Function at 0x99bada
Capabilities:
Parse pe header

Disassembly:
cmp dword [esi + 0x14], 0
jmp 0x99bb6a
add esp, 0xc
jmp 0x99b59b
shr eax, 0x10
jmp 0x99b80d
mov eax, dword [esp + 0x10]
jmp 0x99b721
cmp cl, 9
jmp 0x99b62f
add dword [ecx + ebp], edi
jmp 0x99b99a
add al, 0
add byte [eax], cl
adc eax, 0x85e9d88b
add eax, 0xf57f0000
cld
jmp 0x99b991
add edx, ebp
jmp 0x99bb1c
cmp cl, 3
jmp 0x99b802
call 0x99b4de
movsb byte es:[edi], byte [esi]
aad 0x87
adc al, 0x24
lea edx, [edx + 0x69]
xchg dword [esp], edx
jmp 0x99b712
cmp eax, dword [esi + 0x14]
jmp 0x99b507
mov dword [esp + 0x10], eax
jmp 0x99ba33
call fcn.0099b525
jnp 0x99b4ad
invalid
sbb al, 0x24
mov edi, dword [esi + ebx + 0x40]
jmp 0x99bc74
add eax, 0x10000
jmp 0x99b6a1
je 0x99b900
jmp 0x99b47d
push eax
jmp 0x99bc6a
pop edi
jmp 0x99b9e5
ret 4
cmp dword [eax + 1], 0
jmp 0x99b681
add eax, dword [eax + 0x3c]
jmp 0x99ba65
sub eax, 0x10000
jb 0x99b618
jae 0x99b618
add al, 0x3c
lea ebx, [esi - 0x16172e6d]
ja 0x99b5fe
add byte [eax], al
shr dword [esi - 0x16fe4c84], 0x48
add cl, al
scasb al, byte es:[edi]
jl 0x99b5b6
add ecx, ebp
dec eax
add al, 0
add byte [ecx], cl
xchg edi, eax
pop eax
inc ebp
add esi, ebx
jmp 0x99bc54
cmp word [eax], 0x5a4d
jmp 0x99b9c0
shl eax, 0x10
jl 0x99b5ea
jge 0x99b5ea
adc ebp, dword [eax - 0x347bf076]
add al, byte [eax]
add cl, ch
mov eax, dword [0x2e80000]
add byte [eax], al
add byte [eax + ebx*4 - 0x72dbd379], dl
lodsd eax, dword [esi]
adc eax, 0x87000002
sub al, 0x24
jmp 0x99b73d
je 0x99b900
jmp 0x99bbc5
mov edx, dword [esi + 0x1c]
jmp 0x99bb94
add eax, esi
jmp 0x99b5a9
je 0x99b654
jmp 0x99b940
shr eax, 0x10
jmp 0x99b625
jbe 0x99b87d
jmp 0x99b96d
mov edx, dword [esp + 0x1c]
jmp 0x99b6f8
jne 0x99bc3a
jmp 0x99b654
push ecx
jmp 0x99b736
pushal
jmp 0x99bcbb
add eax, 1
jmp 0x99b4fc
push edx
jmp 0x99bca7
add eax, esi
jmp 0x99bb08
call eax
jmp 0x99b41a
cmp dword [edi + 8], 0
jmp 0x99ba1d
ret
xor ebx, ebx
jmp 0x99bc62
add edx, ebp
jmp 0x99bbed
jne 0x99bc8a
jmp 0x99b977
je 0x99b900
jmp 0x99bcb1
shl eax, 0x10
jmp 0x99b78b
je 0x99b654
jmp 0x99b873
mov eax, dword [esi + 0x3c]
jmp 0x99b679
mov edx, ebp
jmp 0x99b99f
mov edx, dword [edi + 4]
jmp 0x99b9aa
mov ecx, dword [esp + 0x14]
jmp 0x99b581
mov ecx, dword [eax + 1]
jmp 0x99b945
pop ebx
jmp 0x99b434
jmp 0x99bc3a
add ecx, ebp
jmp 0x99bb36
jne 0x99b6a1
jmp 0x99b457
lea ecx, [ecx]
jmp 0x99b758
mov ecx, dword [eax + 1]
jmp 0x99ba87
mov dl, 0x80
jmp 0x99b7d3
jmp 0x99bc8a
sub edx, dword [esi + 0x20]
jmp 0x99b817
mov eax, dword [edi]
jmp 0x99b4c3
mov edi, dword [esp + 0x28]
jmp 0x99b4bb
jne 0x99b6a1
jmp 0x99b5d6
pop esi
jmp 0x99bc30
mov dword [esp + 0x10], 0
jmp 0x99b6b1
push ecx
jmp 0x99bb2e
je 0x99b470
jmp 0x99b885
jb 0x99b758
jmp 0x99b87d
cmp dword [eax], 0x4550
jmp 0x99b958
mov bl, 2
jmp 0x99b51f
lea edi, [ecx + ebp]
jmp 0x99b488
cmp dword [eax + 1], 0
jmp 0x99b6ed
add edi, esi
jmp 0x99b74f
xchg dword [esp], edi
lea edi, [edi - 0x627]
xchg dword [esp], edi
jmp 0x99bb45
push eax
jmp 0x99b4d7
push edx
jmp 0x99b747
pop eax
jmp 0x99b55c
push 0
jmp 0x99baca
add dword [ecx], edx
jmp 0x99bc8a
call 0x99bb4c
jns 0x99bb54
xchg dword [esp], esi
lea esi, [esi - 0x26]
xchg dword [esp], esi
jl 0x99bb24
inc dword [edi - 0x3583dbcc]
jge 0x99bb24
popal
mov dl, 0x37
mov ecx, dword [esi + ebx + 0x10]
jmp 0x99b539
mov ebp, eax
jmp 0x99b9ef
mov eax, dword [esp + 0x20]
jmp 0x99b8f3
add eax, ebp
js 0x99bbce
jns 0x99bbce
shr byte [edi - 0x67f62c5], cl
or cl, ch
sub bh, ah
invalid
cmp cl, 8
jmp 0x99b7f7
call eax
jmp 0x99b592
mov dword [0x99b250], edx
jmp 0x99b6c8
pop ebp
jmp 0x99b933
mov cl, byte [eax]
jmp 0x99b4ce
push 0x1000
jmp 0x99b9fd
movsb byte es:[edi], byte [esi]
jmp 0x99ba73
mov eax, dword [esi + 0x18]
jmp 0x99b7dc
push pe_nt_image_headers32
jmp 0x99b60d
add eax, 5
jmp 0x99babd
push ebx
jmp 0x99bbbb
cmp cl, 1
jmp 0x99b576
mov esi, dword [esp + 0x24]
jmp 0x99b9b3