Function at 0x96e166
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jne 0x97504c
push 0
jmp 0x981566
jne 0x7fb420
lea edx, [ebp - 0x114]
push edx
cmova ax, bx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x96a529
jbe 0x8d7730
lea ebx, [ebp - 0x114]
sub ebx, eax
rol dl, cl
sub dl, 0x31
mov dl, byte [eax]
stc
clc
test dl, dl
je 0x8d7730
mov byte [ebx + eax], dl
cdq
mov edx, dword [ebp + 8]
jmp 0x8d9c99
je 0x868eed
mov edi, edi
cmp cl, 0x2e
jmp 0x939f8c
mov esp, ebp
pop ebp
jmp 0x84ce2b
jmp 0x960c87
jne 0x876b31
pop esi
pop ebx
xor eax, eax
pop edi
jmp 0x97b20a
jae 0x868eed
mov edx, dword [eax + edi + 0x1c]
test esi, 0x420b669e
cmp ebx, 0x69812f14
test esp, ebp
lea ecx, [edx + ecx*4]
clc
mov ecx, dword [ecx + edi]
jmp 0x8970af
je 0x868eed
cmp eax, edi
jne 0x829e5f
cmp byte [ebp + 0x10], 0
jmp 0x90f4de
ja 0x7e5297
movsx ecx, cl
lea edx, [edx + edx*4]
jmp 0x91b957
push ecx
jmp 0x897693
lea ebx, [esi - 1]
jmp 0x960c87
ret
ret
ret
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x862ca1
je 0x818456
test eax, eax
jmp 0x87f9c2
mov dword [ebp + 8], edx
stc
cmp cx, sp
cmp edx, ecx
jmp 0x8d772a
mov esp, ebp
mov ebp, edi
pop ebp
jmp 0x827a8b
jae 0x868eed
mov ecx, dword [eax + edi + 0x1c]
shld dx, bp, 0x1d
rcl edx, cl
lea edx, [ecx + esi*4]
clc
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0x876b2b
mov esp, ebp
bswap bp
pop ebp
jmp 0x81a847
ret
pop esi
jmp 0x96ae1c
cmp dword [edx], 0x4550
jmp 0x8f1624
push eax
setns ah
push edi
xchg ah, ah
movsx eax, bx
mov ax, ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x864fb9
je 0x975036
push 0
jmp 0x816b89
call eax
pop esi
pop ebx
pop edi
mov esp, ebp
mov ebp, 0x14b96fc9
pop ebp
jmp 0x822ec6
cmp ecx, 0x104
jmp 0x93af6b
jne 0x7f0b72
pop esi
xchg edi, ebx
pop ebx
xadd edi, edi
sub eax, eax
mov edi, 0x2a5e2451
xchg di, di
pop edi
jmp 0x84743d
jb 0x90f4fc
lea eax, [ebp - 0x114]
jmp 0x9454c1
je 0x868eed
cmp ecx, eax
jmp 0x9a44ba
je 0x88391b
xor eax, eax
pop edi
jmp 0x8ead1b
je 0x8aac87
cmp eax, 1
jne 0x960c87
inc esi
jmp 0x97c8f8
je 0x879ef1
mov edx, dword [edx + 0x7c]
clc
test eax, 0x54d3798e
push ebx
push esi
or esi, 0xffffffff
stc
mov dword [ebp - 0x10], edx
cmc
mov dword [ebp - 8], esi
cmp sp, cx
cmp ecx, 0xffff
jmp 0x91f4cc
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
cmp ebx, esi
jmp 0x858e79
ret
je 0x879ef1
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x905e58
call eax
pop esi
xchg di, di
pop ebx
pop edi
jmp 0x8fbb04
test ecx, ecx
jmp 0x7f8084
push eax
jmp 0x8fa5e4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
bswap ax
lea eax, [edx + esi*2]
setns dl
cdq
movsx cx, cl
movzx ecx, word [eax + edi]
cdq
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x7f29db
inc esi
cmc
cmp si, bp
clc
cmp bl, 9
jmp 0x804aef
ret
inc eax
cmp si, 0x5167
jmp 0x83592c
push eax
jmp 0x8e1e05
jb 0x7ee9d8
mov eax, dword [ebp + 8]
mov cx, di
jmp 0x9973b7
inc edx
jmp 0x8c1a7f
call fcn.0096e166
add esp, 0xc
pop esi
movzx ebx, dx
pop ebx
pop edi
jmp 0x83a7df
mov eax, dword [ebp + 0xc]
jmp 0x85f782
add al, dl
xor al, byte [ebx + esi]
jmp 0x8fca92
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0x8efba6
mov esp, ebp
mov bp, 0x5f12
movsx ebp, cx
bswap bp
pop ebp
jmp 0x8bd83f
lea eax, [ecx + edi]
not di
cmovs di, si
pop edi
jmp 0x9645c8
je 0x960c96
mov edx, dword [eax + edi + 0x20]
jmp 0x8f3c29
jne 0x879ef1
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
cmc
test eax, eax
jmp 0x88210a
dec ebx
add edx, edi
mov dword [ebp + 8], 0
cmp dl, bl
mov dword [ebp - 0xc], edx
cmp si, 0x1254
test si, 0x1973
test ebx, ebx
jmp 0x94d9ba
call fcn.0096e166
add esp, 0xc
not si
pop esi
bswap ebx
pop ebx
pop edi
jmp 0x7f1a54
mov esp, ebp
pop ebp
jmp 0x886373
mov byte [esi], al
jmp 0x972366
mov byte [ebp + eax - 0x114], 0
mov ah, 0xf6
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
test eax, eax
jmp 0x7eab59
je 0x879ef1
mov eax, 0x5a4d
cmc
cmp word [edi], ax
jmp 0x879eeb
call fcn.007fda20
lea esp, [esp + 4]
cmp eax, 0xffffffff
jmp 0x82a522
je 0x8e7c3b
mov ebx, dword [ebp + 0xc]
mov eax, edi
lea eax, [ebp - 0x114]
xor edx, edx
xchg esi, esi
sub ebx, eax
clc
ror eax, 0xbb
lahf
mov edi, edi
mov eax, 0x642a0a67
bt si, 0x6e
mov cl, dl
rol eax, cl
lea esi, [ebp + edx - 0x114]
jmp 0x8e88a2
cmp ecx, dword [eax + edi + 0x14]
jmp 0x7f9154
lea edx, [ecx + edx*2 - 0x30]
cmc
rcr cl, cl
neg cl
mov cl, byte [esi]
clc
test cl, cl
jmp 0x7e5291
ja 0x8ea96c
sub ecx, dword [eax + edi + 0x10]
jmp 0x910623
je 0x984719
mov cl, byte [esi + 1]
inc esi
test sp, si
test cl, cl
jmp 0x868ee7
jae 0x868eed
mov dword [ebp + 8], 0
test ah, ah
test ecx, ecx
jmp 0x7ee9c5
push eax
not ax
xchg ah, ah
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x88c9bc
jl 0x960c96
jmp 0x982f79
lea edx, [edx + eax]
cmc
cmp eax, 0x84103ba
cmp ecx, edx
jmp 0x98eb3f
push ecx
jmp 0x8fd308
cmp dword [ebp + 8], ebx
jle 0x982f66
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0x83fb8b
mov esp, ebp
mov bp, 0x841
bswap bp
cmovl ebp, edi
pop ebp
ret
call eax
test eax, eax
jmp 0x7fb41a
pop ebx
movsx eax, sp
jmp 0x8eb619
push ebp
mov ebp, esp
cmc
lea esp, [esp - 0x114]
push edi
xor di, sp
mov edi, dword [ebp + 8]
stc
test edi, edi
jmp 0x88800e
je 0x86d99b
inc edx
cmp edx, 0x104
jmp 0x86d995
mov cl, byte [esi + 2]
test ebp, 0x68c2676
add esi, 2
sub edx, edx
test cl, cl
je 0x7e5297
mov bl, cl
stc
cmp si, 0x423d
sub bl, 0x30
jmp 0x8bc563
mov esp, ebp
movsx ebp, si
pop ebp
ret
mov dword [ebp + 8], esi
jmp 0x960c87
push edx
jmp 0x8d6ca9
mov ecx, dword [ebp + 0xc]
add dx, bx
rcl ah, cl
mov edx, dword [ebp - 0xc]
bts si, di
movsx ax, bh
mov eax, dword [ebp + 8]
sub si, 0x46fd
lea esi, [ebx + eax]
rcr ah, cl
sbb ah, 0xdc
mov eax, dword [ebp + 0x10]
cmc
push eax
rol al, cl
clc
cmp edi, 0x6acf7c6d
sar esi, 1
xadd ax, ax
cmovns ax, ax
shrd ax, bp, 0x22
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x90b363
mov ecx, esi
cmp esi, 0x6ba80792
clc
cmp ax, di
sub ecx, eax
test ebx, 0x4c654818
clc
jmp 0x868700
jae 0x851ab9
lea eax, [ecx + edi]
mov cl, byte [eax]
mov esi, eax
test di, 0x5758
test ah, al
test cl, cl
jmp 0x7f0b6a
lea ecx, [ebp - 0x114]
jmp 0x95a93b
jb 0x851ab9
mov edx, dword [ebp - 0x10]
clc
jmp 0x95064b