Function at 0x9c8f31
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
lea esp, [esp + 4]
jmp 0x9c8f43
mov eax, dword [esp + 4]
push ecx
push bp
push word [esp + 2]
push dword [esp + 6]
push word [esp + 4]
jmp 0xa06378
dec dword [esp + 8]
mov al, byte [edx]
mov byte [ecx], al
mov eax, dword [esp + 8]
inc ecx
inc edx
test eax, eax
jne 0xa062ef
je 0xa06358
xchg ebx, edi
mov ah, byte [esp]
mov dword [esp + 0x1c], ebp
pushfd
push dword [esp + 1]
pop word [esp]
lea esp, [esp + 2]
lea esp, [esp + 4]
popal
lea eax, [eax + 0x3c]
mov ecx, dword [eax]
pop eax
xor edx, edx
push eax
lea esp, [esp]
jmp 0xa063ac
dec dword [esp + 8]
mov eax, edi
pop edi
ret
pop word [esp + 8]
push dword [esp + 0xb]
mov dword [esp + 0xc], edi
pushfd
mov word [esp], si
mov byte [esp], cl
push word [esp + 1]
mov dword [esp], ebp
mov word [esp], cx
lea esp, [esp + 2]
lea esp, [esp + 0x10]
mov edi, ecx
test eax, eax
je 0xa06358
jmp 0xa062ef
lea esp, [esp + 4]
add ecx, ebp
mov eax, 0x10b
mov dword [esp + 0x14], edx
cmp word [ecx + 0x18], ax
je 0xa0651d
xor eax, eax
mov ebp, dword [esp]
bswap bp
jmp 0xa06485
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
js 0xa064ea
jmp 0xa064c6
mov byte [esp + 0x11], cl
lea esp, [esp + 2]
lea esp, [esp + 0x30]
sub ebx, 1
jmp 0xa063f0
mov byte [esp], ah
push cx
mov byte [esp], ch
lea esp, [esp + 4]
add esi, ebp
pushal
add esp, 0xc
pop dword [esp + 5]
pop dword [esp + 6]
pushfd
lea esp, [esp + 4]
mov byte [esp + 2], cl
pop word [esp + 2]
lea esp, [esp + 2]
add edi, ebp
push ebx
push word [esp + 3]
pushfd
mov dword [esp + 1], ebp
pushal
mov dword [esp + 0x1d], esi
jmp 0xa06418
bswap ebp
lea ebp, reloc.MSVFW32.dll_DrawDibDraw
bswap bp
bswap bp
mov bp, word [esp]
mov ebp, dword [esp]
mov ebp, dword [esp]
pushal
mov word [esp + 1], di
mov byte [esp + 0xb], bh
lea esp, [esp + 8]
pop dword [esp + 0xe]
lea esp, [esp + 0xe]
mov dword [esp], esp
lea esp, [esp + 2]
lea esp, [esp + 8]
add esp, 0x24
ret 8
mov edx, dword [esp + 0x3c]
mov al, byte [edx]
mov byte [esp + 0x38], al
movzx eax, al
mov dword [esp + 0x28], eax
mov eax, dword [ecx + 0x78]
push edi
mov edi, ecx
lea edi, [edi + 0x7c]
mov ecx, dword [edi]
pop edi
sub esp, 0xe
mov byte [esp + 4], cl
lea esp, [esp + 2]
add eax, ebp
pushal
mov dword [esp + 1], esi
mov dword [esp + 0x13], esp
push edx
mov word [esp + 2], di
push word [esp + 8]
lea esp, [esp + 2]
lea esp, [esp + 0x30]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
je 0xa063c6
push edx
mov edx, eax
lea edx, [edx + 0x20]
mov ecx, dword [edx]
pop edx
sub esp, 0x10
mov word [esp + 0xc], sp
cmp ecx, edx
push edi
lea esp, [esp + 0x14]
je 0xa063c6
push ebx
mov ebx, dword [eax + 0x18]
pushfd
mov byte [esp + 1], dl
mov dword [esp], esi
push ecx
pushal
mov ch, 0xdd
mov dword [esp + 0x18], eax
pushal
mov dword [esp + 0xe], esp
lea esp, [esp + 0x20]
popal
lea ecx, [ecx + 0x24]
mov esi, dword [ecx]
pop ecx
push edi
mov edi, dword [eax + 0x1c]
push eax
add esp, 2
mov word [esp], di
lea esp, [esp + 2]
add ecx, ebp
pushfd
mov word [esp], dx
push dword [esp + 1]
pop dword [esp]
mov dword [esp], ebx
pop word [esp]
jmp 0xa06438