Function at 0x2a64ea8
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
ret
inc esi
stc
cmp bl, 9
jmp 0x2a64073
mov esp, ebp
cmove bp, sp
pop ebp
jmp 0x1aec98f
test cl, cl
jne 0x2b11f17
push 0
jmp 0x1b14d2b
pop edi
jmp 0x1df7c8f
push eax
test dx, ax
and ax, bp
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x2aa3563
push edx
jmp 0x2a27897
je 0x2a88faf
mov ebx, dword [ebp + 0xc]
movzx eax, di
lea eax, [ebp - 0x114]
sub edx, edx
sub ebx, eax
btr eax, esp
rol si, 0x78
mov edi, edi
mov eax, 0x14f64a70
mov cl, dl
xchg esi, esi
rol eax, cl
bt si, 0x79
lea esi, [ebp + edx - 0x114]
add al, dl
xor al, byte [ebx + esi]
jmp 0x2aa9d0e
call eax
test eax, eax
jne 0x1e36252
lea edx, [ebp - 0x114]
jmp 0x1e455fe
jb 0x1e85eea
mov eax, dword [ebp + 8]
setbe ch
movzx cx, bh
lea ecx, [ebp - 0x114]
jmp 0x29aa7f8
ret
mov cl, byte [esi + 2]
test dx, 0x7b7f
cmc
jmp 0x2aaf2af
je 0x1e11c0e
cmp ecx, eax
jb 0x1b45a53
mov edx, dword [ebp - 0x10]
cmp bp, 0x3983
add edx, eax
cmp ecx, edx
jae 0x1b45a53
lea eax, [ecx + edi]
mov cl, byte [eax]
mov esi, eax
test ebx, ecx
test cl, cl
je 0x1e11c0e
mov edi, edi
clc
cmp esp, 0xfe82b15
test edi, esp
cmp cl, 0x2e
jmp 0x1e5b760
pop esi
not al
mov ah, bh
xchg al, bl
pop ebx
lahf
jmp 0x2a5d170
mov dword [ebp + 8], esi
jmp 0x1e5f517
ret
ret
mov esp, ebp
pop ebp
jmp 0x2a560df
mov edx, dword [edi + 0x3c]
lea edx, [edx + edi]
cmp dword [edx], 0x4550
jmp 0x1e78542
jne 0x1b3cb29
pop esi
rcr bx, cl
jmp 0x2a9b8eb
inc esi
test cl, cl
jne 0x1b3cb5f
pop esi
test bx, si
movsx edi, bx
pop ebx
stc
test di, 0x32cf
xor eax, eax
bswap di
pop edi
jmp 0x1afb584
jle 0x2a23a23
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
clc
cmp esi, dword [eax + edi + 0x14]
jae 0x1e11c0e
mov ecx, dword [eax + edi + 0x1c]
inc dh
lea edx, [ecx + esi*4]
btr cx, cx
xchg ecx, ecx
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0x1b3cb23
push eax
push edi
jmp 0x2a1ea4a
call eax
pop esi
cmovle di, ax
xchg bx, di
pop ebx
pop edi
jmp 0x2a2a4f6
je 0x1e11c0e
cmp eax, edi
jmp 0x1e944fe
mov dword [ebp + 8], edx
jmp 0x1e70fac
mov esp, ebp
bswap bp
pop ebp
jmp 0x1aea23f
push edx
lahf
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x1e83539
cmp word [edi], ax
jmp 0x2a859f5
je 0x2aa0113
mov cl, byte [esi + 1]
jmp 0x1e11c05
lea ebx, [esi - 1]
cmp ebx, 0x20f30563
cmp dword [ebp + 8], ebx
jmp 0x1e1f0f8
push eax
lahf
not eax
push edi
cbw
mov al, 0x6f
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x299b950
mov ebx, dword [eax + edi + 0x18]
cmp sp, sp
test ebx, ebx
jmp 0x2a3fc60
jmp 0x1e5f517
mov dword [ebp - 8], ecx
jmp 0x1e40045
pop edi
jmp 0x1e40b4f
jne 0x2a859fb
mov eax, dword [edx + 0x78]
cmp edx, eax
mov dword [ebp - 4], eax
clc
cmp bp, 0x69df
test eax, eax
jmp 0x2a78f3c
je 0x2a859fb
mov eax, 0x5a4d
test edx, 0x47496038
jmp 0x1e50e8e
call eax
test eax, eax
jmp 0x1e3624c
jae 0x1e11c0e
mov dword [ebp + 8], 0
test ecx, ecx
jbe 0x1b265dd
lea ebx, [ebp - 0x114]
adc dl, 0x6f
sal dl, cl
sets dl
sub ebx, eax
dec dl
shr dl, 0xc1
mov dl, byte [eax]
test cx, di
jmp 0x2aa89a4
jne 0x2ace0b0
cmp byte [ebp + 0x10], 0
jmp 0x1b1dbec
ret
call eax
pop esi
movzx edi, sp
pop ebx
pop edi
mov esp, ebp
pop ebp
ret
inc edx
inc eax
test sp, dx
mov dword [ebp + 8], edx
test si, 0x3943
test dx, bp
cmp edx, ecx
jmp 0x1b265d7
push ecx
mov byte [ebp + eax - 0x114], 0
mov ah, 0x4e
setg al
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x1b1f9ab
je 0x1b2e59d
push 0
jmp 0x2a9aeae
jne 0x1e5f517
inc esi
jmp 0x1b46eb5
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1e30eb0
call fcn.02a64ea8
add esp, 0xc
movsx edi, bp
cmovp di, si
mov bx, sp
pop esi
bswap bx
xchg di, bx
pop ebx
jmp 0x1b06493
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
cmc
lea esi, [ebx + eax]
ror al, cl
stc
mov eax, dword [ebp + 0x10]
jmp 0x1b0b3d9
push eax
jmp 0x2a20555
mov esp, ebp
not bp
pop ebp
jmp 0x1df3383
jae 0x1e11c0e
mov edx, dword [eax + edi + 0x1c]
stc
clc
lea ecx, [edx + ecx*4]
test dx, di
clc
mov ecx, dword [ecx + edi]
cmp si, 0x3ebb
test ecx, ecx
jmp 0x1e06816
je 0x2a859fb
mov ecx, dword [ebp + 0xc]
clc
test ecx, ecx
jmp 0x1e7d91c
je 0x1e1f105
mov edx, dword [eax + edi + 0x20]
jmp 0x2a9cb93
mov esp, ebp
movsx ebp, bp
xchg ebp, ebp
pop ebp
jmp 0x298902f
ret
lea eax, [ecx + edi]
pop edi
mov esp, ebp
pop ebp
jmp 0x1b50ca5
ja 0x1b015c1
movsx ecx, cl
stc
cmc
lea edx, [edx + edx*4]
cmp bp, bx
lea edx, [ecx + edx*2 - 0x30]
sar cl, cl
mov cl, byte [esi]
jmp 0x1b015b9
push ebp
mov ebp, esp
lea esp, [esp - 0x114]
push edi
clc
mov edi, dword [ebp + 8]
test cx, sp
test edi, edi
jmp 0x2a3b8a1
je 0x2a859fb
mov edx, dword [edx + 0x7c]
test ah, 0x29
push ebx
push esi
stc
or esi, 0xffffffff
cmp sp, 0x573a
mov dword [ebp - 0x10], edx
test dh, 0xd6
cmp ebx, esi
mov dword [ebp - 8], esi
test bp, si
cmp edi, eax
cmp ecx, 0xffff
jmp 0x2a88f89
je 0x1e049fa
sub eax, eax
jmp 0x1e72459
ja 0x1e6ff4a
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0x2a2bddd
mov eax, dword [ebp + 0xc]
jmp 0x1e30cdd
mov dword [ebp + 8], 0
test ax, bp
cmc
mov dword [ebp - 0xc], edx
stc
test ebx, ebx
jl 0x1e1f105
jmp 0x2a23a29
mov ecx, dword [ebp - 4]
movsx edx, sp
lahf
setge al
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
xchg ecx, edx
movsx cx, ch
mov cl, 0x79
movzx ecx, word [eax + edi]
movzx edx, di
lea edx, [ebx + 1]
jmp 0x1e71b3e
push ecx
push eax
call fcn.02a64ea8
add esp, 0xc
xchg si, di
cmovl bx, sp
pop esi
mov di, 0x3493
not bx
pop ebx
bswap edi
pop edi
jmp 0x2a44265
pop ebx
sal di, 9
xor eax, eax
pop edi
mov esp, ebp
pop ebp
jmp 0x1b27dc7
dec ebx
test esi, edi
add edx, edi
stc
clc
jmp 0x2a9221c
mov ecx, esi
clc
sub ecx, eax
test edx, ebx
stc
cmp ecx, 0x104
jmp 0x1e85ec0
call fcn.01b30a20
add esp, 4
cmc
cmp eax, 0xffffffff
je 0x1e5f50e
test eax, eax
je 0x2a99aba
cmp eax, 1
jmp 0x2a1c0c8
test dl, dl
je 0x1b265dd
mov byte [ebx + eax], dl
cdq
seto dh
inc dl
mov edx, dword [ebp + 8]
jmp 0x29a82fe
mov byte [esi], al
je 0x2aa9d23
inc edx
cmp edx, 0x104
jb 0x1b1dc0b
lea eax, [ebp - 0x114]
jmp 0x1e62781
lea esi, [esi + 2]
cmc
sub edx, edx
test cl, cl
jmp 0x2b11f11
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x2a154f5
je 0x1b015c1
mov bl, cl
cmp edi, esi
sub bl, 0x30
jmp 0x1af7817