Function at 0x28a7314
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0x295d74f
mov eax, dword [eax + ecx + 0x7c]
test sp, di
push ebx
push edi
mov dword [ebp - 0x10], eax
test edx, esi
cmc
cmp esi, ecx
mov dword [ebp - 8], 0xffffffff
cmp edx, 0x640630cc
cmp esi, 0xffff
ja 0x23de480
mov eax, esi
test esp, 0x721578bb
sub eax, dword [edx + ecx + 0x10]
mov dword [ebp - 8], eax
jmp 0x23857a5
inc esi
cmp al, 9
ja 0x29385fe
movsx eax, cl
mov cl, 0xb7
add cl, 0x6c
mov cl, byte [esi]
test ax, bp
clc
cmp edx, ebx
lea edx, [edx + edx*4]
test si, sp
lea edx, [eax + edx*2 - 0x30]
test al, dh
cmc
test cl, cl
jmp 0x29385f8
ret
call eax
mov edi, eax
test edi, edi
jmp 0x1869538
ret
pop edi
bt esi, 0x9c
pop ebx
add eax, ecx
pop esi
mov esp, ebp
pop ebp
jmp 0x1843bdb
ret
mov dword [ebp - 4], edx
test edx, edx
jmp 0x1833334
jne 0x295887f
lea edx, [ebp - 0x114]
mov ah, 0x89
push edx
cmovle eax, esp
movzx eax, ax
movsx eax, bp
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x2341fef
ret
je 0x292ed7e
lea ebx, [ebp - 0x114]
sub ebx, eax
cmp di, 0x17a4
mov dl, byte [eax]
jmp 0x23fd5c9
call eax
mov edi, eax
cmp ebp, edi
cmp si, 0x78af
cmc
test edi, edi
jmp 0x2958879
jne 0x295d74f
mov edx, dword [eax + ecx + 0x78]
test edx, 0x662e3ad3
jmp 0x18640ee
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
lea esi, [edi + ebx]
cmc
cmp edx, 0x47af4882
sar esi, 1
mov eax, dword [eax + esi*4]
cmc
stc
push edx
sbb dx, bp
rcl dx, 0xdc
mov edx, dword [ebp + 0xc]
test edx, esi
add eax, ecx
jmp 0x2398b4d
je 0x242e086
mov eax, dword [edx + ecx + 0x20]
test ebx, 0x60e239d6
lea eax, [eax + ecx]
xor ebx, ebx
dec edi
jmp 0x23e4fc4
test cl, cl
jmp 0x2858a6d
jmp 0x242e086
je 0x285a9e2
push 0
push ecx
jmp 0x288d1e8
call fcn.02343b9c
add esp, 4
stc
test eax, eax
jmp 0x23d081f
push edx
jmp 0x248569c
jb 0x244e512
lea eax, [ebp - 0x114]
push eax
push edx
mov eax, esi
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x23f61bd
inc esi
jmp 0x237c34d
jae 0x2858a73
sub edi, edi
jmp 0x244df7d
jmp 0x295adfd
jns 0x295adec
lea edi, [esi - 1]
jmp 0x23c2a90
mov ecx, esi
test esp, 0x632b2237
sub ecx, eax
cmp ecx, 0x104
jmp 0x23bbeaf
mov edi, dword [edx + ecx + 0x18]
test sp, cx
cmp ecx, ebp
test edi, edi
jmp 0x237a476
jae 0x2858a73
mov esi, dword [edx + ecx + 0x1c]
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
test cl, 0x88
cmp ecx, ebx
test eax, eax
je 0x2858a73
cmp eax, edx
jmp 0x28706ac
mov dword [ebp - 0xc], eax
jmp 0x2958ada
mov eax, dword [ebp + 0xc]
push eax
push edx
mov eax, eax
mov al, 0xe2
not ah
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
movzx bx, cl
pop ebx
not esi
mov esi, 0x25d40d95
movzx esi, bp
pop esi
mov esp, ebp
pop ebp
jmp 0x188183b
call eax
pop edi
movsx ebx, sp
pop ebx
jmp 0x2862396
test dl, dl
je 0x292ed7e
mov byte [ebx + eax], dl
jmp 0x24690c2
mov eax, dword [ebp + 8]
xadd edx, edx
inc dx
mov ecx, dword [ebp - 4]
ror dh, cl
bts edx, ebp
mov edx, dword [ecx + eax + 0x24]
bsf cx, bx
xor ch, 0xfd
btr cx, sp
lea ecx, [edx + esi*2]
add dh, 0x7e
dec edx
movzx edx, word [ecx + eax]
dec ecx
movzx cx, ah
and cl, 0x4c
mov dword [ebp - 8], edx
cdq
btc dx, si
mov ecx, eax
mov edx, dword [ebp - 4]
movzx ax, dh
mov eax, dword [ebp - 8]
cmp eax, dword [edx + ecx + 0x14]
jmp 0x23df915
test ecx, ecx
jmp 0x1895324
je 0x23f0c2b
mov edi, dword [ebp + 0xc]
lea ecx, [ebp - 0x114]
xor eax, eax
sub edi, ecx
setbe cl
mov bx, bx
stc
lea esp, [esp]
mov cl, al
bts esi, ebp
mov ebx, 0x559037c5
rol ebx, cl
and si, dx
rcl ch, 0x8d
lea esi, [ebp + eax - 0x114]
btc cx, 0xa5
lea ecx, [eax + ebx]
test dl, 0x1a
test ebp, eax
xor cl, byte [edi + esi]
mov byte [esi], cl
jmp 0x244f7c1
je 0x23a2b56
inc eax
cmp eax, 0x104
jmp 0x23a2b50
mov esp, ebp
pop ebp
ret
inc edi
jmp 0x2949f4f
mov eax, dword [ecx + 0x3c]
clc
cmp dword [eax + ecx], 0x4550
jmp 0x2361675
ret
push edi
jmp 0x285f888
pop esi
jmp 0x28599b4
je 0x2858a73
cmp cl, 0x2e
jmp 0x2926a0b
cmp word [ecx], ax
jmp 0x295d749
jne 0x2836bf5
pop edi
pop ebx
cmp ebp, esi
xor eax, eax
cmovae esi, ecx
pop esi
jmp 0x297c774
mov esp, ebp
mov bp, 0x159d
not ebp
pop ebp
jmp 0x18617e3
mov cl, byte [esi + 2]
lea esi, [esi + 2]
stc
sub edx, edx
test cl, cl
je 0x29385fe
lea eax, [ecx - 0x30]
jmp 0x1837c0c
jle 0x237155f
jmp 0x242e07f
call fcn.028a7314
add esp, 0xc
pop edi
cmovo ebx, ebp
bswap esi
movsx bx, ch
pop ebx
not esi
pop esi
mov esp, ebp
movzx ebp, sp
mov ebp, 0x3a6b0abf
pop ebp
jmp 0x247a237
pop esi
mov esp, ebp
pop ebp
jmp 0x18545c3
jb 0x185e47f
mov esi, dword [ebp - 0x10]
stc
cmp ebp, edi
add esi, edx
cmp ecx, ecx
cmp eax, esi
jae 0x185e47f
add eax, ecx
mov cl, byte [eax]
mov esi, eax
test bp, cx
test cl, cl
jmp 0x2836bef
je 0x295d74f
mov esi, dword [ebp + 0xc]
stc
test esi, esi
jmp 0x295422c
cmp byte [esi + 1], 0x23
movsx ecx, dx
movzx cx, cl
bswap cx
lea ecx, [esi + 1]
jmp 0x239103b
push edi
call fcn.028a7314
add esp, 0xc
pop edi
cmova ebx, esp
pop ebx
cmovne si, sp
jmp 0x24a3c79
push ebp
mov ebp, esp
mov ecx, dword [ebp + 8]
lea esp, [esp - 0x114]
clc
cmp esp, 0x743f6bda
push esi
test ecx, ecx
jmp 0x2871f32
je 0x23d8d94
mov cl, byte [esi + 1]
jmp 0x23b027c
jb 0x1895337
lea ecx, [ebp - 0x114]
push ecx
mov eax, esp
cwde
mov byte [ebp + edi - 0x114], 0
bswap ax
mov ax, 0xb9a
mov ax, ax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x184743d
jne 0x285a9f3
push 0
jmp 0x23a13d1
inc eax
cmp edi, ecx
jmp 0x292ed78
je 0x295d74f
mov eax, 0x5a4d
clc
jmp 0x284675c
je 0x2858a73
mov edx, dword [ebp + 8]
cmp edi, edx
jne 0x2877bce
cmp byte [ebp + 0x10], 0
jmp 0x244e4f1
js 0x242e086
jmp 0x2371562
jle 0x242e042
lea ebx, [esi + 1]
bsr ecx, edx
ror ch, 0x3c
ror ecx, cl
mov ecx, dword [ebp + 8]
cmp ebx, edi
jmp 0x285b712
je 0x246b426
xor eax, eax
pop esi
jmp 0x2468f13
mov esp, ebp
pop ebp
ret