Function at 0x1095025
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jae 0x10be4ff
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
bsr ecx, esp
mov ecx, dword [edx + edi]
test bx, sp
cmp edi, 0x492c693e
test ecx, ecx
jmp 0x10646b3
mov esp, ebp
movsx ebp, dx
pop ebp
jmp 0xfa87c1
cmp byte [esi + 1], 0x23
not ch
cmovnp cx, si
mov ecx, ecx
lea ecx, [esi + 1]
je 0x1090fc1
push 0
push ecx
jmp 0x1042435
jne 0xf3ade2
cmp byte [ebp + 0x10], 0
jmp 0x1046e7d
mov ecx, esi
test esi, edx
cmp bp, 0x1b26
stc
sub ecx, eax
cmp ecx, 0x104
jmp 0x1068391
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
cmp bp, bx
cmp dword [edx], 0x4550
jmp 0xfe5f0d
jmp 0x104938e
ret
jle 0x10c3df5
mov eax, dword [ebp - 4]
jmp 0xf226bc
cmp ecx, edx
jmp 0x10d106a
ret
jb 0x109fc16
mov edx, dword [ebp - 0x10]
add edx, eax
jmp 0xf716d1
add esi, 2
stc
sub edx, edx
cmp dh, 0xf3
test cl, cl
jmp 0xfee456
je 0xf44ffb
mov cl, byte [esi + 1]
jmp 0xfdb921
mov esp, ebp
movsx ebp, bp
pop ebp
jmp 0xf9e023
cmp eax, 0xffffffff
jmp 0x10e2c00
je 0x10be4ff
mov edi, edi
test ecx, 0x3b900a5a
cmp cl, 0x2e
jmp 0xf76dd7
mov dword [ebp - 8], esi
cmc
cmp ecx, 0xffff
jmp 0x109707c
mov byte [ebp + eax - 0x114], 0
lahf
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x101dfa3
jbe 0x1068869
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0x10d70ef
mov esp, ebp
movsx ebp, si
pop ebp
jmp 0xf73863
ret
je 0x10be4ff
cmp eax, edi
jmp 0xf4038c
ret
ret
ret
call fcn.01095025
add esp, 0xc
mov esi, 0x4381337d
mov di, cx
pop esi
pop ebx
cmovno di, cx
bswap edi
pop edi
jmp 0x10a358d
jae 0x10be4ff
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
cmp eax, 0x245c30dd
test ecx, ecx
jmp 0x10e8b75
inc esi
stc
test cl, cl
jmp 0x10be4f9
mov esp, ebp
pop ebp
ret
inc eax
cmp ebx, ebp
mov dword [ebp + 8], edx
cmp edx, ecx
jmp 0x1068863
ja 0x104f79f
movsx ecx, cl
test bh, 0x6e
stc
lea edx, [edx + edx*4]
jmp 0x104f790
je 0x107281a
inc edx
cmc
stc
cmp edx, 0x104
jmp 0x1072814
jne 0x104e81f
mov eax, dword [edx + 0x78]
cmp edi, 0x65c416a1
cmc
stc
mov dword [ebp - 4], eax
test eax, eax
jmp 0x1082088
inc edx
jmp 0xfdc8ee
je 0x104f79f
mov bl, cl
cmc
jmp 0x1068fde
add al, dl
test esp, 0x543914f6
xor al, byte [ebx + esi]
jmp 0x10aa156
push ecx
jmp 0xf81a7b
mov esp, ebp
xchg bp, bp
not ebp
cmovle bp, cx
pop ebp
jmp 0xf54dd7
call eax
test eax, eax
jne 0xf91ac3
lea edx, [ebp - 0x114]
mov eax, edi
lahf
cwde
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
jmp 0x10604af
or esi, 0xffffffff
cmp eax, esi
mov dword [ebp - 0x10], edx
jmp 0xf8142c
mov ebx, dword [eax + edi + 0x18]
stc
cmp ax, 0x640c
test ebx, ebx
jmp 0x1022f5d
je 0xf226bf
mov edx, dword [eax + edi + 0x20]
jmp 0x10ee571
push eax
call fcn.01095025
add esp, 0xc
pop esi
jmp 0x10ba2cc
inc esi
test edi, ecx
cmp cx, di
cmp edi, 0x4ac70220
cmp bl, 9
jmp 0xfddc34
je 0x1089512
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
xor si, sp
sub edx, edx
sub ebx, eax
cbw
mov edi, edi
bt si, ax
bswap esi
clc
mov eax, 0x5d7e50cc
rcr cl, 0xe4
mov cl, dl
rcr esi, 0xe2
rol eax, cl
lea esi, [ebp + edx - 0x114]
jmp 0xffc8f3
lea ebx, [esi - 1]
test bh, 0xc4
cmp dword [ebp + 8], ebx
jmp 0xf604be
push edx
push eax
jmp 0xfba4a0
je 0x104e81f
mov ecx, dword [ebp + 0xc]
stc
test edx, esi
test ecx, ecx
jmp 0x10f7bd1
je 0xf49679
xor eax, eax
xchg edi, edi
pop edi
jmp 0xfdbaa3
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
stc
test cl, cl
jne 0xfee45c
push 0
jmp 0x104b4f7
push eax
push edi
lahf
bswap eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
call eax
pop esi
pop ebx
jmp 0x10f2c34
jmp 0x104938e
call eax
test eax, eax
jmp 0xf91abd
push edi
mov edi, dword [ebp + 8]
test esi, 0x69b64f5b
test edi, edi
jmp 0x104cf8d
je 0x10be4ff
cmp ecx, eax
jmp 0xf74b36
push esi
jmp 0x101f9a1
jl 0xf226bf
jmp 0x10c3e03
jae 0x10be4ff
mov dword [ebp + 8], 0
jmp 0x10beb07
jb 0xf883bc
mov eax, dword [ebp + 8]
bswap cx
lea ecx, [ebp - 0x114]
jmp 0x100e1a9
sub bl, 0x30
jmp 0x1046a15
jb 0x1046e9e
lea eax, [ebp - 0x114]
jmp 0x105cd77
je 0x104e81f
mov edx, dword [edx + 0x7c]
test esp, 0x7f0d0199
clc
push ebx
test ecx, 0x5f712c54
jmp 0x106545d
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
xchg ch, ah
setae ah
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
movsx edx, bp
movzx edx, si
movsx dx, al
lea edx, [ebx + 1]
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x105cda0
jne 0x104938e
inc esi
mov dword [ebp + 8], esi
jmp 0xf51a8b
mov eax, dword [ebp + 0xc]
jmp 0x10bb902
mov cl, byte [esi + 2]
jmp 0xf76344
push ebp
mov ebp, esp
sub esp, 0x114
jmp 0x1061060
call eax
pop esi
pop ebx
bswap di
not edi
pop edi
jmp 0xf7ef06
ja 0x102010e
sub ecx, dword [eax + edi + 0x10]
cmp di, dx
test al, al
cmp ecx, dword [eax + edi + 0x14]
jmp 0xfda434
pop esi
pop ebx
lahf
cbw
lea eax, [ecx + edi]
not di
pop edi
jmp 0x10187b1
mov esp, ebp
jmp 0x10f93b7
mov byte [esi], al
jmp 0xfe29ad
pop ebx
bswap edi
movsx edi, dx
pop edi
jmp 0xf3073c
push eax
movsx eax, dx
cmove ax, cx
cwde
push edi
cmovge eax, edx
movzx ax, ch
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x1096d79
jne 0xf7ffb4
pop esi
and ebx, 0x665b3b80
rol ebx, 0x94
shl edi, 0x37
pop ebx
xor eax, eax
movsx edi, bp
pop edi
mov esp, ebp
pop ebp
ret
test ecx, ecx
jmp 0xf883ae
mov ecx, dword [ebp + 0xc]
sar edx, cl
mov edx, dword [ebp - 0xc]
rol al, cl
lahf
shr esi, 0xab
mov eax, dword [ebp + 8]
shr esi, 0xde
rol si, 0xec
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
test dx, bp
clc
push eax
bsr ax, sp
sar esi, 1
ror ax, 0x78
mov eax, dword [edx + esi*4]
test cx, bx
test edx, 0x59911572
add eax, edi
call fcn.0103b4e5
add esp, 4
test bx, di
jmp 0xf7fe19
jae 0x109fc16
lea eax, [ecx + edi]
mov cl, byte [eax]
and si, 0x109d
sbb si, si
shl si, 0xb1
mov esi, eax
stc
cmc
test cl, cl
jmp 0xf7ffa6
je 0x1068869
mov byte [ebx + eax], dl
cdq
cmovp edx, edi
not dh
mov edx, dword [ebp + 8]
jmp 0xfe87ba
je 0x1049388
test eax, eax
je 0x10869cb
cmp eax, 1
jmp 0x1087962
jne 0x10646b9
pop esi
pop ebx
mov edi, 0x38d90516
or edi, ecx
sub eax, eax
movzx edi, bx
xchg edi, edi
pop edi
jmp 0xf8e310
dec ebx
stc
test cx, 0x540d
add edx, edi
clc
mov dword [ebp + 8], 0
clc
cmp edi, 0x8463c8
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x1067d40
pop edi
mov esp, ebp
cmovne ebp, edx
pop ebp
jmp 0xfaeda7
je 0x104e81f
mov eax, 0x5a4d
cmc
cmp word [edi], ax
jmp 0x104e819
pop ebp
jmp 0xf8fca7