Function at 0x9a3591
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jbe 0xf315b1
lea ebx, [ebp - 0x114]
stc
add dl, 0x30
sub ebx, eax
xor dl, 0x71
mov dl, byte [eax]
clc
test al, 0x68
stc
test dl, dl
je 0xf315b1
mov byte [ebx + eax], dl
jmp 0xed6531
jb 0x9e08e4
mov edx, dword [ebp - 0x10]
lea edx, [edx + eax]
cmp eax, 0x645a5491
test eax, 0x6bfc57e3
cmp ecx, edx
jae 0x9e08e4
lea eax, [ecx + edi]
mov cl, byte [eax]
sub esi, edi
dec si
mov esi, eax
jmp 0xa9623d
push eax
movzx ax, ah
cwde
cbw
push edi
sete ah
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xed3c3c
push ebp
mov ebp, esp
lea esp, [esp - 0x114]
cmp ah, 0x26
test ax, 0xafe
push edi
mov edi, dword [ebp + 8]
clc
cmp dx, 0x5513
test edi, edi
jmp 0xec390b
je 0xa0ba2c
cmp eax, 1
jne 0xe97ee8
inc esi
jmp 0xee35d9
push eax
jmp 0xf21f72
ret
mov esp, ebp
movsx ebp, sp
pop ebp
jmp 0xa01aa7
mov dword [ebp - 0xc], edx
cmp esi, 0x52d45904
cmc
test ebx, ebx
jmp 0xe97e80
jne 0xa6358a
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
stc
test eax, eax
jmp 0xf23761
mov ecx, esi
cmc
sub ecx, eax
clc
test di, bx
cmp ecx, 0x104
jmp 0x9cf168
jae 0xe8a6b0
mov dword [ebp + 8], 0
cmp dl, bh
stc
cmp cx, 0x3392
test ecx, ecx
jmp 0x99392b
mov cl, byte [esi + 2]
cmp ebp, 0x73b95f82
lea esi, [esi + 2]
clc
sub edx, edx
test cl, cl
jmp 0xfa307d
lea ebx, [esi - 1]
stc
test edx, 0x6715210f
jmp 0xe97ee8
mov edx, dword [edi + 0x3c]
jmp 0xed756a
pop esi
setle bl
xchg bl, bh
mov ah, 0xf0
pop ebx
lahf
movsx ax, bl
cmovp ax, di
lea eax, [ecx + edi]
movzx edi, bx
mov edi, edx
pop edi
jmp 0xe9347c
cmp bl, 9
ja 0xeaa3fa
movsx ecx, cl
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
cmp bl, bl
test cl, cl
jmp 0xeaa3f4
jae 0xe8a6b0
mov ecx, dword [eax + edi + 0x1c]
btc edx, 0xef
sar dl, cl
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
test ecx, ecx
je 0xe8a6b0
cmp ecx, eax
jmp 0x996892
jle 0xa70d3b
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0x9fa655
mov esp, ebp
pop ebp
jmp 0xa98443
ret
call eax
pop esi
mov di, 0x7b75
not di
pop ebx
movsx edi, bx
pop edi
mov esp, ebp
pop ebp
ret
ret
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0xed325b
mov ecx, dword [ebp - 4]
cmovle edx, ecx
cwd
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
jmp 0xf60b60
cmp eax, 0xffffffff
jmp 0xf22324
jae 0xe8a6b0
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
cmc
clc
test ebx, 0x31f04a94
mov ecx, dword [ecx + edi]
test ecx, ecx
jne 0x9fa673
pop esi
pop ebx
test ecx, 0x8ed2142
sbb edi, 0xd336987
sub eax, eax
pop edi
mov esp, ebp
mov bp, bx
bswap ebp
pop ebp
jmp 0xa773c7
je 0xe8a6b0
cmp eax, edi
jmp 0xf653c4
je 0xfa3c18
mov ebx, dword [ebp + 0xc]
cbw
lea eax, [ebp - 0x114]
sub edx, edx
xchg si, si
sub ebx, eax
rcl cl, 0x59
mov edi, edi
mov eax, 0x669c5a7b
mov cl, dl
rol eax, cl
xor si, 0xbb9
lea esi, [ebp + edx - 0x114]
stc
test edx, edi
add al, dl
test bp, di
xor al, byte [ebx + esi]
jmp 0xa7e85a
jne 0xa30067
lea edx, [ebp - 0x114]
mov ah, bh
movzx eax, dx
mov ah, 0x38
push edx
not ah
movzx ax, ch
cbw
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xe7a15f
je 0x9de5a2
sub eax, eax
mov di, 0x5736
pop edi
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0xc]
cdq
mov edx, dword [ebp - 0xc]
shl ah, cl
sub esi, 0x6a0131a9
mov eax, dword [ebp + 8]
shl si, 0x86
bt esi, 0x35
lea esi, [ebx + eax]
rol eax, cl
mov eax, dword [ebp + 0x10]
push eax
cmp bx, di
lahf
rol ax, cl
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.00a07679
add esp, 4
jmp 0xa0c35a
ret
je 0xf60c35
inc edx
cmp edx, 0x104
jmp 0xf60c2f
push ecx
push eax
call fcn.009a3591
add esp, 0xc
cmove ebx, ebp
pop esi
pop ebx
pop edi
jmp 0x9fd725
mov byte [esi], al
jmp 0xa7bed7
inc edx
jmp 0xedacc3
test cl, cl
jmp 0xf65476
ret
cmp dword [edx], 0x4550
jmp 0x9c0e12
call eax
test eax, eax
jmp 0xa30061
pop ebp
jmp 0x9b25eb
cmp cl, 0x2e
je 0x9c9126
mov cl, byte [esi + 1]
inc esi
cmp ax, sp
clc
test cl, cl
jne 0xe8a697
pop esi
bswap bx
setg bh
shld edi, esi, 0xcf
pop ebx
xor eax, eax
mov di, ax
pop edi
mov esp, ebp
jmp 0xe7ab04
mov esp, ebp
movzx ebp, di
not bp
mov bp, sp
pop ebp
jmp 0xefdab7
jl 0x9fb29c
jmp 0xa70d4a
cmp dword [ebp + 8], ebx
jmp 0x9fb290
push eax
lahf
movzx eax, dx
mov ah, 0xbc
push edi
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xa0418e
dec ebx
cmp ax, bx
jmp 0xebc2bb
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xfa2fdd
jne 0xfa3083
push 0
push edx
jmp 0x9b0255
add edx, edi
test bp, 0x316e
cmp edi, ebx
mov dword [ebp + 8], 0
jmp 0x9bfd80
je 0xa6358a
mov ecx, dword [ebp + 0xc]
test bp, sp
stc
test ecx, ecx
jmp 0xee9b92
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
je 0x9fb29c
mov edx, dword [eax + edi + 0x20]
jmp 0xea4456
jmp 0xe97ee8
call eax
pop esi
xchg bx, di
mov bx, 0x4522
pop ebx
pop edi
jmp 0xf07a82
mov edx, dword [ebp + 8]
jmp 0xa8708d
lea edx, [edx + edi]
jmp 0xaad964
inc eax
test sp, sp
mov dword [ebp + 8], edx
clc
cmp edx, ecx
jmp 0xf315ab
cmp byte [esi + 1], 0x23
cmovp ecx, ecx
lea ecx, [esi + 1]
je 0x9d0695
push 0
jmp 0xa7c96c
mov dword [ebp + 8], esi
jmp 0xe97ee8
je 0xa6358a
mov eax, 0x5a4d
cmp bh, 0x82
cmp word [edi], ax
jmp 0xa63584
ret
mov esp, ebp
cmovnp ebp, esi
mov bp, 0x597b
pop ebp
jmp 0xa05b85
call fcn.009a3591
add esp, 0xc
pop esi
pop ebx
pop edi
jmp 0x9ba725
je 0x9db9ea
test eax, eax
jmp 0x9aebc4
ja 0xec8996
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0xa143d9
je 0xa6358a
mov edx, dword [edx + 0x7c]
push ebx
stc
push esi
or esi, 0xffffffff
stc
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp ecx, 0xdd950b0
cmp ecx, 0xffff
jmp 0xf22757
jb 0x993940
mov eax, dword [ebp + 8]
xchg ch, ch
lea ecx, [ebp - 0x114]
jmp 0xf59535
push ecx
jmp 0xea77b0
movzx ecx, word [eax + edi]
cwd
lea edx, [ebx + 1]
jmp 0xa05ded
jb 0xa4d5c0
lea eax, [ebp - 0x114]
jmp 0x9a27de
jne 0xee166c
cmp byte [ebp + 0x10], 0
jmp 0xa4d5a3
je 0xe8a6b0
mov edi, edi
jmp 0xe8a697
call eax
test eax, eax
jmp 0xa5a941
je 0xeaa3fa
mov bl, cl
cmp bp, 0xda6
stc
cmc
sub bl, 0x30
inc esi
jmp 0x9f37c9
mov eax, dword [ebp + 0xc]
jmp 0xe9a264