Function at 0xe3a3aa
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
ret
mov ecx, dword [ebp - 4]
mov ax, 0x79f9
cwde
mov edx, dword [ecx + edi + 0x24]
lahf
movsx eax, sp
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
jmp 0xb32dcb
je 0x153e8ac
mov ecx, dword [ebp + 0xc]
cmp ecx, esp
test ecx, ecx
jmp 0xe6b57e
ret
mov ecx, dword [ebp + 0xc]
btr eax, eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
bt eax, 0x3b
xadd al, al
setb ah
mov eax, dword [ebp + 0x10]
test esi, esp
cmc
test dl, 0x3a
push eax
and ah, ah
not ah
movzx eax, si
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0xed4937
mov cl, byte [esi + 2]
add esi, 2
cmc
xor edx, edx
clc
test ch, 0xf4
stc
test cl, cl
je 0xe84254
mov bl, cl
cmp si, 0x10ec
jmp 0xebed1f
ret
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
je 0xb07e5b
push 0
jmp 0xeb652d
pop esi
pop ebx
lea eax, [ecx + edi]
bswap edi
pop edi
jmp 0xecc661
inc esi
cmp esi, 0x73e251ae
cmp bl, 9
jmp 0xe5a06c
ret
mov dword [ebp + 8], edx
jmp 0xe61d36
mov cl, byte [eax]
add si, bx
test bl, 0x49
mov esi, eax
clc
test cl, cl
je 0xeb1ab1
mov edi, edi
test eax, edx
cmp cl, 0x2e
jmp 0x150e403
jmp 0xec8816
ret
jae 0xb269e8
lea eax, [ecx + edi]
sub cl, 0x57
jmp 0xb354c9
call eax
pop esi
pop ebx
pop edi
jmp 0xe61d1b
cmp edx, ecx
jmp 0xecdf11
mov esp, ebp
mov ebp, 0x6a8402b3
pop ebp
ret
je 0xec8813
test eax, eax
jmp 0xe8d13e
call eax
test eax, eax
jne 0x14da36b
lea edx, [ebp - 0x114]
mov ah, 0x7e
push edx
bswap eax
mov ah, 5
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
call eax
test eax, eax
jmp 0x14da365
inc edx
jmp 0xe80541
push ebp
mov ebp, esp
cmp di, 0x3e58
lea esp, [esp - 0x114]
cmc
push edi
mov edi, dword [ebp + 8]
clc
cmp dl, ch
test edi, edi
jmp 0xb02400
mov byte [ebp + eax - 0x114], 0
lahf
xchg ah, ah
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0xe3635f
ja 0xe84254
movsx ecx, cl
stc
lea edx, [edx + edx*4]
cmc
stc
test edi, ebp
lea edx, [ecx + edx*2 - 0x30]
sal cl, 0x30
shl cl, 0x15
shr cl, 0xbf
mov cl, byte [esi]
test al, 0x8a
cmp al, 0x12
jmp 0x14315bc
mov esp, ebp
movsx ebp, bx
pop ebp
jmp 0xaf7b9d
mov esp, ebp
movzx ebp, dx
pop ebp
jmp 0xb1374d
jmp 0xec8816
mov esp, ebp
je 0x153e8ac
mov eax, 0x5a4d
jmp 0xe88c46
je 0xeb1ab1
cmp ecx, eax
jmp 0xe8a218
pop edi
jmp 0x14c8f64
jae 0xeb1ab1
mov ecx, dword [eax + edi + 0x1c]
sal dx, 0x99
lea edx, [ecx + esi*4]
adc ch, 0x5d
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0xe6cc69
lea edx, [edx + eax]
cmp ch, dh
cmp ecx, edx
jmp 0xb4a9d1
inc eax
mov dword [ebp + 8], edx
cmp dl, 0x64
jmp 0xb4ef9e
jne 0xb07e71
push 0
push edx
jmp 0x1422539
jle 0xb0437b
mov eax, dword [ebp - 4]
bts esi, esp
jmp 0x14e9558
cmp word [edi], ax
jmp 0x153e8a6
jb 0xb269e8
mov edx, dword [ebp - 0x10]
cmp dl, 0xd1
jmp 0xe7e356
je 0xafa952
cmp eax, 1
jmp 0x14548d9
call fcn.00e3a3aa
add esp, 0xc
xchg edi, ebx
mov si, 0x7201
movsx esi, bp
pop esi
not di
pop ebx
mov di, cx
not di
pop edi
jmp 0xebb546
jne 0xe6cc6f
pop esi
btc bx, bx
pop ebx
xor eax, eax
movzx edi, si
jmp 0xe6dac4
jbe 0xecdf17
lea ebx, [ebp - 0x114]
sub ebx, eax
or dl, dl
mov dl, byte [eax]
test ebp, 0x2bd60aa9
cmp dx, 0x7626
cmc
test dl, dl
je 0xecdf17
mov byte [ebx + eax], dl
movzx edx, cx
movzx dx, ah
mov edx, dword [ebp + 8]
jmp 0xe38409
call eax
pop esi
movzx ebx, sp
mov di, 0x69d6
pop ebx
pop edi
jmp 0xe5ec6c
jne 0xb354e0
pop esi
or bx, di
sar di, 0x42
pop ebx
btc edi, 0xb0
xor eax, eax
mov edi, esp
movsx edi, cx
pop edi
jmp 0x1549cd9
call fcn.00e3a3aa
add esp, 0xc
mov edi, eax
setns bh
mov bl, 0xd0
pop esi
cmove edi, esp
mov bx, cx
mov edi, 0x76bb3454
pop ebx
pop edi
jmp 0xe6b48c
push ecx
jmp 0x144faf3
jae 0xeb1ab1
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0xea6abd
push ebx
push esi
stc
or esi, 0xffffffff
test edi, esi
cmc
mov dword [ebp - 0x10], edx
cmp esi, edi
cmp esi, 0x4c6c56d7
test ebp, 0x3bc659db
mov dword [ebp - 8], esi
cmc
cmp ecx, 0xffff
ja 0x1410081
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0x1542a99
mov esp, ebp
mov ebp, esp
bswap ebp
pop ebp
jmp 0xb32d1f
sub bl, 0x30
jmp 0xb2adf5
mov eax, dword [ebp + 0xc]
push eax
not eax
movsx ax, dh
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0xeaa220
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0xe88768
mov esp, ebp
pop ebp
jmp 0xb0374b
jb 0xea6acd
mov eax, dword [ebp + 8]
mov ch, 0x34
movzx ecx, dx
lea ecx, [ebp - 0x114]
jmp 0x1544ab4
call fcn.01418c32
add esp, 4
cmp esi, 0x2bfc25ee
cmp eax, 0xffffffff
jmp 0xb4fafb
jne 0x153e8ac
mov eax, dword [edx + 0x78]
test ax, bp
cmp al, 0xa3
mov dword [ebp - 4], eax
test eax, eax
jmp 0x1414b8d
dec ebx
cmc
test esp, eax
stc
add edx, edi
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
clc
test ebx, ebx
jmp 0x150b1f0
mov edx, dword [edi + 0x3c]
cmc
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jmp 0xee44e3
mov ebx, dword [eax + edi + 0x18]
cmp esi, 0xb3125fb
jmp 0x1459cdb
je 0x153e8ac
mov edx, dword [edx + 0x7c]
jmp 0xeb8fcf
lea esi, [ebp + edx - 0x114]
add al, dl
clc
cmc
xor al, byte [ebx + esi]
jmp 0x14d28b7
push eax
jmp 0xe8e9bb
je 0xec3ce9
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
sub edx, edx
adc si, ax
sub ebx, eax
mov edi, edi
setne al
mov eax, 0x17b92980
mov cl, dl
rol eax, cl
jmp 0x141ec14
test cl, cl
jmp 0xe8424e
push eax
jmp 0xeb59de
jne 0xec8816
inc esi
jmp 0x14c98df
push eax
push edi
cwde
movzx ax, bh
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0xb4ce59
test ebx, ebx
je 0x151c3e0
mov edx, dword [eax + edi + 0x20]
jmp 0xef53e0
mov esp, ebp
pop ebp
jmp 0xb44e3b
mov dword [ebp + 8], esi
jmp 0xb37ac7
mov byte [esi], al
je 0x14d28d0
inc edx
clc
test cl, 0x47
cmp edx, 0x104
jb 0x142e65d
lea eax, [ebp - 0x114]
jmp 0x145802e
je 0xeb1ab1
cmp eax, edi
jne 0xb233e9
cmp byte [ebp + 0x10], 0
jmp 0x142e642
mov esi, dword [ebp - 8]
jmp 0x151c3e0
jl 0x151c3e0
jmp 0xb04384
je 0x154284c
mov cl, byte [esi + 1]
inc esi
cmp di, 0x3312
test cl, cl
jmp 0xeb1aab
cmp esi, dword [eax + edi + 0x14]
jmp 0xe7c3e0
je 0xefac52
xor eax, eax
movsx edi, bp
pop edi
jmp 0xb4efd6
mov ecx, esi
sub ecx, eax
cmp dx, 0x7a86
test cx, dx
cmp ecx, 0x104
jmp 0xeb6627
jae 0xeb1ab1
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
test ebx, 0x50fd3db3
mov ecx, dword [ecx + edi]
cmc
test esp, 0x3a9d1145
cmp ebp, 0x4f5f31f8
test ecx, ecx
jmp 0xe94c75
push ecx
jmp 0xe5568b
mov esp, ebp
cmovno ebp, edx
movsx ebp, ax
pop ebp
jmp 0xaf255b