Function at 0xb4b9e5
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop edi
add esi, 0x7f225a48
rcl bl, 0x22
pop ebx
add eax, ecx
movzx esi, si
pop esi
jmp 0xc6dcd2
jb 0x772005
mov esi, dword [ebp - 0x10]
test ecx, ebp
cmp bp, 0xcd9
lea esi, [esi + edx]
cmp eax, esi
jmp 0xce1003
test cl, cl
jmp 0xcf85d8
je 0x78924b
mov eax, 0x5a4d
cmp word [ecx], ax
je 0xc2ddfd
sub eax, eax
mov si, bp
movzx esi, bx
mov si, 0x2a03
pop esi
jmp 0xaf790e
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x7baa01
ret
call eax
mov edi, eax
test edi, edi
jmp 0xd01384
je 0xd1b71d
push 0
jmp 0xb7ccd4
test cl, cl
jmp 0xcde32d
pop ebp
jmp 0xc1b8f7
mov esp, ebp
jmp 0xae9783
jb 0xc3a01b
lea ecx, [ebp - 0x114]
mov eax, esi
bswap ax
mov ah, 0xe4
push ecx
mov ah, dl
cbw
setge ah
mov byte [ebp + edi - 0x114], 0
mov ax, 0x702e
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x7b2400
jle 0xc53bd4
lea ebx, [esi + 1]
stc
mov ecx, dword [ebp + 8]
test eax, edi
cmp ebx, edi
jmp 0xb7869b
dec edi
mov dword [ebp - 0xc], eax
jmp 0xc11896
push edx
jmp 0xcbe6d7
je 0xc53c14
mov eax, dword [edx + ecx + 0x20]
jmp 0xc8dc9b
pop ebx
pop esi
jmp 0xb4d953
call fcn.00aeaeec
push ebp
mov ebp, esp
neg cl
mov ecx, dword [ebp + 8]
cmp dx, sp
lea esp, [esp - 0x114]
push esi
clc
cmp dl, 0x45
test ecx, ecx
je 0x78924b
mov esi, dword [ebp + 0xc]
jmp 0xcdae20
mov esp, ebp
cmovg bp, cx
pop ebp
ret
test cl, cl
je 0xd0dc76
lea eax, [ecx - 0x30]
inc esi
test ecx, ebp
cmp al, 9
jmp 0xce09b5
inc eax
test edx, ebp
cmc
cmp edi, ecx
jmp 0xb023d2
jle 0xc23401
jmp 0xc53c11
mov eax, dword [ebp + 0xc]
jmp 0xcf4e7b
push ecx
jmp 0xc12d3c
je 0xc728f5
mov cl, byte [esi + 1]
jmp 0xba99dd
call 0xb4b9e5
add esp, 0xc
movzx esi, cx
not esi
bswap ebx
pop edi
pop ebx
pop esi
mov esp, ebp
bswap bp
pop ebp
jmp 0xbe68d3
ja 0xc96e11
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
jmp 0xcded28
inc esi
cmp esp, esi
jmp 0x7c0483
call eax
mov edi, eax
cmp dx, bp
stc
test edi, edi
jmp 0xc24b8b
push edi
mov dword [ebp - 0x10], eax
cmp ebx, ebp
test edi, edx
clc
mov dword [ebp - 8], 0xffffffff
stc
cmp sp, 0x15a1
cmp esi, 0xffff
jmp 0xb9feb0
ret
ret
jae 0xcde333
sub edi, edi
test ecx, ecx
jmp 0xc3a003
js 0xc53c14
jmp 0xc23409
push edi
jmp 0xb92c1c
ret
mov eax, dword [ebp - 0xc]
shld si, sp, 0xf
mov edx, dword [ebp + 0x10]
shr esi, 0x1b
cmp sp, sp
bt esi, 0xad
lea esi, [edi + ebx]
sar esi, 1
stc
test esi, eax
mov eax, dword [eax + esi*4]
push edx
rol dl, 0xf4
movzx edx, dx
rcr edx, cl
mov edx, dword [ebp + 0xc]
add eax, ecx
call fcn.00b9e917
lea esp, [esp + 4]
test esi, ebx
test eax, eax
jmp 0xd23ab5
je 0xcde333
mov edx, dword [ebp + 8]
test di, 0x9e7
jmp 0xc6edd8
mov eax, dword [ecx + 0x3c]
cmp dword [eax + ecx], 0x4550
jmp 0xcb01e8
je 0xb023d8
lea ebx, [ebp - 0x114]
not dl
sbb dl, 0xf
sub ebx, eax
xadd dl, dl
or dl, dl
mov dl, byte [eax]
clc
test ax, si
test dl, dl
je 0xb023d8
mov byte [ebx + eax], dl
jmp 0xcf8a8a
mov esp, ebp
mov bp, sp
pop ebp
jmp 0x79d297
mov eax, dword [ebp + 8]
cwd
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + eax + 0x24]
cmp ecx, esp
sar cx, cl
adc ecx, 0xcb80343
lea ecx, [edx + esi*2]
test sp, sp
mov dx, bx
rol dl, 0x20
movzx edx, word [ecx + eax]
movzx cx, bl
mov dword [ebp - 8], edx
shl cx, 0x9b
seta dl
add ecx, ecx
mov ecx, eax
not edx
bswap edx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
test eax, ecx
cmp eax, dword [edx + ecx + 0x14]
jae 0xcde333
mov esi, dword [edx + ecx + 0x1c]
cmp di, cx
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
cmp bl, 0x71
cmp cx, ax
test eax, eax
jmp 0xce69cc
mov esp, ebp
movzx ebp, bp
bswap ebp
cmovl ebp, ebp
pop ebp
jmp 0xbf7f53
cmp edi, edx
jne 0x794e1e
cmp byte [ebp + 0x10], 0
je 0xb7c945
mov edi, dword [ebp + 0xc]
lea ecx, [ebp - 0x114]
xor eax, eax
sbb si, 0x3463
adc bx, 0x4916
sub edi, ecx
rol bl, cl
movsx ebx, dx
cmovs bx, ax
lea esp, [esp]
movsx ebx, sp
mov ecx, esi
sub ecx, eax
cmp ecx, 0x104
jmp 0xc0546d
call 0xb4b9e5
add esp, 0xc
movsx edi, ax
movzx ebx, bx
pop edi
cmovae esi, eax
jmp 0xb42a77
lea eax, [eax + ecx]
sub ebx, ebx
jmp 0xb273b5
mov edi, dword [edx + ecx + 0x18]
stc
test edi, edi
jmp 0xb3b260
jne 0x78924b
mov edx, dword [eax + ecx + 0x78]
cmp ebp, 0x478c6677
test edi, edx
test dh, 0x3c
mov dword [ebp - 4], edx
jmp 0xcf04e1
push edi
jmp 0xc77b57
test esi, esi
jmp 0x789237
jne 0xcf85de
pop edi
mov ebx, 0x789c181f
neg esi
pop ebx
sbb si, 0x55de
xor eax, eax
mov si, 0x63cc
bswap esi
pop esi
mov esp, ebp
movzx ebp, ax
cmovae ebp, ebp
pop ebp
jmp 0xcea16b
mov dword [ebp - 8], eax
jmp 0xc53c14
ja 0xd0dc76
movsx eax, cl
mov cl, byte [esi]
test dh, 0x88
lea edx, [edx + edx*4]
clc
lea edx, [eax + edx*2 - 0x30]
cmp ax, 0x5a9a
stc
test cl, cl
jmp 0xd0dc70
jae 0x772005
add eax, ecx
adc esi, 0x773b117e
mov cl, byte [eax]
shr si, 0xe0
sub si, di
mov esi, eax
jmp 0x784f56
je 0xcde333
cmp eax, edx
jmp 0x77c3ec
ret
test edx, edx
jmp 0xcf0e67
je 0x78924b
mov eax, dword [eax + ecx + 0x7c]
push ebx
jmp 0xbc94b2
push eax
cwde
push edx
mov ax, 0x699e
movzx eax, bp
movsx eax, dx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
mov esi, ebp
movzx esi, dx
pop ebx
pop esi
jmp 0xc3a854
je 0xcde333
cmp cl, 0x2e
jmp 0xb88a44
inc edi
jmp 0xb63f21
jne 0xc24b91
lea edx, [ebp - 0x114]
bswap ax
movsx ax, bl
cbw
push edx
cbw
setnp ah
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xbaeaf3
jne 0xb6331a
push 0
jmp 0xb29d33
mov cl, byte [esi + 2]
lea esi, [esi + 2]
stc
xor edx, edx
jmp 0xb63312
jns 0xb02fce
lea edi, [esi - 1]
jmp 0xb02fd8