Function at 0xa3be8b
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop esi
movzx ax, dl
cbw
cwde
pop ebx
bswap ax
mov ax, bx
seto al
lea eax, [ecx + edi]
xchg di, di
movsx edi, si
mov edi, 0x3d80a7a
pop edi
mov esp, ebp
pop ebp
ret
cmp ecx, dword [eax + edi + 0x14]
jmp 0xac8594
je 0xabd0c3
mov eax, 0x5a4d
jmp 0xa2ebbb
je 0xa2222a
cmp eax, edi
jmp 0xafe211
je 0xa3029f
inc edx
cmp edx, 0x104
jmp 0xa30299
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jle 0xaf96b6
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp esp, edx
cmp esi, dword [eax + edi + 0x14]
jae 0xa2222a
mov ecx, dword [eax + edi + 0x1c]
rol dl, cl
sub dx, 0x48a3
lea edx, [ecx + esi*4]
bts ecx, ecx
mov cl, 0xca
mov ecx, dword [edx + edi]
clc
cmp edi, 0x75d60b03
stc
test ecx, ecx
jmp 0xaf6a6b
jl 0x8c7b2a
jmp 0xaf96c1
jne 0x8c7b19
inc esi
mov dword [ebp + 8], esi
jmp 0xb2a24b
je 0xad0932
mov bl, cl
sub bl, 0x30
jmp 0xad2019
mov byte [esi], al
jmp 0x8c13bd
mov esp, ebp
mov bp, 0x1512
pop ebp
ret
jae 0xa2222a
mov dword [ebp + 8], 0
test bx, si
test ecx, ecx
jbe 0x9a14f6
lea ebx, [ebp - 0x114]
rcl dl, 0xe3
sub ebx, eax
sar dl, cl
stc
mov dl, byte [eax]
clc
test dl, dl
jmp 0xa2b1b0
pop edi
jmp 0x99fc51
mov esp, ebp
pop ebp
jmp 0x9e9b6f
pop edi
jmp 0x9aa480
call fcn.008d8cdb
lea esp, [esp + 4]
cmp dl, 0x9d
cmp eax, 0xffffffff
je 0x8c7b16
test eax, eax
jmp 0x9d7213
push edx
jmp 0x90117b
push eax
jmp 0xa429a9
jne 0xabd0c3
mov eax, dword [edx + 0x78]
clc
mov dword [ebp - 4], eax
jmp 0xa49fdd
call eax
pop esi
cmovp bx, sp
pop ebx
xchg edi, edi
jmp 0x8f2ffe
dec ebx
add edx, edi
mov dword [ebp + 8], 0
cmp bp, 0x5a3f
test sp, bx
cmp bx, sp
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x8ccdf4
ret
push ecx
push eax
jmp 0xaffa99
call eax
test eax, eax
jmp 0x8bfff6
add edx, eax
cmp ecx, edx
jmp 0xa34b98
mov esp, ebp
xchg ebp, ebp
not bp
pop ebp
jmp 0xa86e03
inc eax
test ebx, ebp
clc
mov dword [ebp + 8], edx
cmp dh, 0x6b
cmp edx, ecx
jb 0x8d716c
mov eax, dword [ebp + 8]
not ecx
xchg ecx, ecx
lea ecx, [ebp - 0x114]
jmp 0xae35f6
mov esp, ebp
not ebp
jmp 0xa1f61a
jmp 0x8c7b19
jne 0x8bfffc
lea edx, [ebp - 0x114]
setb ah
push edx
bswap ax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x98b95b
mov ecx, dword [ebp - 4]
rdtsc
bswap dx
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
bswap dx
not ecx
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
jmp 0xae7d1d
je 0x9d6981
cmp eax, 1
jmp 0x8cebf9
ret
inc esi
cmp edi, 0x1af71ed0
test cl, cl
jmp 0xa22224
jb 0x8af77a
mov edx, dword [ebp - 0x10]
jmp 0x98fc32
pop ebp
jmp 0x967df3
jne 0xafde63
pop esi
btr di, 0x9c
pop ebx
sbb edi, edi
xor eax, eax
pop edi
jmp 0x8ec678
je 0x9a14f6
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
jmp 0xb1a6ed
mov edx, dword [edi + 0x3c]
clc
test ecx, ebp
test cx, 0x577f
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jmp 0x905eef
cmp word [edi], ax
jmp 0xabd0bd
jb 0xafe244
lea eax, [ebp - 0x114]
push eax
mov ah, 0x76
push edi
movzx ax, ch
mov al, dh
mov ax, 0x6d8c
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x9075e4
jae 0x8af77a
lea eax, [ecx + edi]
adc si, 0x31e4
sub esi, 0x29123ba5
mov cl, byte [eax]
xchg esi, esi
sub esi, esp
mov esi, eax
test cl, cl
jmp 0xafde55
mov ecx, esi
cmc
sub ecx, eax
cmp bp, 0x7271
test esi, edi
cmp ecx, 0x104
jmp 0x8d7146
push ebp
mov ebp, esp
sub esp, 0x114
clc
cmp esp, ebp
push edi
cmc
xchg edi, edi
or edi, edi
mov edi, dword [ebp + 8]
test edi, edi
jmp 0xb0a642
call fcn.00a3be8b
add esp, 0xc
cmovnp esi, edi
pop esi
bswap bx
pop ebx
cmovo edi, ebp
jmp 0x8e91fc
cmp byte [esi + 1], 0x23
movzx cx, ch
mov cl, 0x93
lea ecx, [esi + 1]
jmp 0xa73540
test eax, eax
jmp 0xaf1a7f
je 0xa3a1d9
mov cl, byte [esi + 1]
jmp 0xa02b5d
mov cl, byte [esi + 2]
lea esi, [esi + 2]
clc
test bp, 0x56eb
xor edx, edx
test cl, cl
jmp 0x8d209d
je 0x8c7b2a
mov edx, dword [eax + edi + 0x20]
jmp 0x96780b
je 0xa6b584
push 0
jmp 0x97920f
push eax
lahf
movsx ax, bh
bswap ax
push edi
setle al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xaabc3b
ret
or esi, 0xffffffff
clc
mov dword [ebp - 0x10], edx
cmp edx, ecx
mov dword [ebp - 8], esi
cmp ecx, 0xffff
ja 0xab84c7
sub ecx, dword [eax + edi + 0x10]
clc
cmp al, 0xb2
jmp 0x8b368f
call eax
pop esi
movsx edi, ax
cmovge bx, bx
pop ebx
cmovno edi, edx
pop edi
jmp 0x8d3e49
mov eax, dword [ebp + 0xc]
jmp 0xa759b3
mov ebx, dword [eax + edi + 0x18]
clc
test ebx, ebx
jmp 0xa728b1
je 0xa2d110
xor eax, eax
pop edi
mov esp, ebp
mov ebp, 0x6f3b48d7
not ebp
pop ebp
ret
jae 0xa2222a
mov edx, dword [eax + edi + 0x1c]
test bp, 0x3389
lea ecx, [edx + ecx*4]
cmc
mov ecx, dword [ecx + edi]
clc
test ecx, ecx
jmp 0xacec8a
jne 0xaf6a71
pop esi
shld bx, bp, 0x5a
not bx
pop ebx
cmc
sub eax, eax
pop edi
jmp 0xb1644e
ja 0xad0932
movsx ecx, cl
lea edx, [edx + edx*4]
cmc
stc
lea edx, [ecx + edx*2 - 0x30]
test eax, ebp
mov cl, byte [esi]
cmp bp, dx
stc
test si, si
test cl, cl
jne 0x8d20a3
push 0
jmp 0x8ff971
inc esi
cmp esi, 0x52134be2
cmp bl, 9
jmp 0xad090d
ret
push ecx
jmp 0xafd036
mov dword [ebp + 8], edx
jmp 0x9af7d1
je 0xabd0c3
mov edx, dword [edx + 0x7c]
push ebx
push esi
jmp 0xaa9d55
je 0xa2222a
cmp ecx, eax
jmp 0xa0816d
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
sub si, 0x6cc0
mov eax, dword [ebp + 8]
sal esi, 0x1b
clc
lea esi, [ebx + eax]
cmovg eax, eax
mov eax, dword [ebp + 0x10]
test esi, 0x4d441e6e
clc
push eax
shr ax, cl
dec ax
sal ax, cl
sar esi, 1
sbb ax, bx
mov eax, dword [edx + esi*4]
stc
cmp bp, 0x2707
cmc
add eax, edi
jmp 0x8f4ab7
mov byte [ebp + eax - 0x114], 0
movzx eax, dx
cbw
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xb22459
je 0xa2222a
mov edi, edi
test esp, 0x4677e41
cmp cl, 0x2e
jmp 0xa6778e
jne 0xa43295
cmp byte [ebp + 0x10], 0
je 0xab8070
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
xor cl, al
neg si
xor edx, edx
cmp ecx, 0x2a0164
sub ebx, eax
rcl si, 0xc3
mov edi, edi
bts esi, ebp
mov cl, 0xe5
mov eax, 0x282c5ecf
bt si, 0x40
mov cl, dl
bts si, si
btr esi, ebp
rol eax, cl
stc
lea esi, [ebp + edx - 0x114]
add al, dl
clc
xor al, byte [ebx + esi]
jmp 0x8d28a0
call fcn.00a3be8b
add esp, 0xc
xchg si, di
pop esi
xchg ebx, ebx
pop ebx
pop edi
mov esp, ebp
pop ebp
jmp 0xadb627
je 0xabd0c3
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x8bac1a
mov esp, ebp
pop ebp
ret
inc edx
jmp 0x9a14e4
call eax
test eax, eax
jmp 0x9bde5a
jmp 0x8c7b19