Function at 0xea39ed
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov esp, ebp
movzx ebp, bx
bswap bp
not ebp
pop ebp
jmp 0xecdfff
dec ebx
cmp ah, al
clc
add edx, edi
cmp bl, ah
cmp ax, 0x3308
test dl, 0xda
mov dword [ebp + 8], 0
clc
stc
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0x1557979
call eax
pop esi
movzx edi, ax
xchg di, di
pop ebx
mov di, bp
jmp 0x156897b
jae 0x158e752
mov dword [ebp + 8], 0
test ecx, ecx
jbe 0xf6a16b
lea ebx, [ebp - 0x114]
rol dl, 0xf1
sub ebx, eax
ror dl, cl
mov dl, byte [eax]
stc
test dl, dl
jmp 0x15d3ab2
ret
mov byte [esi], al
jmp 0x1556363
lea esi, [ebx + eax]
bts ax, di
rcl al, cl
mov ah, 0xb2
mov eax, dword [ebp + 0x10]
clc
jmp 0xf3978e
pop esi
pop ebx
cmovae eax, ecx
lea eax, [ecx + edi]
mov di, ax
pop edi
jmp 0xf89287
jne 0x160596f
inc esi
jmp 0x15b077f
mov esp, ebp
pop ebp
jmp 0xe9a587
je 0xf38d4d
mov bl, cl
cmp edi, 0x27256cbd
sub bl, 0x30
inc esi
stc
cmp bl, 9
jmp 0x15deba0
je 0x158acd5
test eax, eax
jmp 0x15daf83
jle 0x1598e9a
mov eax, dword [ebp - 4]
bts si, cx
movsx esi, bx
clc
mov esi, dword [ebp - 8]
test ebp, esi
clc
cmp bh, 4
cmp esi, dword [eax + edi + 0x14]
jae 0x158e752
mov ecx, dword [eax + edi + 0x1c]
or edx, 0x71744e5d
cmc
lea edx, [ecx + esi*4]
test sp, cx
mov ecx, dword [edx + edi]
cmp esp, 0x463241e1
cmp sp, sp
test ecx, ecx
jmp 0x15dc9ae
call fcn.00ea39ed
add esp, 0xc
pop esi
xchg edi, edi
pop ebx
cmovb di, bx
pop edi
jmp 0x15d6b9c
test ebx, ebx
je 0xe808df
mov edx, dword [eax + edi + 0x20]
jmp 0xe1e906
ret
push eax
not ax
push edi
movsx eax, dx
lahf
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x159e12e
push ebp
mov ebp, esp
cmc
lea esp, [esp - 0x114]
stc
clc
push edi
sub edi, 0x1e9d3a51
mov edi, dword [ebp + 8]
stc
test edi, edi
jmp 0xf72d47
jne 0x1529aeb
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
jmp 0x15eeec2
ja 0xf879ab
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0x155f6b7
test cl, cl
jmp 0xf38d47
je 0x1606503
mov ebx, dword [ebp + 0xc]
and al, 0x5a
lea eax, [ebp - 0x114]
sbb esi, 0x29852213
xor edx, edx
bt esi, edi
ror esi, 0x49
sub ebx, eax
mov edi, edi
ror ax, 0x93
mov eax, 0x25324acc
mov cl, dl
rol eax, cl
lea esi, [ebp + edx - 0x114]
clc
add al, dl
stc
jmp 0x15c00aa
ret
test cl, cl
jmp 0x158e74c
inc edx
jmp 0x15df6c3
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x15e91a4
je 0x1529aeb
mov edx, dword [edx + 0x7c]
stc
clc
push ebx
stc
clc
push esi
or esi, 0xffffffff
cmp ecx, edx
mov dword [ebp - 0x10], edx
clc
mov dword [ebp - 8], esi
cmc
cmp edi, 0x37f2799a
cmp ecx, 0xffff
jmp 0xeb6b30
push eax
call fcn.00ea39ed
add esp, 0xc
pop esi
movzx edi, bx
pop ebx
xchg edi, edi
pop edi
jmp 0x154067f
jne 0xe6e2e7
push 0
jmp 0x155f6b0
push eax
bt eax, ecx
sar esi, 1
bt eax, 0xcb
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.015d3cca
lea esp, [esp + 4]
clc
test ecx, 0x6bb10fbd
cmp eax, 0xffffffff
jmp 0xe77a18
jb 0xecdf45
lea eax, [ebp - 0x114]
jmp 0xe9e71d
jmp 0x160596f
jne 0xed6648
cmp byte [ebp + 0x10], 0
jmp 0xecdf1e
mov dword [ebp - 8], ecx
jmp 0x156046c
jb 0xe287a1
mov eax, dword [ebp + 8]
jmp 0x1602ea7
mov ecx, esi
cmp ecx, edi
stc
sub ecx, eax
cmp ecx, 0x104
jmp 0xe2877f
je 0x1529aeb
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0x1529ad7
mov ebx, dword [eax + edi + 0x18]
jmp 0xe8743b
mov esp, ebp
pop ebp
ret
push ecx
jmp 0xee4820
je 0x1529aeb
mov eax, 0x5a4d
cmp word [edi], ax
je 0x1539c1b
xor eax, eax
pop edi
jmp 0x15d3cb1
mov edx, dword [edi + 0x3c]
cmc
cmp cx, sp
add edx, edi
cmp dword [edx], 0x4550
jmp 0xeb1186
mov ecx, dword [ebp - 4]
jmp 0x15757ce
je 0x158e752
mov edi, edi
stc
cmp cl, 0x2e
je 0xf6b034
mov cl, byte [esi + 1]
jmp 0x15a122d
mov esp, ebp
movsx ebp, sp
pop ebp
ret
ret
ret
jne 0x15dc9b4
pop esi
btc edi, 0xe0
shl edi, 0x47
pop ebx
xor eax, eax
pop edi
jmp 0xe64edb
je 0xf39d59
inc edx
clc
cmp edx, 0x104
jmp 0xf39d53
jl 0xe808df
jmp 0x1598ea8
push edx
push eax
jmp 0xe870fd
jae 0x158e752
mov edx, dword [eax + edi + 0x1c]
cmp dh, cl
lea ecx, [edx + ecx*4]
test sp, 0x6f57
stc
mov ecx, dword [ecx + edi]
cmp sp, 0x1b66
clc
test ecx, ecx
jmp 0x15513e8
mov dword [ebp + 8], edx
jmp 0x15e6796
pop edi
jmp 0x15afe0a
call eax
test eax, eax
je 0x158e752
cmp eax, edi
jmp 0xf42490
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
not cl
movzx ecx, word [eax + edi]
movzx dx, ah
lea edx, [ebx + 1]
jmp 0xf4be0a
lea ebx, [esi - 1]
cmp sp, di
jmp 0x160596f
jne 0x153f6f1
pop esi
pop ebx
sub eax, eax
pop edi
jmp 0xe026ae
mov ecx, dword [ebp + 0xc]
sub dh, bh
shrd ax, si, 0x14
stc
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
jmp 0xe53bad
call eax
pop esi
pop ebx
mov di, ax
cmovae di, bx
pop edi
jmp 0x15ff425
inc esi
test edx, edx
jmp 0xed2947
jne 0x156d2aa
lea edx, [ebp - 0x114]
setno al
bswap eax
push edx
cwde
bswap ax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x156d2a0
mov esp, ebp
pop ebp
ret
mov dword [ebp + 8], esi
jmp 0xf3c5d0
pop ebp
jmp 0xe3ae07
xor al, byte [ebx + esi]
jmp 0xe44d8b
mov cl, byte [esi + 2]
add esi, 2
cmp di, bp
cmp ax, 0x76cb
sub edx, edx
test cl, cl
jmp 0xe6e2e1
je 0xf6a16b
mov byte [ebx + eax], dl
movsx edx, bx
xchg dl, dl
mov edx, dword [ebp + 8]
jmp 0xed5f13
mov byte [ebp + eax - 0x114], 0
setnp ah
mov ah, 0xd6
bswap ax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x190a3f2
mov esp, ebp
pop ebp
jmp 0x154b401
mov esp, ebp
pop ebp
jmp 0x155073f
je 0x153e060
cmp eax, 1
jmp 0xe613bd
je 0x158e752
cmp ecx, eax
jmp 0x15e6615
ja 0xf38d4d
movsx ecx, cl
stc
lea edx, [edx + edx*4]
clc
cmp dl, 0x2b
test edi, eax
lea edx, [ecx + edx*2 - 0x30]
test esi, 0x3a3a671e
neg cl
mov cl, byte [esi]
jmp 0xeba593
inc eax
cmc
mov dword [ebp + 8], edx
cmp si, 0x1896
cmp edx, ecx
jmp 0xf6a165
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xe26d96
jb 0xe5640a
mov edx, dword [ebp - 0x10]
lea edx, [edx + eax]
stc
cmc
cmp esp, 0x62172a10
cmp ecx, edx
jae 0xe5640a
lea eax, [ecx + edi]
and esi, ebx
mov cl, byte [eax]
mov esi, eax
test cl, cl
jmp 0x153f6e8
jmp 0x160596f
je 0x15c5d5b
push 0
jmp 0x15244c2
test eax, eax
jmp 0xed99fd
mov esp, ebp
movsx ebp, bx
jmp 0x15be3da
lea ecx, [ebp - 0x114]
push ecx
jmp 0x15d3b6d
cmp dword [ebp + 8], ebx
jmp 0xe808c5
mov eax, dword [ebp + 0xc]
push eax
push edi
mov ah, ah
jmp 0x15e41ab
call eax
test eax, eax
jmp 0x15a4ac2