Function at 0x4c9f364
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
ret
call fcn.04b6b7d4
add esp, 4
test edx, ebp
jmp 0x4937ba4
ret
ret
mov edi, dword [edx + ecx + 0x18]
cmc
test edi, edi
jmp 0x3097fab
je 0x48bdae2
mov edi, dword [ebp + 0xc]
shl bl, cl
lea ecx, [ebp - 0x114]
xor eax, eax
sub edi, ecx
stc
lea esp, [esp]
mov cl, al
mov ebx, 0x3c622bae
bts si, bx
rol ebx, cl
lea esi, [ebp + eax - 0x114]
lea ecx, [eax + ebx]
cmp dx, sp
test bx, di
xor cl, byte [edi + esi]
jmp 0x48dda32
jle 0x30b7476
lea ebx, [esi + 1]
ror ch, 0xa9
mov ecx, dword [ebp + 8]
cmp bx, bx
clc
cmp ebx, edi
jmp 0x384e852
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
test ax, 0x736d
bsr esi, edx
lea esi, [edi + ebx]
jmp 0x491f1e5
je 0x30b74b5
mov eax, dword [edx + ecx + 0x20]
add eax, ecx
cmp bx, 0x3b8d
test bx, ax
stc
sub ebx, ebx
jmp 0x30bdd6a
jb 0x4c5a790
mov esi, dword [ebp - 0x10]
test sp, 0x4cc7
add esi, edx
clc
cmc
cmp eax, esi
jae 0x4c5a790
lea eax, [eax + ecx]
mov cl, byte [eax]
shrd esi, ecx, 0x4b
mov esi, eax
cmp cx, bx
clc
test si, 0x60cb
test cl, cl
jmp 0x493b681
push edx
jmp 0x495a4a5
je 0x4c5f351
lea ebx, [ebp - 0x114]
add dl, 0x30
sub ebx, eax
sar dl, 0xb8
mov dl, byte [eax]
jmp 0x389bac6
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
shr dh, 0x71
bts dx, ax
bswap dx
mov edx, dword [ecx + eax + 0x24]
btr ecx, ebx
clc
lea ecx, [edx + esi*2]
bt dx, 0x9e
movzx edx, word [ecx + eax]
sub ecx, edi
mov dword [ebp - 8], edx
or cx, 0x22d8
mov ecx, eax
shr edx, 0xde
cmp di, dx
mov edx, dword [ebp - 4]
adc ax, bp
setne al
mov eax, dword [ebp - 8]
stc
cmp esi, ecx
cmp eax, dword [edx + ecx + 0x14]
jmp 0x4c7bf24
je 0x4c442ef
mov cl, byte [esi + 1]
jmp 0x49573d0
mov esp, ebp
not bp
jmp 0x4ca6ae6
dec edi
jmp 0x30c5e59
mov dword [ebp - 0xc], eax
jmp 0x4c7d008
jle 0x3095a6a
jmp 0x30b74ac
jmp 0x30b74b5
jne 0x387bd39
lea edx, [ebp - 0x114]
not al
push edx
mov al, 0x33
movsx eax, cx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x3883ab5
je 0x49573d9
mov edx, dword [ebp + 8]
stc
clc
cmp edi, edx
jmp 0x4b727c6
call eax
mov edi, eax
cmp ebx, 0x4983752b
test edi, edi
jmp 0x387bd33
ret
push ecx
jmp 0x4c9450c
mov esp, ebp
bswap ebp
movzx ebp, si
pop ebp
jmp 0x3883acd
test dl, dl
jmp 0x4b4d45e
ja 0x4b405e1
movsx eax, cl
cmp ebx, esi
shr cl, 0xde
mov cl, byte [esi]
stc
jmp 0x4b405d1
pop ebp
jmp 0x304f167
mov eax, dword [ebp + 0xc]
jmp 0x4960446
jne 0x48ff887
mov edx, dword [eax + ecx + 0x78]
cmc
cmp edi, 0x4c5e0089
mov dword [ebp - 4], edx
jmp 0x4c538ea
push eax
movzx eax, dx
movzx ax, dh
push edx
jmp 0x4b522ac
lea eax, [esi + eax*4]
clc
mov eax, dword [eax + ecx]
clc
cmc
test eax, eax
je 0x49573d9
cmp eax, edx
jmp 0x309a539
mov esp, ebp
jmp 0x48e86ca
mov byte [esi], cl
je 0x4c51426
inc eax
clc
cmp cl, 0xa5
cmp eax, 0x104
jmp 0x4c51420
push ebx
cmc
push edi
mov dword [ebp - 0x10], eax
clc
test edx, 0x7470ab6
mov dword [ebp - 8], 0xffffffff
cmp esi, 0xffff
jmp 0x494a6e7
pop ebp
jmp 0x304ac57
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
je 0x4c84f8d
push 0
jmp 0x388c644
inc esi
cmp al, 9
jmp 0x389dfce
je 0x48ff887
mov esi, dword [ebp + 0xc]
cmc
test esi, esi
je 0x48ff887
mov eax, 0x5a4d
test esp, edi
cmp word [ecx], ax
je 0x4c7568f
xor eax, eax
not esi
movzx esi, bp
cmovg esi, esp
pop esi
jmp 0x30b9cf0
sar esi, 1
cmp edx, 0x716d6a49
mov eax, dword [eax + esi*4]
clc
push edx
sal edx, 0xff
shld edx, edi, 0xf
or dh, 0xff
mov edx, dword [ebp + 0xc]
add eax, ecx
jmp 0x305fc73
mov esp, ebp
mov ebp, ebx
jmp 0x38aa980
test eax, eax
jns 0x30945c0
lea edi, [esi - 1]
jmp 0x30945cc
je 0x49573d9
cmp cl, 0x2e
jmp 0x30b7afd
ja 0x307f04f
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
jmp 0x4b80f58
inc esi
test cl, cl
jne 0x493b687
pop edi
pop ebx
bt esi, ebx
btc si, 0xf7
sub eax, eax
mov si, 0x1f4c
mov esi, eax
bswap si
pop esi
jmp 0x48dda17
push edi
jmp 0x4cf91cf
push eax
push edx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop ebx
pop esi
mov esp, ebp
movsx ebp, dx
mov ebp, 0x38a51dfc
pop ebp
jmp 0x306977d
lea edx, [edx + edx*4]
clc
lea edx, [eax + edx*2 - 0x30]
test cl, cl
jne 0x4ca75c8
push 0
jmp 0x30a66f5
je 0x4c5f351
mov byte [ebx + eax], dl
jmp 0x4b8e8fb
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x4cbb538
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
mov edi, eax
stc
cmp ebx, 0x5a8052a7
test edi, edi
jmp 0x385b74e
jne 0x48fb776
cmp byte [ebp + 0x10], 0
jmp 0x308c470
mov dword [ebp - 8], eax
jmp 0x384e8e9
inc edi
jmp 0x4c5f343
mov ecx, esi
cmp di, 0x4dac
stc
test si, 0x251d
sub ecx, eax
cmp ecx, 0x104
jae 0x49573d9
sub edi, edi
cmc
test ecx, ecx
jmp 0x30b70aa
jb 0x308c48d
lea eax, [ebp - 0x114]
jmp 0x48c1b1c
test edx, edx
jmp 0x4cad4e2
pop edi
or esi, esp
pop ebx
bsf si, dx
bswap si
add eax, ecx
pop esi
jmp 0x4ca2222
inc eax
test cl, 0x4c
stc
cmc
cmp edi, ecx
jb 0x30b70be
lea ecx, [ebp - 0x114]
not ax
push ecx
bswap ax
xchg ah, al
mov byte [ebp + edi - 0x114], 0
lahf
jmp 0x4b6b74e
mov eax, dword [ecx + 0x3c]
test bl, 0x57
cmc
cmp ebp, edx
cmp dword [eax + ecx], 0x4550
jmp 0x48be1af
jae 0x49573d9
mov esi, dword [edx + ecx + 0x1c]
jmp 0x48cabb6
js 0x30b74b5
jmp 0x3095a6d
mov cl, byte [esi + 2]
add esi, 2
sub edx, edx
cmp bl, 0x99
test cl, cl
jmp 0x4ca75c2
push edi
call fcn.04c9f364
add esp, 0xc
pop edi
pop ebx
mov si, si
pop esi
jmp 0x4cbb415
push ebp
mov ebp, esp
xor cx, dx
mov ecx, dword [ebp + 8]
sub esp, 0x114
cmp si, 0x1b35
stc
push esi
test ecx, ecx
jmp 0x48ff865
mov esp, ebp
cmovne bp, sp
pop ebp
jmp 0x306fd87
pop ebp
ret
je 0x4b405e1
lea eax, [ecx - 0x30]
jmp 0x48fe56a
je 0x48ff887
mov eax, dword [eax + ecx + 0x7c]
jmp 0x48e6d2e
mov esp, ebp
pop ebp
ret
call eax
pop edi
mov esi, esi
movzx esi, dx
movsx bx, al
pop ebx
not si
cmovo esi, ebx
movsx esi, di
pop esi
jmp 0x388c718
call fcn.04c9f364
add esp, 0xc
pop edi
movzx ebx, cx
xchg si, si
pop ebx
pop esi
jmp 0x4936a12