Function at 0xe2d4c8
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov ecx, esi
sub ecx, eax
jmp 0xe45694
mov esp, ebp
movsx ebp, ax
mov bp, 0x7387
pop ebp
ret
mov ebx, dword [eax + edi + 0x18]
cmp edi, 0x2bf2705f
cmp ax, sp
test ebx, ebx
je 0xdf4698
mov edx, dword [eax + edi + 0x20]
jmp 0xc6d91b
inc edx
inc eax
cmc
cmp eax, 0x58d0579d
test ax, 0x15da
mov dword [ebp + 8], edx
cmp edx, ecx
jb 0xd3b90d
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
jmp 0xe1f9eb
push eax
call fcn.00e2d4c8
add esp, 0xc
movzx edi, si
pop esi
pop ebx
cmovle di, sp
pop edi
jmp 0xd68ca9
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
or ax, 0x12f4
not esi
mov eax, dword [ebp + 8]
sbb si, ax
lea esi, [ebx + eax]
movzx eax, di
mov eax, dword [ebp + 0x10]
stc
push eax
cmova eax, ebx
xor al, 0x7a
inc ax
sar esi, 1
add al, 0x82
btr ax, dx
mov eax, dword [edx + esi*4]
cmc
jmp 0xce6b28
ret
push ecx
jmp 0xd79e1b
jae 0xd417b4
mov dword [ebp + 8], 0
cmc
test ebp, 0x487e1cb1
test ecx, ecx
jmp 0xd3b8fc
pop esi
movzx ebx, si
mov ebx, 0xd7c0e79
cbw
pop ebx
lea eax, [ecx + edi]
not di
movsx edi, ax
pop edi
jmp 0xcf0b8f
cmp cl, 0x2e
jmp 0xcf8d08
je 0xc891f8
xor eax, eax
pop edi
mov esp, ebp
pop ebp
jmp 0xd72beb
dec ebx
lea edx, [edx + edi]
mov dword [ebp + 8], 0
stc
mov dword [ebp - 0xc], edx
test ebx, ebx
jl 0xdf4698
jmp 0xc0def6
ret
mov edx, dword [edi + 0x3c]
jmp 0xd99efd
call fcn.00de4557
add esp, 4
cmp eax, 0xffffffff
jmp 0xd4fa80
je 0xd417b4
mov edi, edi
stc
clc
jmp 0xc6879b
mov dword [ebp + 8], edx
jmp 0xd5e8ea
pop edi
jmp 0xd8c0ef
mov ecx, dword [ebp - 4]
lahf
cwd
mov edx, dword [ecx + edi + 0x24]
jmp 0xcd0397
jne 0xe442b3
lea edx, [ebp - 0x114]
cbw
push edx
mov ax, dx
cmovo eax, ecx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xd9a27f
lea eax, [edx + esi*2]
jmp 0xed57cc
je 0xc69453
mov ecx, dword [ebp + 0xc]
clc
stc
test ecx, ecx
jmp 0xdf36ed
mov eax, dword [ebp + 0xc]
jmp 0xd64b4a
jmp 0xda94a2
add eax, edi
jmp 0xc89372
ret
mov esp, ebp
not bp
movsx ebp, di
movzx ebp, dx
pop ebp
jmp 0xd7e689
je 0x8c6aeb
mov cl, byte [esi + 1]
jmp 0xd38574
push eax
movzx ax, bl
push edi
lahf
xchg ah, al
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xe1ec4a
mov esp, ebp
pop ebp
ret
jae 0xd417b4
mov edx, dword [eax + edi + 0x1c]
cmp cx, dx
test ebp, esp
lea ecx, [edx + ecx*4]
test di, bp
mov ecx, dword [ecx + edi]
jmp 0xd76442
mov dword [ebp - 8], ecx
jmp 0xcba02b
cmp dword [edx], 0x4550
jmp 0xde2502
jae 0xc47182
lea eax, [ecx + edi]
bt si, si
mov cl, byte [eax]
neg si
rcl si, 0xad
mov esi, eax
cmp si, dx
test esp, ebx
test cl, cl
jmp 0xcb5871
inc esi
test cl, cl
jmp 0xd417ae
jbe 0x8cf865
lea ebx, [ebp - 0x114]
sub dl, 0xb9
sub ebx, eax
mov dl, byte [eax]
test dl, dl
jmp 0xe26c51
jne 0xc6879b
pop esi
and ebx, edx
test di, 0x4be6
mov bx, bx
pop ebx
stc
btr di, 0x12
xor eax, eax
movzx edi, ax
mov edi, 0x6aac06b8
not di
pop edi
jmp 0xe1548d
lea ecx, [esi + 1]
je 0xde6ad2
push 0
jmp 0xc353d5
je 0xda9498
test eax, eax
je 0xcc97df
cmp eax, 1
jmp 0xec3ea6
mov dword [ebp + 8], esi
jmp 0xce614c
jmp 0xda94a2
add esi, 2
xor edx, edx
cmp di, 0x24da
test cl, cl
je 0xdb6e61
mov bl, cl
cmc
stc
sub bl, 0x30
jmp 0xdb6e3b
push eax
sete ah
xchg al, al
push edi
cmova eax, esi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xe3d2b7
mov esp, ebp
bswap bp
pop ebp
jmp 0xc78721
ret
test ecx, ecx
jmp 0xe3bf07
push eax
call fcn.00e2d4c8
add esp, 0xc
not bx
pop esi
pop ebx
movzx edi, dx
pop edi
jmp 0xd7c452
mov esp, ebp
cmovo ebp, ecx
pop ebp
jmp 0xc0e94f
ret
mov esp, ebp
bswap ebp
movsx ebp, dx
pop ebp
ret
lea edx, [edx + edi]
jmp 0xd37ee4
call eax
test eax, eax
jmp 0xe442ad
je 0xec41db
inc edx
cmc
jmp 0xe4478e
lea ebx, [esi - 1]
clc
cmp ecx, 0x628a2760
cmp dword [ebp + 8], ebx
jmp 0xdf4688
inc esi
clc
cmc
cmp bl, 9
ja 0xdb6e61
movsx ecx, cl
test dx, dx
lea edx, [edx + edx*4]
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
stc
test edx, esp
test cl, cl
jne 0xd5eadb
push 0
push edx
jmp 0x8f2eea
cmp byte [esi + 1], 0x23
jmp 0xd4b377
ja 0x8cd0cb
sub ecx, dword [eax + edi + 0x10]
cmc
test ch, 0x8d
test edi, edi
cmp ecx, dword [eax + edi + 0x14]
jmp 0xd344a2
jne 0xc69453
mov eax, dword [edx + 0x78]
mov dword [ebp - 4], eax
clc
test eax, eax
je 0xc69453
mov edx, dword [edx + 0x7c]
push ebx
test ch, 0x9f
push esi
test esp, edi
test ah, 0x49
or esi, 0xffffffff
stc
mov dword [ebp - 0x10], edx
clc
mov dword [ebp - 8], esi
cmp ecx, 0xffff
jmp 0xdc6f34
mov cl, byte [esi + 2]
jmp 0xd5eac9
je 0xc69453
mov eax, 0x5a4d
test di, 0x2208
cmp word [edi], ax
jmp 0xc6944d
jle 0xc0deea
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
test cx, sp
cmc
cmp esi, dword [eax + edi + 0x14]
jae 0xd417b4
mov ecx, dword [eax + edi + 0x1c]
dec dh
lea edx, [ecx + esi*4]
sbb ch, cl
mov ecx, dword [edx + edi]
test ecx, ecx
je 0xd417b4
cmp ecx, eax
jmp 0xe1edf8
je 0xcd876d
mov ebx, dword [ebp + 0xc]
inc esi
lea eax, [ebp - 0x114]
xor si, 0x6557
sub edx, edx
not cl
rol si, 0x76
sub ebx, eax
mov edi, edi
mov eax, 0x70a756da
ror cl, cl
mov cl, dl
rol eax, cl
btr esi, eax
rol esi, 0x81
lea esi, [ebp + edx - 0x114]
test edi, edx
stc
cmp sp, 0x16c1
add al, dl
xor al, byte [ebx + esi]
mov byte [esi], al
jmp 0xda3546
mov esp, ebp
pop ebp
jmp 0xce9c4b
call eax
pop esi
movzx ebx, dx
movsx bx, cl
pop ebx
cmovnp edi, eax
jmp 0xcbc127
jb 0xc47182
mov edx, dword [ebp - 0x10]
clc
cmp ax, sp
lea edx, [edx + eax]
cmp ecx, edx
jmp 0xd384e2
push ecx
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
test eax, eax
jmp 0xccda4a
je 0x8cf865
mov byte [ebx + eax], dl
inc dx
movzx edx, si
jmp 0xec877d
push ebp
mov ebp, esp
mov ebp, esp
lea esp, [esp - 0x114]
clc
push edi
test sp, 0x5dbb
movzx edi, di
mov edi, dword [ebp + 8]
cmp dl, 0x5f
test edi, ebp
cmp ebx, esi
test edi, edi
jmp 0xcd4c72
jne 0xdf46b8
pop esi
pop ebx
mov di, cx
sar edi, 0xb4
or edi, 0x244a7347
xor eax, eax
pop edi
jmp 0xd0eab7
call eax
pop esi
pop ebx
movzx edi, cx
pop edi
jmp 0x8c8cfb
je 0xd417b4
cmp eax, edi
jne 0xdc2a00
cmp byte [ebp + 0x10], 0
jmp 0xe08216
cmp edx, 0x104
jmp 0xec41d5
cmp ecx, 0x104
jmp 0xc3c6ce
jne 0xda94a2
inc esi
jmp 0xd5009e
jb 0xe08237
lea eax, [ebp - 0x114]
jmp 0xd0d9f5
mov edx, dword [ebp + 8]
jmp 0x8cf84e
movzx ecx, word [eax + edi]
mov dl, 0x75
lea edx, [ebx + 1]
jmp 0xd34c9b