Function at 0xd358b9
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
inc esi
cmp ah, 0xda
cmp bl, 9
ja 0xac187a
movsx ecx, cl
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
test cl, cl
jmp 0xac1874
jmp 0x9fbd7e
mov dword [ebp + 8], esi
jmp 0xb51207
mov esp, ebp
mov bp, 0x2f17
pop ebp
ret
jb 0x9fb865
mov eax, dword [ebp + 8]
movsx ecx, dx
lea ecx, [ebp - 0x114]
jmp 0xb66f29
test cl, cl
jmp 0xb21288
push eax
not al
cwde
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x9fee9b
call eax
test eax, eax
jmp 0xabc396
je 0xac3792
cmp ecx, eax
jmp 0xa10dac
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0xb4a480
je 0xb4d173
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0xb4d173
mov eax, 0x5a4d
test ebx, esp
cmp word [edi], ax
jmp 0xb4d16d
jne 0xb4d173
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
stc
test eax, eax
jmp 0xb69da6
ja 0xb64809
sub ecx, dword [eax + edi + 0x10]
clc
stc
cmp ecx, dword [eax + edi + 0x14]
jae 0xac3792
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
jmp 0x9ed0d9
ret
mov esp, ebp
pop ebp
ret
mov edx, dword [edi + 0x3c]
cmp sp, sp
lea edx, [edx + edi]
cmp ebp, 0x5e0e2050
jmp 0xa03b14
call fcn.00d358b9
add esp, 0xc
movsx edi, sp
movzx bx, bl
pop esi
pop ebx
jmp 0xb46f06
jbe 0x9e7334
lea ebx, [ebp - 0x114]
rcr dl, 0x77
sub ebx, eax
mov dl, byte [eax]
cmp edx, 0xd035d90
clc
test dl, dl
jmp 0xb4f94a
mov esp, ebp
bswap bp
cmovp ebp, ecx
pop ebp
jmp 0xab75c9
inc eax
clc
cmp bp, dx
test cx, bp
mov dword [ebp + 8], edx
cmp edx, ecx
jmp 0x9e732e
jne 0x9fbd7e
inc esi
jmp 0x9e71b0
cmp dword [ebp + 8], ebx
jle 0xb20d2d
mov eax, dword [ebp - 4]
or si, sp
shr si, 0x41
mov esi, dword [ebp - 8]
clc
jmp 0xa03dca
call eax
pop esi
bswap di
xchg di, di
cmovne di, bx
pop ebx
xchg di, di
pop edi
jmp 0x9f7237
cmp dword [edx], 0x4550
jmp 0x9f504f
cmp esi, dword [eax + edi + 0x14]
jae 0xac3792
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
sbb cx, 0x740a
sar cl, 0x21
rol cx, 0x60
mov ecx, dword [edx + edi]
cmp esp, esp
jmp 0xb5c7b4
inc esi
test cl, cl
jmp 0xac378c
mov esp, ebp
movzx ebp, cx
pop ebp
ret
jne 0xa12005
cmp byte [ebp + 0x10], 0
je 0xb59576
mov ebx, dword [ebp + 0xc]
shl cl, 0x4b
lahf
lea eax, [ebp - 0x114]
sub edx, edx
test sp, 0x5b35
sub ebx, eax
mov edi, edi
cmc
stc
btc esi, edx
mov eax, 0x43142002
mov cl, dl
rol si, 0x84
rol eax, cl
movzx esi, ax
lea esi, [ebp + edx - 0x114]
clc
add al, dl
xor al, byte [ebx + esi]
jmp 0xb64395
je 0xac187a
mov bl, cl
stc
cmp cx, 0x53b9
sub bl, 0x30
jmp 0x9e3163
jb 0xb5551b
mov edx, dword [ebp - 0x10]
clc
test di, 0x7a83
cmp ebx, 0x205a3948
add edx, eax
cmp al, 0x98
jmp 0xa12173
cmp byte [esi + 1], 0x23
not ch
mov ecx, esp
lea ecx, [esi + 1]
jmp 0xac0e9b
cmp ecx, edx
jmp 0xd35472
ret
ret
call eax
test eax, eax
jmp 0xb20a08
xor eax, eax
cmovl edi, esp
not edi
pop edi
jmp 0xb5fce4
je 0xac46bb
inc edx
jmp 0xb46e77
jne 0xb20a0e
lea edx, [ebp - 0x114]
mov ah, 0x4d
lahf
movzx ax, bl
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xab95d6
ret
je 0xb50ec5
push 0
jmp 0xb208b2
jne 0xa10b52
push 0
push edx
jmp 0xac46e5
jne 0xb21297
pop esi
sub edi, 0x1d10345d
pop ebx
bt edi, 0xf
jmp 0xab9dfa
je 0xd35110
test eax, eax
je 0xac427e
cmp eax, 1
jmp 0x9fbbed
mov ecx, dword [ebp - 4]
cdq
not ah
cbw
mov edx, dword [ecx + edi + 0x24]
movsx ax, dl
movzx eax, si
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
movzx edx, ax
setp dl
lea edx, [ebx + 1]
jmp 0xb64133
jb 0xa0a59f
lea eax, [ebp - 0x114]
jmp 0x9ea772
push eax
call fcn.00d358b9
add esp, 0xc
pop esi
pop ebx
bswap edi
xchg di, di
pop edi
jmp 0xa083d2
je 0xa03dca
mov edx, dword [eax + edi + 0x20]
jmp 0xb57e8c
push ecx
jmp 0xb56bb8
je 0xac3792
cmp eax, edi
jmp 0xa0a572
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
bsr ax, bp
mov eax, dword [ebp + 8]
movzx esi, bx
mov esi, 0x1f221f11
lea esi, [ebx + eax]
cmp ecx, esp
shrd eax, ecx, 0x3e
mov eax, dword [ebp + 0x10]
push eax
sar esi, 1
mov eax, dword [edx + esi*4]
test si, 0x57dc
add eax, edi
call fcn.009fac80
lea esp, [esp + 4]
cmp eax, 0xffffffff
jmp 0xac37a3
je 0xac3792
mov edi, edi
cmc
cmp ebp, 0x7c2e6b45
cmp cl, 0x2e
jmp 0xb5b36d
cmp edx, 0x104
jmp 0xac46b5
pop edi
jmp 0x9fb875
jne 0x9ecd2c
pop esi
pop ebx
xor eax, eax
pop edi
mov esp, ebp
mov ebp, 0x71460e4c
pop ebp
jmp 0xabc493
pop ebp
jmp 0xb68823
je 0x9f8427
sub eax, eax
mov di, di
movsx edi, dx
pop edi
mov esp, ebp
jmp 0xb4c038
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x9ebcdc
je 0x9e7334
mov byte [ebx + eax], dl
not edx
movsx edx, dx
movsx dx, bh
mov edx, dword [ebp + 8]
jmp 0xb5773d
mov cl, byte [esi + 2]
clc
add esi, 2
stc
test esp, 0x1ff910bc
sub edx, edx
test cl, cl
jmp 0xa10b4c
jmp 0x9fbd7e
mov byte [ebp + eax - 0x114], 0
movzx ax, dl
jmp 0xb4d58e
jae 0xac3792
mov dword [ebp + 8], 0
test di, ax
test ecx, ecx
jmp 0x9fb854
lea eax, [ecx + edi]
not di
mov edi, edi
cmovs edi, ebp
pop edi
mov esp, ebp
pop ebp
jmp 0x9f5bf5
mov ecx, esi
clc
cmp esi, ecx
sub ecx, eax
clc
test ah, bl
cmp ecx, 0x104
jmp 0xb52df2
push ebx
cmc
stc
push esi
stc
cmp bx, si
or esi, 0xffffffff
stc
cmp eax, ecx
test si, cx
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp si, 0x1a67
stc
cmp ecx, 0xffff
jmp 0x9f5bd3
pop esi
pop ebx
jmp 0xb52e13
push eax
jmp 0x9fae4c
inc edx
jmp 0x9fbbdb
dec ebx
cmp si, 0x3eba
add edx, edi
test esp, 0x60753d02
mov dword [ebp + 8], 0
test ax, 0x4a5e
mov dword [ebp - 0xc], edx
stc
test bp, 0x6660
test ebx, ebx
jmp 0xd34527
mov eax, dword [ebp + 0xc]
push eax
movsx eax, di
push edi
mov ah, al
not eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
not bx
pop ebx
pop edi
jmp 0x9e72a8
je 0xb536be
mov cl, byte [esi + 1]
jmp 0xa07f99
test ecx, ecx
jmp 0x9ecd26
mov dword [ebp + 8], edx
jmp 0x9e6298
mov esp, ebp
pop ebp
jmp 0xa150a3
push edi
mov edi, dword [ebp + 8]
clc
test edi, edi
jmp 0x9f2f7f
mov dword [ebp - 8], ecx
jmp 0xb5ddd6
mov byte [esi], al
jmp 0xaba9ed
mov ebx, dword [eax + edi + 0x18]
stc
test ebx, ebx
jmp 0xac5e43
push ecx
jmp 0xb52798
ret
je 0xb4d173
mov edx, dword [edx + 0x7c]
jmp 0xb53aab
jl 0xa03dca
jmp 0xb20d37
lea ebx, [esi - 1]
jmp 0x9fbd7e
jae 0xb5551b
lea eax, [ecx + edi]
bsf esi, esp
mov cl, byte [eax]
mov esi, eax
jmp 0x9e9d1b
push ebp
mov ebp, esp
cmp esp, ebx
sub esp, 0x114
cmp sp, 0x7122
jmp 0xb62037