ret
je 0x10206048
mov edi, dword [ebp + 0xc]
sbb si, ax
or esi, esi
lea ecx, [ebp - 0x114]
test dh, bh
add bh, 0x7f
xor eax, eax
jmp 0x103a1649
pop ebp
ret
je 0x10266589
push 0
jmp 0x102f5f77
call eax
mov edi, eax
test edx, 0x61bf5d0d
test edi, edi
jne 0x102e9b20
lea edx, [ebp - 0x114]
nop
mov eax, 0x2a884f19
push edx
not ax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x10396d7e
pop esi
jmp 0x1021cc5f
je 0x103024ab
mov eax, dword [eax + ecx + 0x7c]
test edi, 0x16a97342
test di, dx
push ebx
cmp cx, bp
push edi
clc
cmp ebp, ebx
mov dword [ebp - 0x10], eax
cmc
mov dword [ebp - 8], 0xffffffff
clc
jmp 0x103d6c68
call 0x103b9d62
add esp, 0xc
cmovb si, bx
bswap edi
mov si, 0x2060
pop edi
not si
cmova esi, ecx
seto bh
pop ebx
jmp 0x102bd3bf
jne 0x105eabd8
push 0
jmp 0x1024179e
push eax
mov ah, ch
movzx eax, ax
cbw
push edx
movzx eax, si
not eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x10382e46
je 0x103abe93
mov edx, dword [ebp + 8]
test cx, bx
test bl, 0xa0
cmp edi, edx
jmp 0x1020af5d
push ecx
jmp 0x1034d498
je 0x105e73de
sub eax, eax
cmovg si, di
bswap esi
pop esi
mov esp, ebp
pop ebp
jmp 0x102a420b
je 0x102967f4
mov cl, byte [esi + 1]
jmp 0x10385bdc
push edi
jmp 0x102c70e0
test edx, edx
jmp 0x102c1998
jb 0x1022ec1f
lea ecx, [ebp - 0x114]
cmovnp ax, di
mov eax, 0xbcd5330
push ecx
not ah
mov byte [ebp + edi - 0x114], 0
not ah
movzx eax, sp
movsx eax, bx
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x102b430f
ja 0x102d4548
movsx eax, cl
cmp ecx, ebp
mov cl, byte [esi]
cmp dx, 0x1a03
cmc
lea edx, [edx + edx*4]
lea edx, [eax + edx*2 - 0x30]
jmp 0x105b8698
call eax
pop edi
movsx ebx, cx
pop ebx
xchg si, si
pop esi
jmp 0x10215fbc
je 0x103abe93
cmp eax, edx
jb 0x105b2d13
mov esi, dword [ebp - 0x10]
clc
test bp, bp
lea esi, [esi + edx]
test di, 0x67e8
cmp eax, esi
jmp 0x103be928
inc esi
cmc
test cl, cl
jmp 0x103abe8d
lea ecx, [esi + 1]
jmp 0x102b4246
jmp 0x10291d39
call eax
mov edi, eax
test ebp, edi
test edi, edi
jmp 0x102e9b1a
sub edi, ecx
bts bx, cx
lea esp, [esp]
cmovb bx, dx
mov cl, al
mov ebx, 0x2b82a18
rol ebx, cl
lea esi, [ebp + eax - 0x114]
shld ecx, esi, 3
setle cl
cmovl ecx, eax
lea ecx, [eax + ebx]
stc
clc
cmp sp, 0x4950
xor cl, byte [edi + esi]
mov byte [esi], cl
jmp 0x10219435
jne 0x103e9782
pop edi
bswap ebx
cmp ax, dx
pop ebx
bsr si, bp
adc si, 0x7759
sub eax, eax
cmove esi, ebx
movsx esi, dx
xchg si, si
pop esi
jmp 0x10298daa
pop esi
mov esp, ebp
not bp
mov ebp, 0x72c90f86
pop ebp
jmp 0x10258efb
call fcn.102e2050
push ebp
mov ebp, esp
add ecx, 0x7d1308bf
mov ecx, dword [ebp + 8]
clc
jmp 0x105d1b27
cmp ebx, edi
jmp 0x105e0255
jae 0x105b2d13
lea eax, [eax + ecx]
mov cl, byte [eax]
shr si, 0x28
mov esi, eax
jmp 0x103ee2cb
je 0x1022882c
mov eax, dword [edx + ecx + 0x20]
test cx, sp
cmc
clc
lea eax, [eax + ecx]
cmp ebp, 0x75ff7cd1
stc
sub ebx, ebx
jmp 0x103cc744
jb 0x103a165a
lea eax, [ebp - 0x114]
jmp 0x103c9b81
push eax
cbw
push edx
bswap ax
mov eax, 0x401b178b
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
mov si, bx
not si
pop ebx
jmp 0x103b3fb3
dec edi
mov dword [ebp - 0xc], eax
jmp 0x10235344
cmp esi, 0xffff
jmp 0x1024f7c0
cmp al, 9
jmp 0x1036d3a0
mov eax, dword [ebp - 0xc]
xchg esi, esi
mov edx, dword [ebp + 0x10]
lea esi, [edi + ebx]
cmp sp, 0x625b
stc
sar esi, 1
stc
mov eax, dword [eax + esi*4]
cmc
push edx
mov edx, dword [ebp + 0xc]
cmc
add eax, ecx
call fcn.1024564a
lea esp, [esp + 4]
test eax, eax
jns 0x10291d26
lea edi, [esi - 1]
jmp 0x10391a8e
je 0x103abe93
cmp cl, 0x2e
jmp 0x10326ad1
je 0x10366795
mov byte [ebx + eax], dl
inc edi
inc eax
test bp, 0x1319
cmp edi, ecx
jmp 0x1036678f
test cl, cl
jmp 0x103e977c
pop edi
btr bx, 0x26
sal esi, 0xdb
pop ebx
cmovnp si, di
xchg esi, esi
add eax, ecx
mov esi, eax
pop esi
jmp 0x105b5658
mov esp, ebp
jmp 0x102b0f12
test cl, cl
jmp 0x102d4542
call 0x103b9d62
add esp, 0xc
movzx esi, di
xchg ebx, ebx
pop edi
not si
pop ebx
xchg si, si
pop esi
mov esp, ebp
pop ebp
ret
cmp byte [esi + 1], 0x23
jmp 0x1038cb0c
sub esp, 0x114
stc
test ax, cx
push esi
test bh, 0x5f
test ecx, ecx
je 0x103024ab
mov esi, dword [ebp + 0xc]
cmp bx, sp
test esi, esi
je 0x103024ab
mov eax, 0x5a4d
cmp eax, 0x1cbc05b3
stc
cmp word [ecx], ax
jmp 0x103024a5
sub eax, dword [edx + ecx + 0x10]
mov dword [ebp - 8], eax
jmp 0x10211bc8
jle 0x103dd0c7
jmp 0x10228821
mov eax, dword [ecx + 0x3c]
cmp dword [eax + ecx], 0x4550
jmp 0x10272f7c
sub edx, edx
clc
cmp bp, ax
test cl, cl
je 0x102d4548
lea eax, [ecx - 0x30]
inc esi
jmp 0x103dc725