Function at 0x9d9819
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
call eax
pop edi
xchg bx, bx
bswap si
pop ebx
cmovne esi, esi
pop esi
jmp 0xe91b42
call eax
mov edi, eax
test edi, edi
jmp 0xec37fc
mov esp, ebp
cmovbe ebp, esp
movzx ebp, di
mov ebp, 0x18ce2c77
pop ebp
jmp 0xe7373b
add eax, ecx
call fcn.00e7f59e
add esp, 4
test eax, eax
jmp 0xf23dda
cmp eax, esi
jae 0xa25e59
add eax, ecx
mov cl, byte [eax]
btc esi, 0xc9
mov esi, eax
test cl, cl
je 0xdf5d9a
cmp cl, 0x2e
je 0xa353d5
mov cl, byte [esi + 1]
jmp 0xdf5d8d
mov esp, ebp
movsx ebp, ax
movzx ebp, si
pop ebp
jmp 0xe11663
mov eax, dword [ebp - 0xc]
add esi, edx
mov edx, dword [ebp + 0x10]
lea esi, [edi + ebx]
cmp ebx, edi
sar esi, 1
cmp esi, 0x48c156b3
clc
mov eax, dword [eax + esi*4]
test ebp, 0x783d1f0e
stc
clc
push edx
shr dl, 0x9f
add dl, al
inc dl
mov edx, dword [ebp + 0xc]
cmp cx, dx
jmp 0x91c6d5
jb 0xa25e59
mov esi, dword [ebp - 0x10]
cmp ebx, esp
test bp, 0x1ea1
lea esi, [esi + edx]
jmp 0x92195f
push eax
movsx eax, di
mov ah, 0xb7
push edx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x8fb14b
pop ebp
jmp 0xdf0052
jle 0xdd861b
lea ebx, [esi + 1]
shrd cx, sp, 0xdc
sal cl, 6
mov ecx, dword [ebp + 8]
cmp ebx, edi
jmp 0xea3eb2
sub eax, dword [edx + ecx + 0x10]
jmp 0xeca237
ret
cmp ecx, 0x104
jmp 0xec8d50
mov esp, ebp
pop ebp
jmp 0x9a5f9b
push ebp
mov ebp, esp
adc cx, di
mov ecx, dword [ebp + 8]
stc
cmc
sub esp, 0x114
jmp 0xf2a8e1
jb 0xe03298
lea eax, [ebp - 0x114]
jmp 0x993173
ret
push ecx
jmp 0xe29815
ja 0xa4cf9d
movsx eax, cl
and cl, 0xfb
shl cl, cl
mov cl, byte [esi]
lea edx, [edx + edx*4]
cmp ah, bh
lea edx, [eax + edx*2 - 0x30]
jmp 0xa1d346
test cl, cl
jmp 0xa4cf97
pop edi
movzx ebx, cx
xadd esi, ebx
adc esi, edi
pop ebx
add esi, edi
add eax, ecx
pop esi
jmp 0x9ba11d
mov ecx, esi
sub ecx, eax
jmp 0x9ac93c
jmp 0xdd8652
jne 0xf3093c
push 0
push edx
jmp 0xa52aa2
push edi
jmp 0xeb073f
mov esp, ebp
pop ebp
jmp 0xa01c83
je 0xdc1f72
mov byte [ebx + eax], dl
inc edi
inc eax
cmp edi, ecx
jb 0xe78ca6
lea ecx, [ebp - 0x114]
cbw
mov eax, 0x3b3f7eea
not eax
push ecx
not ax
movzx eax, di
mov byte [ebp + edi - 0x114], 0
mov ax, 0x217f
cbw
xchg ah, al
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xde802e
mov esp, ebp
mov ebp, 0x639645ce
not bp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
adc dl, 0x61
sub dx, si
sbb edx, ecx
mov edx, dword [ecx + eax + 0x24]
lea ecx, [edx + esi*2]
rol dh, cl
shrd dx, sp, 0x35
movzx edx, word [ecx + eax]
btr cx, dx
mov dword [ebp - 8], edx
rol dx, 0x35
bts edx, edi
mov ecx, eax
mov edx, dword [ebp - 4]
btc eax, 0xe4
mov eax, dword [ebp - 8]
cmc
jmp 0xddaea1
cmp eax, dword [edx + ecx + 0x14]
jmp 0xe28667
mov edi, dword [edx + ecx + 0x18]
test edi, edi
jmp 0xf39e82
call eax
mov edi, eax
cmp dx, si
test edi, edi
jne 0xec3802
lea edx, [ebp - 0x114]
mov eax, eax
lahf
push edx
cwde
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x912d3a
ret
inc esi
cmp si, bp
cmc
test cl, cl
jne 0x921979
pop edi
pop ebx
test cx, 0x2b0e
mov si, 0x2aca
shld esi, ebp, 0x9e
sub eax, eax
pop esi
jmp 0xdc3104
je 0xe14699
mov edi, dword [ebp + 0xc]
rcl bl, cl
lea ecx, [ebp - 0x114]
cmova si, bp
xor eax, eax
or ebx, edi
sub edi, ecx
lea esp, [esp]
mov cl, al
btr bx, bp
bts ebx, edi
mov ebx, 0x2cd629de
rcl esi, 1
btc esi, 0x31
rol ebx, cl
add si, ax
lea esi, [ebp + eax - 0x114]
sar ch, cl
sub ch, 0x4b
lea ecx, [eax + ebx]
cmp ebp, ebp
xor cl, byte [edi + esi]
mov byte [esi], cl
je 0x9fbf1f
inc eax
cmp eax, 0x104
jmp 0x9fbf19
ret
mov cl, byte [esi + 2]
cmp ebp, esi
add esi, 2
sub edx, edx
test cl, cl
jmp 0xf30936
mov eax, dword [ebp + 0xc]
jmp 0xeb6846
jae 0xdf5d9a
mov esi, dword [edx + ecx + 0x1c]
clc
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
test edi, eax
test eax, eax
jmp 0xec8b1c
push edi
jmp 0xe7aa9a
jmp 0x998048
mov eax, dword [ecx + 0x3c]
cmp dword [eax + ecx], 0x4550
jne 0xf3c19a
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
cmc
cmp si, ax
test edx, edx
je 0xf3c19a
mov eax, dword [eax + ecx + 0x7c]
cmc
push ebx
cmc
test eax, edx
push edi
mov dword [ebp - 0x10], eax
clc
cmp bx, 0x250
stc
mov dword [ebp - 8], 0xffffffff
cmp esi, 0xffff
ja 0xddedf4
mov eax, esi
jmp 0x999ad0
jne 0xf20355
cmp byte [ebp + 0x10], 0
jmp 0xe03276
js 0xdd8652
jmp 0x97884f
je 0xdc1f72
lea ebx, [ebp - 0x114]
or dl, 0x5d
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0xdc1f5f
call fcn.009d9819
add esp, 0xc
not si
setle bl
pop edi
movsx bx, bh
pop ebx
pop esi
jmp 0x91bc50
mov esp, ebp
jmp 0x996d99
mov dword [ebp - 0xc], eax
jmp 0xe63ca2
jle 0x97884a
jmp 0xdd864b
call fcn.009d9819
add esp, 0xc
pop edi
xchg ebx, esi
pop ebx
pop esi
jmp 0x926ec1
push eax
cwde
push edx
not eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
bswap ebx
pop ebx
pop esi
jmp 0xa5dd12
dec edi
jmp 0xe979c2
je 0xdf5d9a
mov edx, dword [ebp + 8]
cmp bl, dh
stc
cmp edi, edx
jmp 0xe5e92e
je 0xdf5d9a
cmp eax, edx
jmp 0x987726
jae 0xdf5d9a
xor edi, edi
test ecx, ecx
jmp 0xe78c95
mov dword [ebp - 8], eax
jmp 0xa47fb7
cmp byte [esi + 1], 0x23
movsx cx, dl
mov cx, cx
lea ecx, [esi + 1]
je 0xe12850
push 0
jmp 0xa085a7
jns 0x998037
lea edi, [esi - 1]
jmp 0xe38d30
push esi
cmp bp, 0x35f
test ecx, ecx
je 0xf3c19a
mov esi, dword [ebp + 0xc]
test bx, si
test esi, esi
je 0xf3c19a
mov eax, 0x5a4d
cmp esi, 0x32547d8a
cmc
cmp word [ecx], ax
jmp 0xf3c194
je 0xa4cf9d
lea eax, [ecx - 0x30]
inc esi
cmp al, 9
jmp 0xa08ce9
je 0xdd8652
mov eax, dword [edx + ecx + 0x20]
lea eax, [eax + ecx]
sub ebx, ebx
jmp 0xeb7f37
je 0xe47437
xor eax, eax
mov si, ax
pop esi
mov esp, ebp
pop ebp
ret