Function at 0x9ce965
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0xa48bfd
mov ebx, dword [ebp + 0xc]
shld eax, eax, 0x30
lea eax, [ebp - 0x114]
sub edx, edx
ror esi, 0x84
shl cl, cl
sub ebx, eax
not esi
mov edi, edi
mov eax, 0x2abe3c9c
ror cl, 0x41
mov cl, dl
btc si, bx
rol eax, cl
cmc
btr si, di
lea esi, [ebp + edx - 0x114]
stc
cmp ah, 0x7a
test edx, 0x2bc91148
add al, dl
cmc
xor al, byte [ebx + esi]
jmp 0x9d658e
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
btr esi, ecx
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
sar al, cl
mov eax, dword [ebp + 0x10]
clc
test ebp, 0x4a5b1be8
stc
push eax
xchg ah, ah
seta al
sar esi, 1
shld ax, ax, 0xae
test ax, sp
bts ax, bp
mov eax, dword [edx + esi*4]
cmp al, 0xab
add eax, edi
jmp 0xbd8d8f
mov ecx, dword [ebp - 4]
jmp 0x8f8178
mov esp, ebp
cmovge bp, sp
pop ebp
jmp 0x93ed53
jae 0xa1bf1e
mov ecx, dword [eax + edi + 0x1c]
movzx edx, cx
shld dx, ax, 0x1d
lea edx, [ecx + esi*4]
rcr ecx, cl
shl ch, 0x83
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0xa1dd1c
push eax
jmp 0xa07e8b
jae 0x80f4d1
lea eax, [ecx + edi]
cmc
mov cl, byte [eax]
or si, sp
rcl esi, 0x35
mov esi, eax
stc
cmp ecx, edx
test cl, cl
jmp 0x9209d5
pop esi
setae bh
pop ebx
mov ax, dx
lea eax, [ecx + edi]
pop edi
mov esp, ebp
xchg bp, bp
pop ebp
jmp 0x933f8b
jne 0x9ca1c5
lea edx, [ebp - 0x114]
mov eax, 0x4c3f7ac3
push edx
movzx eax, bx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x8ee5dd
pop edi
mov esp, ebp
pop ebp
ret
mov ecx, esi
test dx, 0x2f30
sub ecx, eax
clc
cmp ecx, 0x104
jmp 0x8308db
jae 0xa1bf1e
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0x9f8ab0
jne 0x9dca4c
push 0
jmp 0xa512e2
test dl, dl
je 0x92d6de
mov byte [ebx + eax], dl
movsx edx, di
cdq
dec edx
mov edx, dword [ebp + 8]
inc edx
jmp 0x95666f
call eax
test eax, eax
jmp 0x81e261
push ecx
jmp 0xa603ea
je 0xa3f01e
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0xa3f003
mov cl, byte [esi + 2]
cmp bp, 0x4fd2
cmc
lea esi, [esi + 2]
test ah, 0x79
jmp 0xa066cb
jne 0x9ab2a9
inc esi
mov dword [ebp + 8], esi
jmp 0x9ab2a9
mov esp, ebp
movsx ebp, ax
pop ebp
ret
test cl, cl
jmp 0x9dca46
mov esp, ebp
cmove ebp, eax
pop ebp
jmp 0x912fa7
call eax
test eax, eax
jmp 0x9ca1bf
je 0xa3f01e
mov edx, dword [edx + 0x7c]
push ebx
push esi
jmp 0xa21f64
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
movzx edx, dx
movzx ecx, word [eax + edi]
jmp 0xa417e4
cmp edx, 0x104
jmp 0x924830
ret
jb 0x80f4d1
mov edx, dword [ebp - 0x10]
test bh, 0x24
lea edx, [edx + eax]
cmp ecx, edx
jmp 0x80e3dd
ret
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xbcb270
jae 0xa1bf1e
mov edx, dword [eax + edi + 0x1c]
cmc
lea ecx, [edx + ecx*4]
jmp 0xa56819
je 0xa1bf1e
mov edi, edi
cmp ebx, edi
cmp cl, 0x2e
jmp 0x949f71
jb 0x7dd6f9
lea eax, [ebp - 0x114]
push eax
push edi
not al
jmp 0xbcbdb0
jb 0x9f8ac5
mov eax, dword [ebp + 8]
bswap cx
movsx ecx, cx
mov cx, cx
lea ecx, [ebp - 0x114]
jmp 0x8c6091
ret
ret
je 0x826c0a
mov cl, byte [esi + 1]
jmp 0xa2d00d
test eax, eax
jmp 0x8f1455
call fcn.009ce965
add esp, 0xc
cmovno ebx, esi
pop esi
pop ebx
jmp 0x82049d
mov esp, ebp
xchg bp, bp
mov ebp, esi
pop ebp
jmp 0xa60c1f
je 0x8cd386
push 0
jmp 0xbc855c
inc eax
mov dword [ebp + 8], edx
jmp 0xbbfc49
cmp dword [ebp + 8], ebx
jle 0x7e149e
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
test esi, ebp
cmp esi, dword [eax + edi + 0x14]
jmp 0x7f33aa
test edi, edi
jmp 0x8cb00e
je 0xa1bf1e
cmp eax, edi
jmp 0xbc1ca6
inc esi
test sp, dx
stc
test edx, 0xafa6378
cmp bl, 9
jmp 0xbcaa44
push ebp
mov ebp, esp
cmp eax, edi
jmp 0xa11cd4
ret
call eax
pop esi
movsx bx, dl
pop ebx
mov di, 0x782a
movzx edi, ax
pop edi
jmp 0x7ebf56
mov byte [esi], al
jmp 0xa50aee
je 0x8330a3
mov bl, cl
cmp di, bp
stc
test sp, cx
sub bl, 0x30
jmp 0x9cbdac
mov esp, ebp
cmovl bp, di
pop ebp
jmp 0x9d178f
mov esp, ebp
pop ebp
jmp 0x8ff95f
jbe 0x92d6de
lea ebx, [ebp - 0x114]
rcl dl, cl
sub ebx, eax
sar dl, 0x6b
xor dl, bl
mov dl, byte [eax]
cmp ax, 0x7302
jmp 0x8befe0
je 0x7eb262
cmp eax, 1
jmp 0x8d337c
jmp 0x9ab2a9
xor edx, edx
cmc
jmp 0x8e88f1
call fcn.009ce965
add esp, 0xc
pop esi
pop ebx
pop edi
jmp 0x9e660e
lea esp, [esp - 0x114]
push edi
or edi, ebx
mov edi, dword [ebp + 8]
jmp 0x9bf3dc
jne 0x9209df
pop esi
shl di, 0x11
pop ebx
sub eax, eax
pop edi
jmp 0x8dc9d7
je 0xa1bf1e
cmp ecx, eax
jmp 0x9086b8
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
clc
mov dword [ebp - 8], esi
clc
cmp ax, 0x7af4
cmp ecx, 0xffff
ja 0xbcbca4
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0x91994d
inc esi
test cl, cl
jmp 0xa1bf18
jne 0xa3f01e
mov eax, dword [edx + 0x78]
cmc
mov dword [ebp - 4], eax
clc
jmp 0x94d417
pop ebx
pop edi
jmp 0x951d0b
mov edx, dword [edi + 0x3c]
cmp cl, al
stc
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jmp 0xa32e96
je 0xa3f01e
mov eax, 0x5a4d
test edi, 0x7d7779a7
stc
cmp word [edi], ax
je 0xa3db7d
xor eax, eax
pop edi
jmp 0x8ed93e
lea edx, [ebx + 1]
jmp 0xa56fe4
lea ebx, [esi - 1]
jmp 0x9ab2a9
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x953308
mov eax, dword [ebp + 0xc]
jmp 0xa684c9
je 0x9ab2ba
mov edx, dword [eax + edi + 0x20]
jmp 0xa5989e
je 0x924836
inc edx
jmp 0x8fa475
push edx
jmp 0x806afa
mov dword [ebp + 8], 0
cmp sp, bx
mov dword [ebp - 0xc], edx
stc
test si, 0x6c86
test bx, dx
test ebx, ebx
jl 0x9ab2ba
jmp 0x7e14a7
mov ecx, dword [ecx + edi]
test ecx, ecx
jne 0xa1dd22
pop esi
sal bx, 0x82
sal bh, cl
xadd bx, di
pop ebx
sub eax, eax
mov di, 0x2235
pop edi
jmp 0x9e04a6
mov dword [ebp - 8], ecx
jmp 0xbc368b
dec ebx
cmc
test esp, ebp
lea edx, [edx + edi]
jmp 0xa54c79
mov byte [ebp + eax - 0x114], 0
lahf
movzx eax, di
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x8c5123
ret
push eax
jmp 0x94e686
push eax
bswap ax
push edi
jmp 0x91428a
cmp edx, ecx
jmp 0x92d6d8
jne 0xa46aab
cmp byte [ebp + 0x10], 0
jmp 0x7dd6d9
mov dword [ebp + 8], edx
jmp 0xa05a1d
push ecx
jmp 0xa62d7e
ja 0x8330a3
movsx ecx, cl
stc
cmp ax, 0x10b1
clc
lea edx, [edx + edx*4]
stc
lea edx, [ecx + edx*2 - 0x30]
and cl, 0x46
mov cl, byte [esi]
stc
test cl, cl
jmp 0x83309d
call eax
pop esi
jmp 0xa3aa43
mov ebx, dword [eax + edi + 0x18]
test bx, 0x3838
clc
test ebx, ebx
jmp 0xa4b38f
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x9d3b50
call fcn.00806acd
add esp, 4
test bl, 0xaa
cmp si, 0x43f4
cmc
cmp eax, 0xffffffff
je 0xa42467
test eax, eax
jmp 0xa03565