Function at 0x9fb9dd
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
movzx ecx, di
xchg cx, ax
lea eax, [edx + esi*2]
cwd
movzx ecx, word [eax + edi]
movzx edx, cx
mov dh, 0x83
jmp 0x9954f0
mov esp, ebp
movzx ebp, bp
bswap bp
pop ebp
jmp 0x9deae7
je 0x979275
mov edi, edi
cmp di, 0xdf0
jmp 0xb97dee
inc esi
cmp si, bx
cmc
test cl, cl
jne 0xb97dee
pop esi
pop ebx
rcr edi, 0x6a
mov di, 0x679d
sub eax, eax
pop edi
jmp 0xfdf28a
push ecx
jmp 0xf7ffc4
or esi, 0xffffffff
cmc
test si, di
stc
mov dword [ebp - 0x10], edx
test di, 0x761
clc
cmc
mov dword [ebp - 8], esi
test ax, ax
cmp dx, 0x5393
cmp sp, bx
cmp ecx, 0xffff
jmp 0xff9189
jb 0xa49a0e
mov edx, dword [ebp - 0x10]
add edx, eax
cmp dl, ch
cmp ecx, edx
jmp 0xfdc7c1
lea edx, [ebx + 1]
jmp 0xa657ba
mov ecx, esi
clc
sub ecx, eax
test esi, 0x537a09de
cmp ecx, 0x104
jmp 0xf50755
ret
je 0xa3b66d
mov edx, dword [eax + edi + 0x20]
jmp 0xf7e80f
mov esp, ebp
cmovs bp, si
pop ebp
jmp 0xa30523
inc eax
cmc
mov dword [ebp + 8], edx
cmp edx, ecx
jmp 0xfc1442
je 0xfc6ff0
inc edx
cmp sp, dx
jmp 0xa51253
push eax
jmp 0xa546ca
mov esp, ebp
movzx ebp, ax
pop ebp
jmp 0x9f0149
ret
ret
je 0x979275
cmp eax, edi
jmp 0xffe883
ret
mov edx, dword [edi + 0x3c]
stc
cmp edi, 0x4240ab5
lea edx, [edx + edi]
cmp ebp, 0x43a67fe7
cmp dword [edx], 0x4550
jne 0xa3000b
mov eax, dword [edx + 0x78]
cmp edi, edi
test esi, esi
cmc
mov dword [ebp - 4], eax
cmp cx, 0x68df
test eax, eax
je 0xa3000b
mov edx, dword [edx + 0x7c]
push ebx
cmc
push esi
test bp, 0x2fc8
jmp 0x9867b8
ret
je 0xa3000b
mov eax, 0x5a4d
cmp word [edi], ax
jmp 0xa30005
mov eax, dword [ebp + 0xc]
jmp 0xb1c73e
je 0x9f5d51
mov ebx, dword [ebp + 0xc]
and esi, ebp
lea eax, [ebp - 0x114]
btr si, 0xdc
sub edx, edx
not cl
sub ebx, eax
movzx esi, dx
rol si, 0xa6
mov edi, edi
clc
cmc
bt ax, bx
mov eax, 0x767d4564
ror esi, 0x63
mov cl, dl
mov si, bx
bt esi, 0x41
rol eax, cl
lea esi, [ebp + edx - 0x114]
add al, dl
stc
xor al, byte [ebx + esi]
mov byte [esi], al
jmp 0x9ca23f
push ebp
mov ebp, esp
test bp, 0x5e86
sub esp, 0x114
cmp esp, eax
jmp 0xf86b3c
test dl, dl
jmp 0xb8e2b7
je 0x9edd8b
xor eax, eax
not edi
pop edi
jmp 0x9d557a
ret
jle 0xa7a727
mov eax, dword [ebp - 4]
bts si, di
xchg si, si
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0xa672c7
jae 0x979275
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0xb955f3
inc esi
clc
test edi, ebx
cmp bl, 9
jmp 0xf6a195
pop esi
pop ebx
lea eax, [ecx + edi]
movzx edi, sp
mov edi, edi
not edi
pop edi
jmp 0xf8a5cd
lea ebx, [esi - 1]
cmp ch, 4
cmp dword [ebp + 8], ebx
jmp 0xa3b65a
cmp edx, 0x104
jmp 0xfc6fea
call fcn.009fb9dd
add esp, 0xc
mov bx, sp
not edi
pop esi
mov bh, ah
pop ebx
not edi
pop edi
jmp 0x97761e
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0xa4ff00
jae 0x979275
mov ecx, dword [eax + edi + 0x1c]
shr dl, cl
shr edx, 0x4f
movsx edx, bp
lea edx, [ecx + esi*4]
add cl, 0xe1
mov ecx, dword [edx + edi]
test ecx, ecx
je 0x979275
cmp ecx, eax
jmp 0x98e81a
lea edx, [edx + edx*4]
test ebp, 0x32ce6920
cmc
lea edx, [ecx + edx*2 - 0x30]
and cl, cl
xor cl, 0xcc
mov cl, byte [esi]
cmp sp, 0x46fd
clc
test cl, cl
jmp 0xb046bc
mov ecx, dword [ebp + 0xc]
btc si, ax
test ebp, eax
mov edx, dword [ebp - 0xc]
test ebp, 0x15d85832
mov eax, dword [ebp + 8]
rcl esi, 0xda
bsf esi, eax
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
push eax
shld eax, edi, 0x8b
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.00b91dfc
add esp, 4
jmp 0xb4a823
push eax
push edi
movsx eax, sp
not ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
jmp 0xb9c2ee
mov ebx, dword [eax + edi + 0x18]
stc
test ebx, ebx
jmp 0x9c63dc
je 0x96f5e8
cmp eax, 1
jmp 0xfb88bd
jne 0xb40cf5
push 0
jmp 0xb6d8ea
pop edi
jmp 0xb14056
mov esp, ebp
movsx ebp, dx
pop ebp
jmp 0xb166df
ret
push eax
cwde
push edi
setge ah
movzx eax, bx
mov ax, 0x74e6
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xfce52a
jl 0xa3b66d
jmp 0xa7a739
je 0xb046c2
mov bl, cl
cmp dl, 0x8a
sub bl, 0x30
jmp 0xa4635e
je 0xa3000b
mov ecx, dword [ebp + 0xc]
test bp, 0x3374
test ecx, ecx
jmp 0x9f42e0
mov cl, byte [esi + 2]
cmc
lea esi, [esi + 2]
stc
cmp si, sp
sub edx, edx
cmp esi, ebp
test cl, cl
jmp 0xb40cef
cmp eax, 0xffffffff
jmp 0xfd03c6
je 0x9a0d85
mov cl, byte [esi + 1]
jmp 0x979268
push edx
jmp 0x9cae95
cmp byte [esi + 1], 0x23
jmp 0xff637c
jbe 0xfc1448
lea ebx, [ebp - 0x114]
sub ebx, eax
cmc
mov dl, byte [eax]
jmp 0xa0a599
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xfc1d34
je 0xfc1448
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
jmp 0xf70a80
jne 0xa672ea
pop esi
shr bl, 0x71
clc
pop ebx
inc edi
add edi, ecx
sub eax, eax
movzx edi, sp
pop edi
jmp 0xff9dcc
cmp cl, 0x2e
jmp 0xb514df
pop ebx
pop edi
jmp 0xfa13df
ret
jae 0x979275
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0xb81fb9
call eax
test eax, eax
jmp 0x9df29b
lea ecx, [ebp - 0x114]
push ecx
jmp 0xb8b912
ja 0xb046c2
movsx ecx, cl
jmp 0xa6a037
inc edx
jmp 0x9c92aa
dec ebx
lea edx, [edx + edi]
cmc
mov dword [ebp + 8], 0
clc
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0xb3db96
push eax
call fcn.009fb9dd
add esp, 0xc
xchg di, di
pop esi
xchg di, di
mov ebx, 0x9c04529
pop ebx
pop edi
jmp 0x9c6ed5
push edi
mov edi, dword [ebp + 8]
test bp, 0x313a
clc
test sp, bp
test edi, edi
jmp 0xb47e3c
mov esp, ebp
pop ebp
jmp 0xb9ecb3
mov esp, ebp
pop ebp
jmp 0x9d619b
jne 0xa4ff00
inc esi
mov dword [ebp + 8], esi
jmp 0xa4ff00
jb 0xb81fc8
mov eax, dword [ebp + 8]
xchg cl, cl
jmp 0xf60eb0
call eax
test eax, eax
jmp 0xfe1725
jb 0x9f7e85
lea eax, [ebp - 0x114]
jmp 0xafdfc9
call eax
pop esi
pop ebx
jmp 0xb06119
je 0xa4fefa
test eax, eax
jmp 0xb03116
jae 0xa49a0e
lea eax, [ecx + edi]
mov cl, byte [eax]
mov esi, eax
cmp edi, edi
test esp, edi
stc
test cl, cl
jmp 0x978a61
mov esp, ebp
cmovbe bp, bx
bswap bp
pop ebp
jmp 0x9e26f7
jne 0x9df2a1
lea edx, [ebp - 0x114]
movsx eax, ax
mov ah, dl
cmovge ax, bp
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xf51134
je 0xb48cca
push 0
jmp 0x97c301
lea ecx, [esi + 1]
jmp 0xfe177c
ja 0xaffd5e
sub ecx, dword [eax + edi + 0x10]
clc
cmp ecx, dword [eax + edi + 0x14]
jmp 0xa45ca8
mov esp, ebp
movsx ebp, ax
pop ebp
jmp 0x9c13bf
jne 0xb80aab
cmp byte [ebp + 0x10], 0
jmp 0x9f7e5a