Function at 0xc9553f
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ecx
mov byte [ebp + eax - 0x114], 0
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
call eax
test eax, eax
jmp 0xdeb5b2
jle 0xc89547
mov eax, dword [ebp - 4]
or si, 0x3188
test edi, 0x1ad54528
mov esi, dword [ebp - 8]
jmp 0xc61bfc
cmp ecx, 0xffff
jmp 0xd64599
ret
call eax
pop esi
movsx edi, di
pop ebx
movzx edi, dx
pop edi
jmp 0xdc25e5
mov cl, byte [esi + 2]
cmc
cmp cl, 0x70
lea esi, [esi + 2]
xor edx, edx
test di, 0x6561
test sp, si
clc
test cl, cl
je 0xd6d9e4
mov bl, cl
sub bl, 0x30
jmp 0xd6d65d
ret
call fcn.00c9553f
add esp, 0xc
mov si, 0x3070
pop esi
jmp 0xc56b65
ret
pop ebx
not di
pop edi
mov esp, ebp
xchg bp, bp
pop ebp
ret
jne 0xd6f3ca
pop esi
bsf bx, ax
btc bx, dx
stc
pop ebx
bts edi, edi
sub eax, eax
jmp 0xc5c51b
pop edi
jmp 0xde987c
cmp esi, dword [eax + edi + 0x14]
jae 0xc59cf2
mov ecx, dword [eax + edi + 0x1c]
xadd dl, dh
lea edx, [ecx + esi*4]
cmp ecx, esi
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0xc677da
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0xc2c897
je 0xc59cf2
cmp ecx, eax
jmp 0xcf5b8d
inc edx
inc eax
cmp ebp, edi
mov dword [ebp + 8], edx
cmp bp, cx
cmp edx, ecx
jmp 0xcef3bc
add edx, edi
clc
cmp dword [edx], 0x4550
jmp 0xcff5ff
ret
dec ebx
test ecx, 0x33e36862
lea edx, [edx + edi]
test esi, ebp
stc
cmp bx, di
mov dword [ebp + 8], 0
test al, 0xa8
mov dword [ebp - 0xc], edx
cmp ebp, 0x5d687162
clc
test ebx, ebx
jmp 0xd81c66
mov ecx, dword [ebp - 4]
cmovle dx, dx
jmp 0xde684e
call fcn.00d2bb91
add esp, 4
test esi, edx
cmc
cmp eax, 0xffffffff
je 0xc63575
test eax, eax
jmp 0xd3d315
mov dword [ebp - 8], ecx
jmp 0xca7751
mov eax, dword [ebp + 0xc]
jmp 0xde40bb
mov ecx, dword [ebp + 0xc]
rdtsc
mov edx, dword [ebp - 0xc]
sub si, 0x5e3a
rol ax, cl
mov eax, dword [ebp + 8]
rcl esi, 0x5f
sar si, 0xd8
lea esi, [ebx + eax]
neg al
cwde
dec ah
mov eax, dword [ebp + 0x10]
test dh, ah
push eax
sar esi, 1
rol al, cl
clc
bsr ax, bp
mov eax, dword [edx + esi*4]
clc
add eax, edi
jmp 0xc83fb7
push ebp
mov ebp, esp
cmc
lea esp, [esp - 0x114]
clc
push edi
mov edi, dword [ebp + 8]
stc
test edi, edi
je 0xdaa1dd
mov ecx, dword [ebp + 0xc]
test edi, eax
test ecx, ecx
jmp 0xdc9454
jne 0xd4aa7a
cmp byte [ebp + 0x10], 0
jmp 0xd54118
jb 0xd54148
lea eax, [ebp - 0x114]
jmp 0xd490e8
mov dword [ebp + 8], edx
jmp 0xc63578
mov esp, ebp
pop ebp
jmp 0xc3001f
jne 0xc63578
inc esi
jmp 0xd2cb40
push eax
jmp 0xcc54d4
push eax
jmp 0xc55e22
call eax
test eax, eax
je 0xc59cf2
cmp eax, edi
jmp 0xc9b7f6
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0xc5637b
push edx
jmp 0xcaf804
call fcn.00c9553f
add esp, 0xc
not esi
pop esi
movsx ebx, bp
pop ebx
mov di, cx
movzx edi, dx
pop edi
jmp 0xd669a6
jae 0xc59cf2
mov edx, dword [eax + edi + 0x1c]
cmc
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0xcd69fe
sub eax, eax
pop edi
mov esp, ebp
mov bp, bx
movzx ebp, dx
pop ebp
ret
jne 0xc677e0
pop esi
sal edi, 0x79
or bh, dh
movzx edi, si
pop ebx
jmp 0xcc9874
mov dword [ebp - 4], eax
test eax, eax
jmp 0xd4ac70
jb 0xd690f2
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
jmp 0xc232ee
jb 0xdd8974
mov edx, dword [ebp - 0x10]
clc
lea edx, [edx + eax]
jmp 0xd84d17
jne 0xdaa1dd
mov eax, dword [edx + 0x78]
jmp 0xce89b8
jae 0xdd8974
lea eax, [ecx + edi]
cmp di, 0x4018
adc cl, dl
mov cl, byte [eax]
mov esi, eax
test al, 0xdb
test cl, cl
je 0xc59cf2
mov edi, edi
jmp 0xd6f3ca
call eax
pop esi
mov di, bx
pop ebx
movzx edi, bp
pop edi
jmp 0xcb7d17
push ebx
cmp bp, 0x5efe
push esi
or esi, 0xffffffff
stc
test dh, 0x98
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
test ebp, 0x37544b5
jmp 0xc2e7a6
push ecx
jmp 0xcab27a
mov dword [ebp + 8], esi
jmp 0xdbcd49
je 0xc76830
cmp eax, 1
jmp 0xca959b
je 0xca6211
inc edx
cmp esi, 0x44d33f19
test cl, 0xc9
test eax, ebp
cmp edx, 0x104
jmp 0xca620b
push eax
push edi
movsx eax, cx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0xc32687
cmp byte [esi + 1], 0x23
mov ch, 0xf9
lea ecx, [esi + 1]
jmp 0xddf092
je 0xdaa1dd
mov edx, dword [edx + 0x7c]
cmp di, dx
jmp 0xd16cd4
je 0xc880cd
mov ebx, dword [ebp + 0xc]
test edi, ebp
lea eax, [ebp - 0x114]
btc si, bp
sub edx, edx
xor si, 0x2b60
neg si
rcl esi, 0xf7
sub ebx, eax
rcr si, 0xd6
mov edi, edi
ror ax, 0x8a
not al
mov eax, 0x27030d43
not esi
mov cl, dl
rcr esi, 0xd0
rol eax, cl
lea esi, [ebp + edx - 0x114]
clc
cmc
add al, dl
xor al, byte [ebx + esi]
jmp 0xdf474b
mov ebx, dword [eax + edi + 0x18]
cmc
test ebx, ebx
je 0xc61bfc
mov edx, dword [eax + edi + 0x20]
jmp 0xc6dfcd
mov edx, dword [edi + 0x3c]
cmp edi, esi
jmp 0xc6cf4f
ja 0xd61279
sub ecx, dword [eax + edi + 0x10]
test si, sp
cmp ecx, dword [eax + edi + 0x14]
jmp 0xcc5627
mov esp, ebp
cmovle ebp, edi
xchg bp, bp
pop ebp
ret
jbe 0xcef3c2
lea ebx, [ebp - 0x114]
sub ebx, eax
clc
mov dl, byte [eax]
test sp, 0x5ded
test dl, dl
jmp 0xdd7019
inc esi
jmp 0xd6d9b2
cmp bl, 9
ja 0xd6d9e4
movsx ecx, cl
cmp di, 0x3ab4
stc
lea edx, [edx + edx*4]
cmp si, si
clc
lea edx, [ecx + edx*2 - 0x30]
ror cl, cl
sar cl, cl
mov cl, byte [esi]
stc
cmc
cmp dx, 0x67f2
test cl, cl
jne 0xc4ea11
push 0
jmp 0xcbfe3a
cmp cl, 0x2e
je 0xd9b3fe
mov cl, byte [esi + 1]
inc esi
cmp cx, bp
test cl, cl
jmp 0xc59cec
jl 0xc61bfc
jmp 0xc89557
cmp ecx, edx
jmp 0xcfff89
mov ecx, esi
cmp ecx, esi
clc
sub ecx, eax
cmp bx, si
cmp ecx, 0x104
jae 0xc59cf2
mov dword [ebp + 8], 0
stc
cmp edx, eax
jmp 0xdbbfdf
je 0xd627d0
sub eax, eax
pop edi
jmp 0xca863d
test ecx, ecx
jmp 0xd690e3
jmp 0xc63578
mov esp, ebp
not ebp
pop ebp
jmp 0xc6da37
je 0xdaa1dd
mov eax, 0x5a4d
cmc
cmp word [edi], ax
jmp 0xdaa1d7
je 0xcef3c2
mov byte [ebx + eax], dl
cmovnp dx, ax
mov edx, dword [ebp + 8]
jmp 0xc693c2
pop esi
movsx eax, bp
movsx bx, bl
pop ebx
mov ah, 0x7a
nop
lea eax, [ecx + edi]
not edi
movsx edi, ax
pop edi
mov esp, ebp
pop ebp
jmp 0xc4f5f3
je 0xc4e9f4
push 0
jmp 0xd244f5
push eax
mov ah, bl
movzx ax, bh
movsx eax, bp
push edi
lahf
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0xd0cde4
mov edx, dword [ecx + edi + 0x24]
mov ecx, 0x7158455c
lea eax, [edx + esi*2]
xchg ecx, edx
mov edx, ebp
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0xc865bd
mov esp, ebp
not ebp
pop ebp
ret
jne 0xcb1109
lea edx, [ebp - 0x114]
xchg ah, al
push edx
mov al, 0xe5
lahf
movsx eax, di
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
jmp 0xcb10ff
mov byte [esi], al
jmp 0xd44b51