Function at 0xc98159
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
dec ebx
test edi, 0x40503c43
cmc
lea edx, [edx + edi]
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x8d534b
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xcdee0d
jb 0xdd5a50
mov edx, dword [ebp - 0x10]
clc
stc
add edx, eax
stc
cmp ecx, edx
jmp 0xce89b9
cmp byte [esi + 1], 0x23
xchg ch, cl
bswap cx
lea ecx, [esi + 1]
jmp 0xdffbed
mov esp, ebp
mov ebp, eax
movsx ebp, dx
pop ebp
jmp 0x88e740
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jle 0x92d7d8
mov eax, dword [ebp - 4]
clc
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jae 0xd1281c
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
test di, si
stc
test ecx, ecx
jmp 0xdd3dea
call fcn.00c98159
add esp, 0xc
not ebx
movsx esi, bx
cmovp edi, edx
pop esi
not ebx
pop ebx
xchg edi, edi
pop edi
jmp 0x8c4987
push eax
jmp 0x8c8030
mov edx, dword [edi + 0x3c]
jmp 0x8fcedd
push edi
or edi, 0x4fe437ac
mov edi, dword [ebp + 8]
test edi, edi
jmp 0xc8849a
jl 0x8c67d0
jmp 0x92d7e6
movzx ecx, word [eax + edi]
cwd
lea edx, [ebx + 1]
jmp 0xceee0f
mov esp, ebp
not ebp
pop ebp
ret
call fcn.008b95ed
add esp, 4
cmp esi, 0x1beb5d82
test edi, edi
cmp eax, 0xffffffff
je 0x8c67bd
test eax, eax
jmp 0xd6787e
je 0xd1281c
mov edi, edi
cmp cl, 0x2e
jmp 0xccddcc
add edx, edi
cmp dword [edx], 0x4550
jne 0xdf9e51
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
cmp cl, cl
test eax, eax
jmp 0xd64e50
je 0xd1281c
cmp eax, edi
jmp 0xc5f8e3
inc esi
test bp, di
cmc
cmp bl, 9
ja 0xc9b02c
movsx ecx, cl
test bp, ax
cmp bp, 0x4a3f
lea edx, [edx + edx*4]
test edx, ebp
test esp, 0x7396482f
lea edx, [ecx + edx*2 - 0x30]
cmc
mov cl, byte [esi]
cmp esp, ecx
cmp esp, 0x62e12f0c
test cl, cl
jmp 0xc9b026
mov ecx, dword [ebp + 0xc]
cdq
rcl al, 0xc4
mov edx, dword [ebp - 0xc]
or esi, ebp
xor eax, edx
mov eax, dword [ebp + 8]
xchg si, si
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
test bh, 0xba
push eax
btr ax, bp
sar esi, 1
rol eax, cl
mov eax, dword [edx + esi*4]
test edi, 0x35034449
clc
add eax, edi
jmp 0x8f1faa
push edx
jmp 0x8c86f5
push eax
mov ax, 0x451a
lahf
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
pop ebx
pop edi
jmp 0xe25877
pop esi
movsx bx, dh
jmp 0xd73339
ret
je 0x8c67d0
mov edx, dword [eax + edi + 0x20]
jmp 0x88fc45
mov esp, ebp
mov ebp, ebp
pop ebp
jmp 0xd6c5db
jne 0x8a9a15
cmp byte [ebp + 0x10], 0
jmp 0xe04e98
mov cl, byte [esi + 2]
clc
add esi, 2
clc
cmp al, 0x1f
sub edx, edx
cmp cl, 0x99
cmc
test cl, cl
jmp 0xe043b2
mov esp, ebp
mov bp, 0x5a1f
cmova ebp, edi
pop ebp
jmp 0xcdb58f
je 0xdf9e51
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0xcfe134
mov esp, ebp
pop ebp
jmp 0xd68cb3
push ebp
mov ebp, esp
lea esp, [esp - 0x114]
cmp esp, ebp
jmp 0x8cb89c
jne 0xe043b8
push 0
jmp 0x92dd69
push ecx
jmp 0x891cd5
mov ecx, esi
cmp al, 0x63
sub ecx, eax
test si, 0x7db2
test edi, ecx
cmp ecx, 0x104
jae 0xd1281c
mov dword [ebp + 8], 0
test ecx, ecx
jbe 0xe12d40
lea ebx, [ebp - 0x114]
test edx, 0x627e21ba
rcr dl, 0x40
sub ebx, eax
or dl, 2
mov dl, byte [eax]
test esi, 0x222804de
test dl, dl
je 0xe12d40
mov byte [ebx + eax], dl
mov dx, 0x469f
cmovl dx, sp
setl dl
mov edx, dword [ebp + 8]
jmp 0xdf38ec
inc eax
mov dword [ebp + 8], edx
stc
cmp edx, ecx
jmp 0xe12d3a
mov ebx, dword [eax + edi + 0x18]
clc
test ebx, ebx
jmp 0xc4fb18
push eax
jmp 0xd11e21
mov esp, ebp
not bp
pop ebp
jmp 0xc39e37
je 0xca4edb
mov cl, byte [esi + 1]
inc esi
stc
test cl, cl
jmp 0xd12816
jne 0xdd3df0
pop esi
pop ebx
bswap edi
bts di, si
xor eax, eax
pop edi
jmp 0x8d8d56
ret
call eax
test eax, eax
jmp 0xe00e89
ret
jae 0xdd5a50
lea eax, [ecx + edi]
cmc
shr si, 0x85
rcr cl, 0x1d
mov cl, byte [eax]
clc
inc si
mov esi, eax
test cl, cl
jmp 0x8f34c9
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x8c67c0
je 0xdf9e51
mov eax, 0x5a4d
cmp sp, si
cmp word [edi], ax
jmp 0xdf9e4b
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
test eax, eax
jmp 0x92187f
jb 0xe04eca
lea eax, [ebp - 0x114]
jmp 0xc2dfa8
call fcn.00c98159
add esp, 0xc
bswap edi
jmp 0xc3215e
jne 0x8f34d1
pop esi
stc
bts di, dx
pop ebx
sub eax, eax
movzx edi, bp
pop edi
jmp 0xc81f46
jmp 0x8c67c0
mov ecx, dword [ebp - 4]
mov al, 0x8a
cdq
mov edx, dword [ecx + edi + 0x24]
lahf
seta al
lea eax, [edx + esi*2]
jmp 0x8d5f00
je 0xdf9e51
mov edx, dword [edx + 0x7c]
push ebx
cmc
cmp sp, 0x6385
test al, 0x75
push esi
or esi, 0xffffffff
cmc
test bp, 0x19af
mov dword [ebp - 0x10], edx
test ebx, 0x5c766535
mov dword [ebp - 8], esi
cmp ecx, 0xffff
ja 0xcba29c
sub ecx, dword [eax + edi + 0x10]
stc
cmp ecx, dword [eax + edi + 0x14]
jae 0xd1281c
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
jmp 0xe1e074
je 0xd1a652
cmp eax, 1
jmp 0xded77f
ret
ret
pop ebx
pop edi
jmp 0xc961dc
mov eax, dword [ebp + 0xc]
push eax
push edi
cmovns eax, eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xe27729
je 0xd1281c
cmp ecx, eax
jmp 0x893ac2
pop esi
cwde
pop ebx
cwde
lea eax, [ecx + edi]
pop edi
jmp 0xcc9979
jne 0x8c67c0
inc esi
mov dword [ebp + 8], esi
jmp 0xd1701f
inc edx
jmp 0xcaf955
je 0x8ca509
sub eax, eax
bswap di
cmova di, cx
pop edi
jmp 0xe2b382
je 0xc60234
push 0
push ecx
jmp 0xcc754d
jne 0x921885
lea edx, [ebp - 0x114]
jmp 0xcffa54
je 0xd0be05
inc edx
cmp ebx, edi
cmp edx, 0x104
jmp 0xd0bdff
je 0xc9b02c
mov bl, cl
stc
clc
sub bl, 0x30
jmp 0x925213
je 0xd7ae86
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
xadd si, si
cmc
or esi, 0x47177b21
sub edx, edx
or si, cx
add esi, 0x182b5184
sub ebx, eax
mov edi, edi
rcl eax, cl
movsx eax, dx
btr esi, 0x93
mov eax, 0x7f3e7e75
mov cl, dl
btr esi, 0xa0
rol eax, cl
movzx esi, dx
lea esi, [ebp + edx - 0x114]
clc
add al, dl
cmp edx, 0x20f80235
xor al, byte [ebx + esi]
jmp 0xe2081c
jb 0xca4f17
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
jmp 0xca100a
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0xccf25f
mov byte [esi], al
jmp 0xe021e2
mov esp, ebp
mov bp, si
pop ebp
jmp 0xce3253
call eax
pop esi
not bh
pop ebx
cmovne di, sp
pop edi
jmp 0xc56a93
mov esp, ebp
mov ebp, esi
movsx ebp, dx
pop ebp
ret