Function at 0x29aaa950
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x78
push ebx
push ebp
mov ebp, dword [esp + 0x84]
push esi
mov esi, dword [sym.imp.MSVCRT.dll_malloc]
xor ebx, ebx
push edi
push 8
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x20], 0x10000
call esi
mov edi, eax
push 0x14
mov dword [esp + 0x28], edi
call esi
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 8], ebx
mov dword [eax + 4], ebx
mov dword [eax], ebx
mov dword [edi + 4], eax
mov dword [eax + 0x10], 0x29aae0b0
mov al, byte [esp + 0xb0]
add esp, 8
test al, 1
mov dword [edi], 0x74727565
je 0x29aaaad7
mov al, 0x65
mov byte [esp + 0x73], al
mov byte [esp + 0x7b], al
mov byte [esp + 0x85], al
mov eax, 6
mov cl, 0x75
mov word [esp + 0x52], ax
mov word [esp + 0x62], ax
lea eax, [esp + 0x6c]
mov dl, 0x54
mov byte [esp + 0x71], cl
mov byte [esp + 0x7f], cl
mov ecx, 1
mov dword [esp + 0x68], eax
push ebx
xor eax, eax
mov byte [esp + 0x70], bl
mov byte [esp + 0x71], dl
mov byte [esp + 0x72], bl
mov byte [esp + 0x73], 0x72
mov byte [esp + 0x74], bl
mov byte [esp + 0x76], bl
mov byte [esp + 0x78], bl
mov byte [esp + 0x79], dl
mov byte [esp + 0x7a], bl
mov byte [esp + 0x7b], 0x79
mov byte [esp + 0x7c], bl
mov byte [esp + 0x7d], 0x70
mov byte [esp + 0x7e], bl
mov byte [esp + 0x80], bl
mov byte [esp + 0x81], 0x53
mov byte [esp + 0x82], bl
mov byte [esp + 0x84], bl
mov byte [esp + 0x85], 0x62
mov byte [esp + 0x86], bl
mov byte [esp + 0x87], 0x73
mov byte [esp + 0x88], bl
mov byte [esp + 0x8a], bl
mov byte [esp + 0x8b], 0x74
mov word [esp + 0x50], cx
mov word [esp + 0x52], bx
mov word [esp + 0x54], bx
mov word [esp + 0x58], 0xe
mov dword [esp + 0x5c], str.TrueTypeSubset
mov word [esp + 0x60], 3
mov word [esp + 0x62], cx
mov word [esp + 0x64], 0x409
mov word [esp + 0x68], 0x1c
call fcn.29aae000
lea ecx, [esp + 0x50]
mov edi, eax
push ecx
mov dword [esp + 0x18], edi
call fcn.29aae4f0
lea edx, [esp + 0x64]
push edx
mov eax, edi
call fcn.29aae4f0
add esp, 0xc
jmp 0x29aaab1f
mov eax, dword [esp + 0xa0]
cmp eax, ebx
jne 0x29aaab0b
lea eax, [esp + 0x28]
push eax
push ebp
call fcn.29aab850
mov ebx, dword [esp + 0x30]
push ebx
mov edi, eax
call fcn.29aae000
mov dword [esp + 0x1c], eax
add esp, 0xc
mov eax, edi
call fcn.29aab9e0
xor ebx, ebx
jmp 0x29aaab1f
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.29aae000
add esp, 4
mov dword [esp + 0x10], eax
mov edx, dword [ebp + 0x4c]
mov ecx, dword [edx]
mov eax, dword [ebp + 0x48]
mov eax, dword [eax]
push ecx
call fcn.29aadf10
mov ecx, dword [ebp + 0x48]
mov dword [esp + 0x48], eax
mov eax, dword [ecx + 0x14]
add esp, 4
cmp eax, ebx
je 0x29aaab7a
xor edx, edx
mov dh, byte [eax + 0x12]
movzx bx, byte [eax + 0x15]
mov bh, byte [eax + 0x14]
xor ecx, ecx
mov ch, byte [eax + 8]
mov dl, byte [eax + 0x13]
mov cl, byte [eax + 9]
mov edi, edx
movzx dx, byte [eax + 7]
mov dh, byte [eax + 6]
push edi
push ecx
mov dword [esp + 0x30], edx
mov ecx, dword [esp + 0x30]
xor edx, edx
mov dh, byte [eax + 4]
push ecx
mov dl, byte [eax + 5]
mov eax, edx
push eax
jmp 0x29aaab80
push ebx
push ebx
push ebx
push ebx
xor ebx, ebx
call fcn.29aade60
mov edx, dword [ebp + 0x48]
mov dword [esp + 0x34], eax
mov eax, dword [edx + 8]
xor edx, edx
mov dh, byte [eax + 0x2e]
xor ebx, ebx
mov bh, byte [eax + 4]
xor ecx, ecx
mov ch, byte [eax + 0x30]
add esp, 0x10
add eax, 0x14
mov dl, byte [eax + 0x1b]
mov bl, byte [eax - 0xf]
mov cl, byte [eax + 0x1d]
mov edi, edx
movzx dx, byte [eax + 0x19]
mov dh, byte [eax + 0x18]
push ecx
shl ebx, 8
push edi
mov dword [esp + 0x30], edx
xor edx, edx
mov dh, byte [eax - 2]
mov ecx, dword [esp + 0x30]
push ecx
push eax
mov dl, byte [eax - 1]
mov dword [esp + 0x28], edx
movzx dx, byte [eax - 3]
mov dh, byte [eax - 4]
mov dword [esp + 0x24], edx
movzx edx, byte [eax - 0xe]
or ebx, edx
movzx edx, byte [eax - 0xd]
mov eax, dword [esp + 0x24]
shl ebx, 8
or ebx, edx
mov edx, dword [esp + 0x28]
push edx
push eax
call fcn.29aadd90
push 0xc
mov dword [esp + 0x64], eax
call esi
mov ebx, eax
push 0x14
mov dword [esp + 0x48], ebx
call esi
xor edi, edi
mov dword [eax + 0xc], edi
mov dword [eax + 8], edi
mov dword [eax + 4], edi
mov dword [eax], edi
mov dword [eax + 0x10], 0x29aad1b0
mov dword [ebx + 8], eax
mov dword [ebx + 4], edi
mov dword [ebx], 0x676c7966
mov ebx, dword [esp + 0xbc]
push 4
push ebx
call dword [sym.imp.MSVCRT.dll_calloc]
add esp, 0x28
test ebx, ebx
mov dword [esp + 0x18], eax
jle 0x29aaac7f
lea esp, [esp]
mov ecx, dword [esp + 0x94]
movzx edx, word [ecx + edi*2]
push ebp
push edx
push ebp
call fcn.29aab6b0
mov ecx, dword [esp + 0x34]
add esp, 8
push ecx
call fcn.29aae330
mov edx, dword [esp + 0x20]
add esp, 8
mov dword [edx + edi*4], eax
inc edi
cmp edi, ebx
jl 0x29aaac50
push 0xc
call esi
push 0xc
mov dword [esp + 0x1c], eax
call esi
mov edi, eax
push 0x14
push 0xa
mov dword [esp + 0x4c], edi
mov dword [edi], 0
mov dword [edi + 4], 0xa
call dword [sym.imp.MSVCRT.dll_calloc]
mov edx, eax
mov dword [edi + 8], edx
xor eax, eax
mov ecx, 0x32
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xbc]
xor edi, edi
add esp, 0x10
cmp ecx, edi
mov dword [eax + 4], edi
mov dword [eax], 0x636d6170
je 0x29aaace4
mov dword [esp + 0x1c], 0x30001
cmp ebx, edi
jle 0x29aaad16
jmp 0x29aaacf0
mov eax, dword [esp + 0x14]
mov edi, edi
mov edx, dword [esp + 0x18]
mov ecx, dword [edx + edi*4]
mov edx, dword [esp + 0x98]
push ecx
movzx ecx, word [edx + edi*2]
mov edx, dword [esp + 0x20]
push ecx
push edx
call fcn.29aae150
add esp, 0xc
inc edi
cmp edi, ebx
jl 0x29aaacea
mov eax, dword [ebp + 0x48]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x29aaad39
mov ecx, dword [ebp + 0x4c]
mov ecx, dword [ecx + 0x34]
push eax
push ecx
push 0x63767420
call fcn.29aadd00
add esp, 0xc
mov dword [esp + 0x2c], eax
mov edx, dword [ebp + 0x48]
mov eax, dword [edx + 0x38]
test eax, eax
je 0x29aaad5c
mov ecx, dword [ebp + 0x4c]
mov ecx, dword [ecx + 0x38]
push eax
push ecx
push 0x70726570
call fcn.29aadd00
add esp, 0xc
mov dword [esp + 0x30], eax
mov edx, dword [ebp + 0x48]
mov eax, dword [edx + 0x3c]
test eax, eax
je 0x29aaad7f
mov ecx, dword [ebp + 0x4c]
mov ecx, dword [ecx + 0x3c]
push eax
push ecx
push 0x6670676d
call fcn.29aadd00
add esp, 0xc
mov dword [esp + 0x34], eax
mov edx, dword [ebp + 0x48]
mov eax, dword [edx + 0x2c]
test eax, eax
push 0xc
je 0x29aaae03
movzx cx, byte [eax + 0xb]
mov ch, byte [eax + 0xa]
xor edx, edx
mov dh, byte [eax + 8]
xor ebx, ebx
mov bh, byte [eax + 0xc]
mov dword [esp + 0x44], ecx
xor ecx, ecx
mov ch, byte [eax + 4]
mov dl, byte [eax + 9]
mov bl, byte [eax + 0xd]
mov cl, byte [eax + 5]
mov dword [esp + 0x20], edx
movzx edx, byte [eax + 6]
movzx eax, byte [eax + 7]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
mov dword [esp + 0x40], ecx
call esi
push 0x14
mov edi, eax
call esi
mov ecx, dword [esp + 0x44]
mov dx, word [esp + 0x24]
mov dword [eax + 4], ecx
mov cx, word [esp + 0x48]
mov word [eax + 8], dx
mov word [eax + 0xa], cx
movzx edx, bx
add esp, 8
xor ecx, ecx
mov dword [eax], 0x30000
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ecx
mov dword [edi + 4], ecx
jmp 0x29aaae2a
call esi
push 0x14
mov edi, eax
call esi
add esp, 8
xor ecx, ecx
mov dword [eax], 0x30000
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov word [eax + 0xa], cx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
test byte [esp + 0xa8], 2
mov dword [edi], 0x706f7374
mov dword [esp + 0x1c], edi
je 0x29aaae66
mov eax, dword [ebp + 0x48]
mov eax, dword [eax + 0x28]
cmp eax, ecx
je 0x29aaae66
mov ecx, dword [ebp + 0x4c]
mov ecx, dword [ecx + 0x28]
push eax
push ecx
push 0x4f532f32
call fcn.29aadd00
add esp, 0xc
mov dword [esp + 0x38], eax
xor ecx, ecx
mov ebx, dword [esp + 0x10]
cmp ebx, ecx
mov ebp, dword [esp + 0x20]
je 0x29aaaea2
mov edi, dword [ebp + 4]
push 0xc
call esi
mov dword [eax + 8], ebx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aaae8a
mov edx, ecx
jmp 0x29aaae91
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov ebx, dword [esp + 0x44]
test ebx, ebx
je 0x29aaaeda
mov edi, dword [ebp + 4]
push 0xc
call esi
mov dword [eax + 8], ebx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aaaec2
mov edx, ecx
jmp 0x29aaaec9
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov ebx, dword [esp + 0x24]
test ebx, ebx
je 0x29aaaf12
mov edi, dword [ebp + 4]
push 0xc
call esi
mov dword [eax + 8], ebx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aaaefa
mov edx, ecx
jmp 0x29aaaf01
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov ebx, dword [esp + 0x48]
test ebx, ebx
je 0x29aaaf4a
mov edi, dword [ebp + 4]
push 0xc
call esi
mov dword [eax + 8], ebx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aaaf32
mov edx, ecx
jmp 0x29aaaf39
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov edi, dword [ebp + 4]
push 0xc
call esi
mov edx, dword [esp + 0x2c]
mov dword [eax + 8], edx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aaaf66
mov edx, ecx
jmp 0x29aaaf6d
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov edi, dword [ebp + 4]
push 0xc
call esi
mov ecx, dword [esp + 0x18]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aaaf9a
mov edx, ecx
jmp 0x29aaafa1
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov ebx, dword [esp + 0x2c]
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
mov ecx, dword [edi + 0xc]
inc ecx
test ebx, ebx
mov dword [edi + 0xc], ecx
je 0x29aaafee
mov edi, dword [ebp + 4]
push 0xc
call esi
mov dword [eax + 8], ebx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aaafd6
mov edx, ecx
jmp 0x29aaafdd
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov ebx, dword [esp + 0x30]
test ebx, ebx
je 0x29aab026
mov edi, dword [ebp + 4]
push 0xc
call esi
mov dword [eax + 8], ebx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aab00e
mov edx, ecx
jmp 0x29aab015
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov ebx, dword [esp + 0x34]
test ebx, ebx
je 0x29aab05e
mov edi, dword [ebp + 4]
push 0xc
call esi
mov dword [eax + 8], ebx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aab046
mov edx, ecx
jmp 0x29aab04d
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov ebx, dword [esp + 0x1c]
test ebx, ebx
je 0x29aab096
mov edi, dword [ebp + 4]
push 0xc
call esi
mov dword [eax + 8], ebx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aab07e
mov edx, ecx
jmp 0x29aab085
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov ebx, dword [esp + 0x38]
test ebx, ebx
je 0x29aab0ce
mov edi, dword [ebp + 4]
push 0xc
call esi
mov dword [eax + 8], ebx
mov ecx, dword [edi + 4]
add esp, 4
test ecx, ecx
je 0x29aab0b6
mov edx, ecx
jmp 0x29aab0bd
mov edx, edi
xor ecx, ecx
mov dword [edi + 8], eax
mov dword [edx], eax
mov dword [edi + 4], eax
mov dword [eax + 4], ecx
mov dword [eax], 0
inc dword [edi + 0xc]
mov edx, dword [esp + 0xac]
mov eax, dword [esp + 0x90]
push edx
push ebp
call fcn.29aad120
mov edi, dword [ebp + 4]
mov ebx, eax
call fcn.29aaccb0
mov esi, dword [sym.imp.MSVCRT.dll_free]
push edi
call esi
push ebp
call esi
mov eax, dword [esp + 0x28]
push eax
call esi
add esp, 0x14
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
add esp, 0x78
ret