Function at 0x295b1e7
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
ja 0x2a76926
movsx ecx, cl
cmp dh, ah
jmp 0x3974393
je 0x29f21e4
mov edx, dword [edx + 0x7c]
push ebx
cmp ax, bp
push esi
clc
test sp, ax
or esi, 0xffffffff
cmp bh, al
mov dword [ebp - 0x10], edx
stc
mov dword [ebp - 8], esi
test ebx, ebp
test sp, 0x92a
cmp ecx, 0xffff
jmp 0x2aa4957
push ecx
jmp 0x29948c1
jae 0x2a5c825
mov dword [ebp + 8], 0
test ecx, ecx
jmp 0x2a299ee
push eax
cwde
jmp 0x2a049bb
push ebp
mov ebp, esp
sub esp, 0x114
push edi
shl edi, 0x77
sub edi, 0x2f42455f
mov edi, dword [ebp + 8]
stc
test edi, edi
jmp 0x2a4a36c
je 0x2a5c825
cmp ecx, eax
jmp 0x2a3aea6
call fcn.0295b1e7
add esp, 0xc
pop esi
pop ebx
mov di, 0x58a5
not edi
pop edi
jmp 0x29bd06e
mov dword [ebp - 8], ecx
jmp 0x39f25fc
ret
jne 0x29bf5f2
cmp byte [ebp + 0x10], 0
jmp 0x2a7af6d
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x3989aac
je 0x29b77bf
push 0
jmp 0x2a47752
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
movsx ecx, cx
jmp 0x2a732be
call eax
test eax, eax
jmp 0x2a646cc
mov cl, byte [esi + 2]
add esi, 2
jmp 0x3980048
mov esp, ebp
pop ebp
ret
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x29ac944
cmp edx, 0x104
jmp 0x2a1ffcb
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
cmc
stc
mov eax, dword [ebp + 0x10]
push eax
test ecx, 0x46c15a84
bt ax, bx
sar esi, 1
dec al
test ah, al
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x2a78572
test eax, eax
jmp 0x293d240
ret
je 0x2a0f960
mov byte [ebx + eax], dl
movsx dx, al
mov edx, dword [ebp + 8]
jmp 0x2a2a3e3
je 0x29ae085
cmp eax, 1
jmp 0x39cc539
mov dword [ebp + 8], esi
jmp 0x39c9312
je 0x2a042aa
sub eax, eax
mov edi, 0x47c86ae1
pop edi
jmp 0x3988b4d
jae 0x2aa31bb
lea eax, [ecx + edi]
mov cl, byte [eax]
add esi, eax
mov esi, eax
clc
cmc
test cl, cl
je 0x2a5c825
mov edi, edi
cmc
test bp, 0x5874
clc
cmp cl, 0x2e
jmp 0x2a6b9bd
mov edx, dword [edi + 0x3c]
stc
add edx, edi
cmp dword [edx], 0x4550
jmp 0x39c0d2b
push edi
cwde
cbw
cmovg eax, esi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x3986dc0
mov esp, ebp
pop ebp
jmp 0x2aa5dfb
inc eax
mov dword [ebp + 8], edx
test ch, 0xbc
cmp edx, ecx
jb 0x2a29a02
mov eax, dword [ebp + 8]
xchg cx, cx
movsx cx, ah
not ecx
lea ecx, [ebp - 0x114]
jmp 0x29403d7
push eax
call fcn.0295b1e7
add esp, 0xc
not edi
xchg di, di
bswap di
pop esi
setb bl
pop ebx
pop edi
jmp 0x398a47d
jb 0x2a7af92
lea eax, [ebp - 0x114]
jmp 0x294e912
mov byte [esi], al
je 0x2a1ffd1
inc edx
cmc
jmp 0x29c6616
jbe 0x2a0f960
lea ebx, [ebp - 0x114]
sbb dl, 0x33
shr dl, 0x3e
sub ebx, eax
mov dl, byte [eax]
cmp ax, ax
clc
test ebp, ebp
test dl, dl
jmp 0x29e8552
inc edx
jmp 0x2a0f951
dec ebx
jmp 0x39bf7b9
jb 0x2aa31bb
mov edx, dword [ebp - 0x10]
clc
cmp bh, cl
lea edx, [edx + eax]
stc
cmp cx, si
clc
cmp ecx, edx
jmp 0x2a00a79
mov eax, dword [ebp + 0xc]
push eax
push edi
cmovo ax, ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
mov bx, dx
pop ebx
jmp 0x39dee7f
push ecx
push eax
jmp 0x297d4e6
je 0x29f21e4
mov ecx, dword [ebp + 0xc]
cmp al, cl
jmp 0x399adf4
mov ecx, esi
sub ecx, eax
cmc
cmp ecx, 0x104
jmp 0x2944dd5
jle 0x29c76f3
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0x38dc760
mov dword [ebp - 4], eax
jmp 0x29ccc37
jne 0x2a00a9b
pop esi
rcl bx, 0x9f
ror edi, 0x5a
pop ebx
xor eax, eax
pop edi
jmp 0x39ca627
pop edi
jmp 0x39cbe38
test cl, cl
jmp 0x2a76920
je 0x2a5c825
cmp eax, edi
jmp 0x29896ae
jmp 0x39db45c
je 0x2a4e6d1
mov cl, byte [esi + 1]
jmp 0x39888df
lea eax, [edx + esi*2]
cdq
not edx
movzx ecx, word [eax + edi]
xchg dh, dl
movsx edx, bx
lea edx, [ebx + 1]
jmp 0x29823d9
jne 0x2a8a6e1
push 0
push edx
jmp 0x2a1d92a
call fcn.029c9df7
lea esp, [esp + 4]
cmp eax, 0xffffffff
je 0x39db452
test eax, eax
jmp 0x29e8a39
je 0x2a45c72
mov ebx, dword [ebp + 0xc]
cbw
bt eax, ebx
lea eax, [ebp - 0x114]
bt si, di
adc cl, 0xbc
sub edx, edx
sub ebx, eax
mov si, 0x5318
mov edi, edi
mov eax, 0x2afa01f3
rcl cl, 0x7c
bt si, 0x5e
mov cl, dl
clc
btr esi, 0x42
rol eax, cl
bts esi, eax
lea esi, [ebp + edx - 0x114]
clc
stc
add al, dl
test eax, esp
xor al, byte [ebx + esi]
jmp 0x2a20ac7
je 0x2a76926
mov bl, cl
sub bl, 0x30
jmp 0x39de1b1
je 0x2a4f00f
mov edx, dword [eax + edi + 0x20]
jmp 0x2a3734c
mov ebx, dword [eax + edi + 0x18]
stc
cmp di, ax
test ebx, ebx
jmp 0x2a9bdb6
pop esi
pop ebx
lea eax, [ecx + edi]
xchg edi, edi
jmp 0x3980224
ja 0x2a9dbf5
sub ecx, dword [eax + edi + 0x10]
test si, 0x4ec9
cmp ecx, dword [eax + edi + 0x14]
jae 0x2a5c825
mov edx, dword [eax + edi + 0x1c]
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
stc
test ah, al
test ecx, ecx
jne 0x2960d3a
pop esi
cmc
pop ebx
test eax, esp
sub eax, eax
jmp 0x2a62481
ret
ret
jae 0x2a5c825
mov ecx, dword [eax + edi + 0x1c]
stc
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
test ecx, ecx
jmp 0x2960d34
lea edx, [edx + edx*4]
test esi, ebp
lea edx, [ecx + edx*2 - 0x30]
xchg cl, cl
rcl cl, cl
mov cl, byte [esi]
stc
jmp 0x2a62f77
xor edx, edx
test cl, cl
jmp 0x2a8a6db
pop edi
jmp 0x39bfdf1
call eax
pop esi
not bh
pop ebx
mov edi, 0x104e5e63
movsx edi, dx
pop edi
jmp 0x2a074e9
inc esi
cmc
cmp sp, 0x3aa
test cl, cl
jmp 0x2a5c81f
mov esp, ebp
cmovge bp, di
pop ebp
jmp 0x3a011a0
call eax
test eax, eax
jmp 0x39e3b8c
mov esp, ebp
pop ebp
jmp 0x291b348
test ecx, ecx
je 0x29f21e4
mov eax, 0x5a4d
stc
cmp word [edi], ax
jmp 0x29f21de
add edx, edi
test sp, sp
cmc
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
cmp ebx, esp
test ebx, ebx
jl 0x2a4f00f
jmp 0x29c76f9
mov esp, ebp
pop ebp
jmp 0x29ddafb
jne 0x29f21e4
mov eax, dword [edx + 0x78]
jmp 0x2a5a02f
jmp 0x39db45c
mov esp, ebp
pop ebp
jmp 0x2986543
mov esp, ebp
mov bp, ax
pop ebp
ret
jne 0x39db45c
inc esi
jmp 0x29ef9e0
lea ebx, [esi - 1]
cmp esp, 0x61e94595
clc
cmp dword [ebp + 8], ebx
jmp 0x2a4f003
inc esi
cmp esi, ebx
cmp bl, 9
jmp 0x29298a1
pop edi
mov esp, ebp
pop ebp
jmp 0x2aa680d
jne 0x2a646d2
lea edx, [ebp - 0x114]
setl ah
push edx
bswap ax
cbw
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x29b4582
mov dword [ebp + 8], edx
jmp 0x2a6b94c
ret