Function at 0x9b9156
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
inc esi
test edi, edx
cmc
cmp bl, 9
jmp 0x919518
je 0x9cab32
xor eax, eax
pop edi
jmp 0x9b708a
push eax
jmp 0x90c530
jne 0x8a1a7f
pop esi
mov ebx, 0x5c6328e2
bt bx, 0
pop ebx
xadd edi, edi
xor eax, eax
not edi
mov edi, ebx
pop edi
jmp 0x9bb949
jae 0x90afe2
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
cmp si, si
clc
test ecx, ecx
jmp 0x839915
ja 0x91ea2d
sub ecx, dword [eax + edi + 0x10]
test eax, 0x20d51f9d
jmp 0x9b813d
test dl, dl
je 0x88aecc
mov byte [ebx + eax], dl
mov edx, dword [ebp + 8]
jmp 0x9a511d
call eax
pop esi
movzx ebx, si
pop ebx
pop edi
jmp 0x92faf5
mov esp, ebp
jmp 0x932243
je 0x8f6798
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
sub edx, edx
sub ebx, eax
rcr ah, 0x35
mov edi, edi
stc
mov eax, 0x7e0a2983
bts esi, edx
bswap esi
mov cl, dl
xchg si, si
btr esi, 0x11
rol eax, cl
clc
lea esi, [ebp + edx - 0x114]
cmc
jmp 0x9bc395
pop esi
jmp 0x94d93f
ret
je 0x99433a
push 0
jmp 0x86d2e9
push ecx
jmp 0x833324
jle 0xd90439
mov eax, dword [ebp - 4]
xchg si, si
mov esi, dword [ebp - 8]
cmp bx, bp
cmp esi, dword [eax + edi + 0x14]
jmp 0x9f20f4
call eax
pop esi
bswap edi
mov di, 0x4ed2
pop ebx
cmovle di, di
pop edi
jmp 0x94c5d8
ret
jb 0x8dc746
mov eax, dword [ebp + 8]
not ecx
mov cx, di
lea ecx, [ebp - 0x114]
jmp 0x959b6b
je 0x90afe2
cmp ecx, eax
jb 0x858698
mov edx, dword [ebp - 0x10]
cmp edi, 0x75631234
cmc
clc
add edx, eax
cmp ecx, edx
jmp 0xd73bf4
mov ecx, dword [ebp - 4]
nop
mov ah, al
mov edx, dword [ecx + edi + 0x24]
cmovne ecx, edi
mov ax, si
movzx ax, ah
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
jmp 0x97099f
cmp dword [edx], 0x4550
jmp 0xd824cf
dec ebx
lea edx, [edx + edi]
mov dword [ebp + 8], 0
test edi, 0x687e749c
mov dword [ebp - 0xc], edx
stc
test ebx, ebx
jl 0x870537
jmp 0xd90449
jne 0x9dc4e9
inc esi
jmp 0x8cdf0d
inc eax
cmp edi, esi
test dx, si
mov dword [ebp + 8], edx
cmp edx, ecx
jmp 0x88aec6
ret
mov dword [ebp + 8], esi
jmp 0x9dc4e9
ret
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x92226b
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x84a9bd
je 0xd5961f
inc edx
cmp edx, 0x104
jmp 0xd59619
mov dl, byte [eax]
clc
stc
jmp 0x84759c
push eax
lahf
shl eax, 0xd5
cmc
sar esi, 1
ror al, cl
sub ax, cx
bts eax, ebx
mov eax, dword [edx + esi*4]
jmp 0x9ead92
jne 0xd5d650
push 0
push edx
jmp 0x9ab7f5
cmp byte [esi + 1], 0x23
xchg cl, cl
movsx cx, al
movzx ecx, sp
lea ecx, [esi + 1]
jmp 0x86be3d
mov eax, dword [ebp + 0xc]
jmp 0xd7b773
jne 0x9afd81
pop esi
pop ebx
mov di, 0x58d0
not di
sub eax, eax
pop edi
jmp 0x84dcfa
call fcn.009b9156
add esp, 0xc
pop esi
movzx ebx, bx
pop ebx
pop edi
mov esp, ebp
movsx ebp, di
pop ebp
jmp 0x85d13b
ja 0x8f2579
movsx ecx, cl
jmp 0xd8255c
mov ebx, dword [eax + edi + 0x18]
jmp 0x9cf082
call eax
test eax, eax
jne 0x941a92
lea edx, [ebp - 0x114]
cmove ax, sp
mov eax, edi
cbw
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
test eax, eax
jmp 0x941a8c
mov esp, ebp
xchg ebp, ebp
movzx ebp, bp
pop ebp
jmp 0x9d787f
pop ebp
ret
ret
mov byte [esi], al
jmp 0x8d9885
je 0x90afe2
cmp eax, edi
jmp 0x9eb2f2
ret
mov esp, ebp
pop ebp
jmp 0x8cf0df
pop ebx
not al
setp ah
lea eax, [ecx + edi]
pop edi
mov esp, ebp
bswap bp
pop ebp
jmp 0x937943
push ecx
mov byte [ebp + eax - 0x114], 0
nop
jmp 0x8d1c53
lea edx, [ebx + 1]
jmp 0x996759
je 0x870537
mov edx, dword [eax + edi + 0x20]
jmp 0x8b4db4
cmp eax, 0xffffffff
jmp 0x9b55e1
mov cl, byte [esi + 2]
cmp dh, dl
lea esi, [esi + 2]
xor edx, edx
cmc
clc
test cl, cl
jmp 0xd5d64a
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x9dc4e9
mov esp, ebp
bswap ebp
movsx ebp, sp
pop ebp
jmp 0x88a1d3
inc edx
jmp 0x8b7196
push eax
call fcn.009b9156
add esp, 0xc
pop esi
pop ebx
movsx edi, bx
pop edi
jmp 0x9a0a58
cmp cl, 0x2e
je 0x9e76e2
mov cl, byte [esi + 1]
inc esi
cmc
cmp ebx, edi
clc
test cl, cl
jmp 0x90afdc
je 0x9dc4e6
test eax, eax
je 0x8b139a
cmp eax, 1
jmp 0x8b62dc
mov esp, ebp
mov bp, 0x1145
pop ebp
jmp 0x948c0f
cmp ecx, dword [eax + edi + 0x14]
jmp 0x840382
push ebp
mov ebp, esp
lea esp, [esp - 0x114]
stc
cmc
push edi
adc edi, 0x18b1155f
mov edi, dword [ebp + 8]
clc
test ecx, 0x6261130a
test edi, edi
je 0x82cfad
mov ecx, dword [ebp + 0xc]
cmp dx, 0x2cc3
clc
test ebp, esi
test ecx, ecx
je 0x82cfad
mov eax, 0x5a4d
cmp word [edi], ax
jmp 0x82cfa7
mov esp, ebp
cmovg ebp, ebx
pop ebp
jmp 0x8bfffd
add al, dl
clc
cmp di, ax
xor al, byte [ebx + esi]
jmp 0x93c78a
jbe 0x88aecc
lea ebx, [ebp - 0x114]
sub ebx, eax
jmp 0x8dc746
mov edx, dword [edi + 0x3c]
cmp sp, di
test si, cx
cmp al, 0xe4
lea edx, [edx + edi]
jmp 0x8b4d8c
test ebx, ebx
jmp 0x9720dc
ret
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0x870525
je 0x90afe2
mov edi, edi
clc
jmp 0x9afd81
mov ecx, esi
clc
sub ecx, eax
cmp ecx, 0x104
jmp 0xd00e78
add eax, edi
call fcn.0091d43c
lea esp, [esp + 4]
jmp 0x972436
jne 0x8f43f0
cmp byte [ebp + 0x10], 0
jmp 0x851fcd
jae 0x90afe2
mov ecx, dword [eax + edi + 0x1c]
bt dx, 0xc0
shl edx, 0x63
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0x8a1a79
jae 0x90afe2
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0x9bd5e4
jb 0x851fe6
lea eax, [ebp - 0x114]
jmp 0xd7ae46
je 0x8f2579
mov bl, cl
test ecx, 0x534421aa
cmp ebx, ebp
sub bl, 0x30
jmp 0x824034
jae 0x858698
lea eax, [ecx + edi]
xor si, dx
stc
mov cl, byte [eax]
mov esi, eax
test cl, cl
jmp 0x9e53ae
push eax
cwde
movzx ax, al
not al
push edi
bswap eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x87a23b
push eax
not ah
setne al
mov al, cl
push edi
not eax
jmp 0x8d738c
jne 0x82cfad
mov eax, dword [edx + 0x78]
test ebx, 0x1adb33de
cmp ax, 0x795d
mov dword [ebp - 4], eax
test esi, ecx
test eax, eax
je 0x82cfad
mov edx, dword [edx + 0x7c]
cmc
stc
push ebx
push esi
or esi, 0xffffffff
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0x843909
lea edx, [edx + edx*4]
stc
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
test cx, bp
test cl, cl
jmp 0x8f2573
mov ecx, dword [ebp + 0xc]
cmc
bswap esi
mov edx, dword [ebp - 0xc]
add al, al
bt si, di
cwde
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
test ebx, edi
bsf ax, di
mov eax, dword [ebp + 0x10]
jmp 0x8ef65d