Function at 0xe3b97e
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
test cl, cl
jmp 0x9dde12
jne 0x9766b6
lea edx, [ebp - 0x114]
push edx
lahf
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xad5f8c
mov esp, ebp
pop ebp
ret
jb 0x9a42e4
mov edx, dword [ebp - 0x10]
add edx, eax
cmp ecx, edx
jmp 0xa36e11
mov eax, dword [ebp + 0xc]
jmp 0xe659c8
jl 0x945230
jmp 0xa31f3f
call eax
pop esi
pop ebx
jmp 0x96a9cd
je 0xae0a2a
mov edx, dword [edx + 0x7c]
stc
push ebx
push esi
or esi, 0xffffffff
cmc
jmp 0xb062e2
push eax
jmp 0x9b166a
ja 0xa08bc0
movsx ecx, cl
jmp 0xe24807
mov dword [ebp + 8], esi
jmp 0x9c43ac
jbe 0x949ef7
lea ebx, [ebp - 0x114]
sub ebx, eax
sar dl, 0xa0
inc dl
not dl
mov dl, byte [eax]
test ax, sp
test dl, dl
jmp 0x949ed1
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jne 0xae0a2a
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
clc
test eax, eax
jmp 0x8ef514
jle 0xa31f30
mov eax, dword [ebp - 4]
xor si, dx
inc esi
bsr si, si
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0x9758cc
je 0x949ef7
mov byte [ebx + eax], dl
movsx edx, bp
mov dx, sp
bswap dx
mov edx, dword [ebp + 8]
inc edx
inc eax
test bh, 0xc8
mov dword [ebp + 8], edx
clc
cmp edx, ecx
jb 0x92ee5f
mov eax, dword [ebp + 8]
not cl
mov cl, 0xa
setl ch
lea ecx, [ebp - 0x114]
push ecx
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xb03485
je 0x9bff91
push 0
jmp 0x95e68f
push ecx
jmp 0xe5bb3c
ret
pop edi
jmp 0xae7bf6
jae 0x9dde18
mov ecx, dword [eax + edi + 0x1c]
sar edx, cl
lea edx, [ecx + esi*4]
not cx
dec cl
rol ch, 0
mov ecx, dword [edx + edi]
test ecx, ecx
je 0x9dde18
cmp ecx, eax
jmp 0x8df149
je 0x9dde18
cmp eax, edi
jmp 0xe4f1d7
ret
push edi
movsx eax, bp
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x8edf0e
mov esp, ebp
pop ebp
jmp 0xe5de6b
pop esi
pop ebx
lea eax, [ecx + edi]
not di
xchg edi, edi
pop edi
jmp 0x8ddae8
call fcn.00915c9c
add esp, 4
cmc
cmp eax, 0xffffffff
je 0xe4bd70
test eax, eax
jmp 0x9db996
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0xa0a613
ret
call fcn.00e3b97e
add esp, 0xc
pop esi
not bx
movsx edi, sp
bswap di
pop ebx
pop edi
jmp 0xe1f727
mov cl, byte [esi + 2]
stc
add esi, 2
xor edx, edx
test cl, cl
jmp 0xe3f0e9
jmp 0xe4bd73
mov byte [esi], al
jmp 0x9ffd3e
ja 0xe5b6b0
sub ecx, dword [eax + edi + 0x10]
cmp esi, edx
cmp ecx, dword [eax + edi + 0x14]
jmp 0x9f6f1f
je 0xa0a56d
cmp eax, 1
jmp 0x9f027d
jne 0xa41cb5
pop esi
sbb ebx, 0x6455467e
add bx, 0x1f81
pop ebx
test di, 0x56cc
add edi, ecx
xor eax, eax
xchg di, di
bswap di
pop edi
jmp 0xb03c43
mov esp, ebp
bswap ebp
jmp 0xaf79cf
jne 0xe4bd73
inc esi
jmp 0x91b234
jae 0x9dde18
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
clc
test ecx, ecx
jmp 0xad73ac
je 0xe3f81a
inc edx
test esp, ebp
cmp ecx, ebp
cmp edx, 0x104
jmp 0xe3f814
jne 0xe3f0ef
push 0
jmp 0xad89a3
mov ecx, dword [ebp - 4]
xchg al, dh
movzx edx, ax
cmovs dx, bx
mov edx, dword [ecx + edi + 0x24]
mov ah, 0x9d
bswap ax
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
bswap edx
movsx dx, al
lea edx, [ebx + 1]
jmp 0x9a78a5
jmp 0xe4bd73
pop ebp
jmp 0x95e9a3
inc esi
clc
jmp 0x8d4896
push eax
sar esi, 1
cmovns ax, di
mov eax, dword [edx + esi*4]
jmp 0xb009cd
cmp byte [esi + 1], 0x23
movzx cx, bl
xchg ecx, ecx
bswap cx
lea ecx, [esi + 1]
jmp 0x94b09b
push eax
movsx eax, ax
lahf
push edi
setle al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xe51bdd
mov ecx, dword [ebp + 0xc]
xor edx, ebx
not dh
mov edx, dword [ebp - 0xc]
sub eax, 0x584a5292
mov eax, dword [ebp + 8]
cmp si, 0x47e4
lea esi, [ebx + eax]
xor eax, edi
mov eax, dword [ebp + 0x10]
test cl, al
jmp 0xa2447e
mov ecx, esi
stc
sub ecx, eax
jmp 0xad4205
jae 0x9a42e4
lea eax, [ecx + edi]
test dx, sp
mov cl, byte [eax]
bt si, bp
cmp di, 0x60c2
cmp cl, bh
mov esi, eax
cmc
test cl, cl
jmp 0xa41ca9
call fcn.00e3b97e
add esp, 0xc
movzx esi, di
movsx esi, ax
pop esi
pop ebx
movzx edi, cx
pop edi
mov esp, ebp
pop ebp
ret
test edi, edi
je 0xae0a2a
mov ecx, dword [ebp + 0xc]
test ecx, 0x7a891fc4
test esp, ecx
test ecx, ecx
jmp 0xae0a16
add al, dl
xor al, byte [ebx + esi]
jmp 0x9ca586
je 0x9dde18
mov edi, edi
stc
test di, di
cmp cl, 0x2e
jmp 0xeb9fe9
cmp ecx, 0x104
jmp 0xaec82e
call eax
test eax, eax
jmp 0x9766b0
jne 0x9758ee
pop esi
shl bl, 0x72
bt bx, 0xe4
and edi, 0x71c12701
pop ebx
xor eax, eax
jmp 0xb03bef
push edx
jmp 0x8f6f4a
je 0xae0a2a
mov eax, 0x5a4d
cmp word [edi], ax
je 0x93a7e2
xor eax, eax
mov edi, ebp
pop edi
jmp 0x9a1893
mov esp, ebp
pop ebp
jmp 0x9aecbf
jae 0x9dde18
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0x92ee4a
pop ebp
jmp 0x99bbaf
add eax, edi
jmp 0x9a6b21
call eax
test eax, eax
jmp 0x8db0e7
pop edi
jmp 0x9ea3eb
mov esp, ebp
bswap bp
jmp 0xa1867c
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0x9d06de
inc esi
cmc
test edi, 0x70c62674
cmp bl, 9
jmp 0x9193d1
mov esp, ebp
cmovo bp, di
pop ebp
ret
lea edx, [edx + edx*4]
cmp di, ax
lea edx, [ecx + edx*2 - 0x30]
rcr cl, cl
mov cl, byte [esi]
stc
test cl, cl
jmp 0xa08bba
mov esp, ebp
pop ebp
ret
push ebp
mov ebp, esp
test si, bx
cmc
sub esp, 0x114
cmp esi, edx
push edi
mov edi, dword [ebp + 8]
jmp 0xa3b170
je 0xa08bc0
mov bl, cl
cmc
sub bl, 0x30
jmp 0xdfef83
jb 0xe4f200
lea eax, [ebp - 0x114]
jmp 0xa2eee6
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0x94521c
jne 0xa2ab06
cmp byte [ebp + 0x10], 0
je 0x8e35be
mov ebx, dword [ebp + 0xc]
xadd cl, al
lea eax, [ebp - 0x114]
neg cl
sub edx, edx
or cl, cl
sub ebx, eax
mov edi, edi
rcr cl, cl
cmc
mov eax, 0x8e46d8
mov cl, 0x96
mov cl, bl
mov cl, dl
bt si, 0x9b
bts esi, esp
rol eax, cl
lea esi, [ebp + edx - 0x114]
jmp 0xa3bb6e
call eax
pop esi
movsx edi, ax
xchg bx, bx
pop ebx
movzx edi, bx
pop edi
jmp 0xe3119c
mov ebx, dword [eax + edi + 0x18]
stc
test ebx, ebx
je 0x945230
mov edx, dword [eax + edi + 0x20]
dec ebx
cmc
lea edx, [edx + edi]
cmc
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x8e9213
push eax
jmp 0xa37645
ret
push eax
cmovle eax, ecx
jmp 0x9a0684
je 0xa34ad4
mov cl, byte [esi + 1]
jmp 0xa21089