Function at 0xd850e4
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jmp 0xd85c52
jne 0xf2e5f4
push 0
jmp 0xee940a
ret
push eax
cbw
cmovp ax, di
movsx ax, cl
push edi
cbw
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xf478a5
je 0xfb9557
cmp eax, edi
jmp 0xf3f37a
push eax
jmp 0xf3d9f9
jae 0xfb9557
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
test ecx, ecx
jmp 0xe859d5
je 0xf7898b
mov ebx, dword [ebp + 0xc]
movzx esi, dx
lea eax, [ebp - 0x114]
rcr cl, 0x43
dec cl
mov esi, ebp
xor edx, edx
rol si, 0x71
sub ebx, eax
rcr al, 0x6d
btr si, ax
bt eax, 0x38
mov edi, edi
mov eax, 0x4d933899
bts esi, esi
mov cl, dl
rol eax, cl
cmc
and si, 0x4dd5
bts esi, ecx
lea esi, [ebp + edx - 0x114]
stc
test di, ax
add al, dl
clc
xor al, byte [ebx + esi]
jmp 0xd7202b
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0xe586e1
mov byte [esi], al
jmp 0xf8d4d0
je 0xfb9557
mov edi, edi
test bx, cx
cmp eax, 0x75a2595f
cmp cl, 0x2e
jmp 0x1695804
inc esi
cmp bl, 9
ja 0xd1ede6
movsx ecx, cl
cmc
lea edx, [edx + edx*4]
stc
test di, si
lea edx, [ecx + edx*2 - 0x30]
stc
rcr cl, cl
rcl cl, 0xde
mov cl, byte [esi]
clc
test eax, edx
stc
test cl, cl
jmp 0xd1ede0
je 0xec701a
sub eax, eax
not di
jmp 0xd88276
push ebp
mov ebp, esp
sub esp, 0x114
stc
push edi
jmp 0xfab596
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jle 0xf51f0d
mov eax, dword [ebp - 4]
neg si
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jae 0xfb9557
mov ecx, dword [eax + edi + 0x1c]
rcl dx, cl
ror edx, 0x13
lea edx, [ecx + esi*4]
shld cx, sp, 0xfd
mov ecx, dword [edx + edi]
test ecx, ecx
je 0xfb9557
cmp ecx, eax
jmp 0xf56a04
mov byte [ebp + eax - 0x114], 0
cwde
movzx ax, dl
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xf70bda
pop edi
jmp 0xedb57d
mov esp, ebp
movzx ebp, dx
pop ebp
jmp 0xef34eb
je 0xd7bcae
mov edx, dword [edx + 0x7c]
cmc
clc
cmp cx, si
push ebx
push esi
or esi, 0xffffffff
jmp 0xf80a4a
ret
jne 0xd85c52
inc esi
jmp 0xfac596
mov edx, dword [ebp + 8]
inc edx
jmp 0xf25b55
ja 0xf547b8
sub ecx, dword [eax + edi + 0x10]
clc
test edi, 0x59ec4816
cmp ecx, dword [eax + edi + 0x14]
jmp 0xd6a95c
je 0xf6213e
cmp eax, 1
jmp 0xddb8e0
call eax
pop esi
bswap edi
cmovb edi, ebx
pop ebx
movzx edi, dx
pop edi
jmp 0xd9e25c
push ecx
push eax
jmp 0xf5f2df
cmp edx, ecx
jb 0xf44964
mov eax, dword [ebp + 8]
movzx cx, al
movsx ecx, bx
xchg ch, cl
lea ecx, [ebp - 0x114]
jmp 0xf088a4
mov esp, ebp
mov bp, 0x3c28
pop ebp
ret
mov dword [ebp + 8], edx
jmp 0xe6a0f2
jne 0xd85c8b
pop esi
sub edi, edi
and edi, ebx
pop ebx
stc
xor eax, eax
movsx edi, di
pop edi
jmp 0xe85b1d
mov esp, ebp
movsx ebp, sp
pop ebp
jmp 0xd4012f
jne 0xd7bcae
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
clc
test eax, eax
jmp 0xdd0c0f
mov esp, ebp
pop ebp
jmp 0xdd7061
jae 0xfb9557
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0xf44956
jb 0xd6eca0
lea eax, [ebp - 0x114]
jmp 0xd4d997
mov cl, byte [esi + 2]
stc
lea esi, [esi + 2]
test si, sp
cmc
jmp 0xf2e5e3
mov edx, dword [edi + 0x3c]
add edx, edi
test esp, 0x2a3673c8
cmp dword [edx], 0x4550
jmp 0xe8abda
je 0xeb5e66
push 0
jmp 0xe65c0b
mov esp, ebp
xchg bp, bp
movzx ebp, di
cmovae ebp, edi
pop ebp
ret
push edx
jmp 0xd59479
ret
je 0xd7bcae
mov eax, 0x5a4d
cmp ecx, esi
cmp word [edi], ax
jmp 0xd7bca8
mov esp, ebp
pop ebp
jmp 0xf7ac2f
push ecx
jmp 0xd87fa3
mov dword [ebp + 8], edx
jmp 0xd08325
je 0xd7bcae
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jmp 0xf04b96
inc eax
jmp 0xe85960
xor edx, edx
cmp edi, 0x1fd273c3
stc
test cl, cl
je 0xd1ede6
mov bl, cl
test cx, dx
sub bl, 0x30
jmp 0xd76b92
call fcn.00d850e4
add esp, 0xc
movzx bx, al
pop esi
setne bh
cmovns edi, ebp
movzx ebx, bp
pop ebx
pop edi
mov esp, ebp
xchg bp, bp
mov bp, 0x7d8d
pop ebp
ret
jne 0xf67103
cmp byte [ebp + 0x10], 0
jmp 0xd6ec72
je 0xd85c4f
test eax, eax
jmp 0xe5cd50
jbe 0xe6a0fa
lea ebx, [ebp - 0x114]
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0xf88c3a
call eax
pop esi
pop ebx
movsx edi, si
bswap di
movzx edi, si
pop edi
jmp 0xf52bdf
mov ecx, dword [ebp + 0xc]
xchg esi, eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
mov ah, 0x18
bsf ax, di
mov eax, dword [ebp + 0x10]
test ebx, edx
stc
jmp 0xf7c09e
mov esp, ebp
movsx ebp, bx
pop ebp
jmp 0xf78441
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
je 0xd85c64
mov edx, dword [eax + edi + 0x20]
dec ebx
cmp ebp, 0x3a1c395a
lea edx, [edx + edi]
test ecx, 0x1dbe1c56
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
test ebx, ebx
jmp 0xf8b868
jb 0xfa36ac
mov edx, dword [ebp - 0x10]
add edx, eax
cmp ecx, edx
jae 0xfa36ac
lea eax, [ecx + edi]
mov cl, byte [eax]
mov esi, eax
test cl, cl
jmp 0xd75e1e
call fcn.00d850e4
add esp, 0xc
cmovno si, cx
movsx edi, ax
pop esi
movzx bx, al
pop ebx
not di
xchg di, di
pop edi
jmp 0xe6e6d3
mov ecx, dword [ebp - 4]
not edx
mov edx, dword [ecx + edi + 0x24]
not ch
lahf
movsx eax, bp
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
lea edx, [ebx + 1]
jmp 0xfb4086
mov ecx, esi
test ebp, edx
sub ecx, eax
cmp ecx, 0x104
jmp 0xea5909
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0xecb24e
call eax
test eax, eax
jne 0xd56d7d
lea edx, [ebp - 0x114]
cbw
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
test eax, eax
jmp 0xd56d77
ret
mov eax, dword [ebp + 0xc]
jmp 0xfb0a90
ret
push eax
sar esi, 1
adc ah, 0xde
setns ah
btc eax, 0x58
mov eax, dword [edx + esi*4]
add eax, edi
call fcn.00fa130a
lea esp, [esp + 4]
cmp eax, 0xffffffff
jmp 0xf3f8d0
mov dword [ebp - 0x10], edx
jmp 0xd7128c
je 0xe6a0fa
mov byte [ebx + eax], dl
jmp 0xde2bf9
jl 0xd85c64
jmp 0xf51f14
je 0xeaac0a
inc edx
clc
cmp edx, 0x104
jmp 0xeaac04
pop esi
cmovg ax, bp
pop ebx
mov al, 0xe3
movzx eax, ax
lea eax, [ecx + edi]
mov di, 0x48dc
movzx edi, cx
pop edi
jmp 0xf05cf2
mov edi, dword [ebp + 8]
test edi, edi
jmp 0xf1d70b
mov dword [ebp + 8], esi
jmp 0xd85c52
push eax
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xe654fc
mov dword [ebp - 8], ecx
jmp 0xf0eddb
jne 0xd75e2e
pop esi
pop ebx
bsf di, di
xor eax, eax
pop edi
jmp 0xe8f300
inc esi
cmc
clc
test cl, cl
jmp 0xfb9551
je 0xf65eae
mov cl, byte [esi + 1]
jmp 0xfbd981