Function at 0xafa9d0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0x9a853a
cmp eax, 1
jmp 0x959c05
mov dword [ebp - 8], ecx
jmp 0x98fe1e
je 0xa0f562
mov edx, dword [edx + 0x7c]
push ebx
clc
push esi
stc
test di, di
or esi, 0xffffffff
cmp dl, 0xc4
mov dword [ebp - 0x10], edx
cmc
test ax, di
stc
mov dword [ebp - 8], esi
test ah, 0x40
cmp bp, di
cmp ecx, 0xffff
ja 0x9f92ab
sub ecx, dword [eax + edi + 0x10]
test si, si
cmp ecx, dword [eax + edi + 0x14]
jmp 0xaf9e00
jne 0xa0941c
pop esi
bsf di, ax
pop ebx
xor eax, eax
pop edi
mov esp, ebp
pop ebp
jmp 0x9532cb
ret
cmp edx, ecx
jb 0x987941
mov eax, dword [ebp + 8]
jmp 0xac9730
jne 0x9ddf6f
inc esi
jmp 0xabc362
ret
ret
cmp byte [esi + 1], 0x23
movzx ecx, bp
lea ecx, [esi + 1]
jmp 0xa923b3
push eax
push edi
lahf
mov eax, esi
movzx ax, bh
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0xae6175
je 0x9e584f
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
sar cl, cl
sub edx, edx
rcr si, 0xdd
sub ebx, eax
mov edi, edi
mov eax, 0x220160fe
rcl cl, cl
mov cl, dl
rol si, 0xfb
bswap si
rol eax, cl
btc esi, edi
or si, 0x4a51
lea esi, [ebp + edx - 0x114]
add al, dl
stc
xor al, byte [ebx + esi]
jmp 0x99fbc4
jbe 0x954bba
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
cmp bp, 0xec0
test dl, dl
jmp 0xaf9db8
jb 0x9d22fe
mov edx, dword [ebp - 0x10]
jmp 0xa4c63a
mov dword [ebp + 8], edx
jmp 0x9ddf6f
ret
mov byte [esi], al
je 0xa97ab4
inc edx
jmp 0xaeef4d
push eax
xchg ah, ah
cbw
push edi
bswap ax
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x9e32a6
jne 0xad1725
push 0
push edx
jmp 0xa9cef2
mov ecx, dword [ebp - 4]
xchg dl, al
mov eax, 0x779a508c
cbw
mov edx, dword [ecx + edi + 0x24]
cmove cx, sp
lea eax, [edx + esi*2]
setnp cl
mov edx, 0x83650f7
not cx
movzx ecx, word [eax + edi]
movsx dx, ah
lea edx, [ebx + 1]
jmp 0x94be31
pop esi
movzx edi, di
jmp 0xb01fd9
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0x95e30f
ret
cmp ecx, 0x104
jmp 0xa8b1f4
xor edx, edx
cmp bp, sp
test bp, dx
test cl, cl
jmp 0xad171f
mov edx, dword [edi + 0x3c]
cmp bx, di
test dx, 0x54d4
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jne 0xa0f562
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
test eax, eax
jmp 0x94c5db
test ecx, ecx
jmp 0x987933
inc esi
clc
cmc
cmp bl, 9
ja 0x9a84c6
movsx ecx, cl
test dh, 0x50
test ebx, edi
lea edx, [edx + edx*4]
clc
cmp bp, si
lea edx, [ecx + edx*2 - 0x30]
shr cl, cl
mov cl, byte [esi]
test cl, cl
jmp 0x9a84c0
pop esi
setno bl
pop ebx
cbw
cmovb ax, cx
lea eax, [ecx + edi]
jmp 0xab4271
inc esi
test si, 0x2cda
test cl, cl
jmp 0xa8432e
je 0x9ddf88
mov edx, dword [eax + edi + 0x20]
jmp 0xaffa91
jl 0x9ddf88
jmp 0xad4910
lea ebx, [esi - 1]
stc
cmp dword [ebp + 8], ebx
jle 0xad490a
mov eax, dword [ebp - 4]
shld esi, eax, 0x76
test cx, 0x3ec0
mov esi, dword [ebp - 8]
cmc
cmp esi, dword [eax + edi + 0x14]
jmp 0x9e4bb6
call eax
pop esi
cmovs bx, di
pop ebx
xchg di, di
movsx edi, si
pop edi
mov esp, ebp
pop ebp
ret
jae 0xa84334
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
cmc
cmp si, 0x114d
test ah, 0xd1
test ecx, ecx
jmp 0xa09416
mov eax, dword [ebp + 0xc]
jmp 0x9a060f
call eax
test eax, eax
jmp 0xaa1d7b
mov ecx, esi
stc
clc
test si, 0x547f
sub ecx, eax
jmp 0x9bd7a5
mov ebx, dword [eax + edi + 0x18]
jmp 0xa9c768
je 0xa84334
cmp ecx, eax
jmp 0x989dae
je 0x9c31e9
sub eax, eax
pop edi
jmp 0xa8caad
je 0xa84334
cmp eax, edi
jmp 0xa53686
call eax
test eax, eax
jmp 0xa1f51c
lea edx, [edx + eax]
test si, dx
clc
cmp ecx, edx
jmp 0xa84057
jne 0x961864
cmp byte [ebp + 0x10], 0
jmp 0x972826
inc edx
inc eax
cmp bp, 0x4726
cmp ebx, esi
mov dword [ebp + 8], edx
jmp 0x954bb2
jae 0x9d22fe
lea eax, [ecx + edi]
mov cl, byte [eax]
and si, sp
sub si, 0x1bc7
mov esi, eax
cmc
test cx, 0x1aec
test cl, cl
jmp 0xae8d14
jne 0xae8d22
pop esi
rcl bx, cl
pop ebx
xor eax, eax
pop edi
mov esp, ebp
movsx ebp, ax
pop ebp
jmp 0x996f8d
jae 0xa84334
mov dword [ebp + 8], 0
test al, ch
cmc
jmp 0x9c36d3
mov esp, ebp
pop ebp
ret
je 0xaf7e31
push 0
jmp 0xac7e1f
jb 0x972841
lea eax, [ebp - 0x114]
jmp 0x9650ba
test ebx, ebx
jmp 0x9d4769
push eax
jmp 0xac9228
jne 0xa1f522
lea edx, [ebp - 0x114]
xchg al, ah
cmovne ax, ax
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
jmp 0xa32f20
pop edi
jmp 0x9aa101
je 0x9ddf6b
test eax, eax
jmp 0x93ca87
mov dword [ebp + 8], esi
jmp 0xae659a
je 0xa0f562
mov eax, 0x5a4d
cmp word [edi], ax
jmp 0xa0f55c
push ecx
jmp 0xaddcbe
call fcn.00afa9d0
add esp, 0xc
xchg ebx, esi
pop esi
mov bh, 0xe0
pop ebx
mov edi, edi
pop edi
mov esp, ebp
mov bp, 0x7400
xchg ebp, ebp
pop ebp
ret
lea ecx, [ebp - 0x114]
push ecx
jmp 0xae8999
je 0x9a84c6
mov bl, cl
stc
test si, 0x39da
sub bl, 0x30
jmp 0x9ce184
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
sub si, si
or si, 0x7ed0
lea esi, [ebx + eax]
or ah, 0xd6
bsf eax, ebp
mov eax, dword [ebp + 0x10]
cmp esp, 0x2cdf76df
push eax
sar eax, 0x35
sar esi, 1
sbb al, 0x79
mov eax, dword [edx + esi*4]
test edi, 0x4b1f3043
cmc
add eax, edi
call fcn.009dca99
lea esp, [esp + 4]
cmp eax, 0xffffffff
jmp 0xab7da1
mov esp, ebp
pop ebp
jmp 0x960d4f
lea esp, [esp - 0x114]
cmp al, 0x81
cmc
push edi
sbb di, si
shl di, 0xc7
mov edi, dword [ebp + 8]
stc
test edi, edi
je 0xa0f562
mov ecx, dword [ebp + 0xc]
cmp dh, bl
cmc
test ecx, ecx
jmp 0xac415a
push eax
jmp 0xb0c3fb
call eax
pop esi
pop ebx
movzx edi, bx
pop edi
mov esp, ebp
movsx ebp, sp
pop ebp
jmp 0x9bbb6f
jmp 0x9ddf6f
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x9f7190
je 0xa84334
mov edi, edi
test esi, 0x6ebe6348
cmp cl, 0x2e
je 0x9f7ae5
mov cl, byte [esi + 1]
jmp 0x9d2948
cmp edx, 0x104
jmp 0xa97aae
mov cl, byte [esi + 2]
lea esi, [esi + 2]
stc
jmp 0x9c05c2
je 0x954bba
mov byte [ebx + eax], dl
cdq
mov edx, dword [ebp + 8]
jmp 0xa54580
jae 0xa84334
mov edx, dword [eax + edi + 0x1c]
test dx, dx
cmc
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0x94f308
push ebp
mov ebp, esp
test esi, ebp
cmc
jmp 0xadcb63
dec ebx
lea edx, [edx + edi]
mov dword [ebp + 8], 0
clc
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x9db794
pop ebx
not edi
pop edi
jmp 0xadac72
call fcn.00afa9d0
add esp, 0xc
bswap esi
jmp 0x9a8fbd