Function at 0x29ecde2
Capabilities:
Link function at runtime on windows
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret
jae 0x29ccf58
mov dword [ebp + 8], 0
test sp, bx
stc
test ecx, ecx
jbe 0x295192f
lea ebx, [ebp - 0x114]
dec dl
test esp, eax
sub ebx, eax
mov dl, byte [eax]
clc
test dl, dl
je 0x295192f
mov byte [ebx + eax], dl
jmp 0x2a93221
ja 0x2ad0029
movsx ecx, cl
stc
cmp di, di
cmc
lea edx, [edx + edx*4]
cmp bp, 0x2807
cmc
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
test esi, esp
test cl, cl
jmp 0x2ad0023
jne 0x29c5ee8
inc esi
jmp 0x2a1c366
cmp ecx, 0xffff
jmp 0x29e5add
jb 0x18316c4
mov eax, dword [ebp + 8]
not ecx
lea ecx, [ebp - 0x114]
jmp 0x295b2f7
cmp dword [edx], 0x4550
jmp 0x2b2c950
push ecx
jmp 0x298bc2c
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
jmp 0x2996123
ret
call eax
pop esi
movzx ebx, di
pop ebx
mov edi, esp
movzx edi, dx
pop edi
jmp 0x2abf5c8
ret
mov ecx, dword [ebp - 4]
mov edx, esi
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
mov ch, ah
cmovb ecx, edx
cwd
movzx ecx, word [eax + edi]
cmovbe edx, esp
bswap dx
xchg edx, edx
lea edx, [ebx + 1]
jmp 0x295b36f
ret
je 0x29fc676
mov eax, 0x5a4d
cmp word [edi], ax
jmp 0x29fc670
ret
inc eax
mov dword [ebp + 8], edx
test eax, 0x3ee01567
cmp edx, ecx
jmp 0x2951929
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA_2]
jmp 0x2a4ab58
mov esp, ebp
xchg bp, bp
pop ebp
jmp 0x182f3f7
jae 0x29ccf58
mov edx, dword [eax + edi + 0x1c]
test ax, bx
lea ecx, [edx + ecx*4]
test esi, 0x630e246a
cmp bp, 0x29aa
test dh, dh
mov ecx, dword [ecx + edi]
clc
test ecx, ecx
jmp 0x2a872b1
mov dword [ebp - 0xc], edx
cmp sp, cx
clc
test ebx, ebx
jmp 0x2a1b044
jmp 0x29c5ee8
je 0x2a080cd
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
or cl, bl
sub edx, edx
bswap si
cmc
sub ebx, eax
mov eax, esi
lahf
mov edi, edi
cmc
rol esi, 0xb0
mov cl, 0x71
mov eax, 0xac904b5
mov esi, esp
mov cl, dl
cmc
ror esi, 0x39
bt esi, edx
rol eax, cl
lea esi, [ebp + edx - 0x114]
cmc
add al, dl
xor al, byte [ebx + esi]
jmp 0x29f8157
jae 0x29ccf58
mov ecx, dword [eax + edi + 0x1c]
bsf edx, esi
cmc
lea edx, [ecx + esi*4]
bt cx, 0x2f
setae cl
xadd ecx, ecx
mov ecx, dword [edx + edi]
cmp dx, dx
cmp al, 0x39
test ecx, ecx
jmp 0x2a8a612
ret
je 0x2ad0029
mov bl, cl
cmc
sub bl, 0x30
jmp 0x2b329f4
je 0x29fc676
mov edx, dword [edx + 0x7c]
push ebx
cmp sp, 0x3237
jmp 0x2a8b1e0
lea ebx, [esi - 1]
cmp dword [ebp + 8], ebx
jmp 0x2a7eccf
jne 0x29d3c7f
pop esi
pop ebx
sub eax, eax
mov di, 0x4da7
jmp 0x2af1628
je 0x29ccf58
mov edi, edi
cmp cl, 0x2e
jmp 0x2a639b8
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
je 0x2ab57c1
push 0
push ecx
push eax
call fcn.029ecde2
add esp, 0xc
cmovnp ebx, esp
pop esi
bswap ebx
setne bh
pop ebx
pop edi
mov esp, ebp
xchg bp, bp
movsx ebp, bp
pop ebp
jmp 0x2984505
pop esi
pop ebx
lea eax, [ecx + edi]
xchg edi, edi
bswap di
pop edi
jmp 0x2ace772
push eax
mov eax, 0x758f29ff
push edi
movzx eax, si
not al
movsx eax, bx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x296846c
ja 0x2aa0fb1
sub ecx, dword [eax + edi + 0x10]
cmp ecx, dword [eax + edi + 0x14]
jmp 0x298e590
mov ecx, esi
test esp, edx
sub ecx, eax
cmp ecx, 0x104
jmp 0x183169f
je 0x2ad995b
inc edx
cmp edx, 0x104
jmp 0x2ad9955
push ebp
mov ebp, esp
sub esp, 0x114
cmc
push edi
sal edi, 0x6a
mov edi, dword [ebp + 8]
test edi, edi
je 0x29fc676
mov ecx, dword [ebp + 0xc]
test edi, 0x50e70853
test ecx, ecx
jmp 0x297ce8f
mov byte [esi], al
jmp 0x29e84ac
mov edx, dword [edi + 0x3c]
cmp esi, 0x40d77c87
clc
lea edx, [edx + edi]
jmp 0x2952fb6
je 0x2974ed3
cmp eax, 1
jmp 0x18374ea
je 0x29fb469
sub eax, eax
movsx edi, dx
mov di, 0x2049
pop edi
jmp 0x2a00254
mov esp, ebp
mov ebp, esi
pop ebp
jmp 0x29a1467
mov eax, dword [ebp + 0xc]
jmp 0x29e24a5
jl 0x2a7ecdb
jmp 0x2ab9ad9
mov dword [ebp + 8], esi
jmp 0x29c5ee8
push eax
jmp 0x2a26d2e
call fcn.029ecde2
add esp, 0xc
not di
pop esi
movsx edi, bp
setae bl
pop ebx
xchg di, di
pop edi
mov esp, ebp
pop ebp
ret
je 0x29c5ee5
test eax, eax
jmp 0x29fc609
jne 0x29d4f83
cmp byte [ebp + 0x10], 0
jmp 0x299704b
call eax
test eax, eax
jne 0x2a917dd
lea edx, [ebp - 0x114]
setns al
push edx
bswap ax
mov eax, 0x32ba302c
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA_2]
call eax
test eax, eax
jmp 0x2a917d7
je 0x29e6565
mov cl, byte [esi + 1]
jmp 0x2ad3e75
jle 0x2ab9ac5
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0x2998c1d
dec ebx
test edx, edi
add edx, edi
mov dword [ebp + 8], 0
jmp 0x2993ecd
jne 0x2a8a618
pop esi
neg bh
mov edi, ecx
pop ebx
xor eax, eax
not di
pop edi
mov esp, ebp
not bp
pop ebp
jmp 0x297bb13
je 0x29ccf58
cmp ecx, eax
jb 0x29e1788
mov edx, dword [ebp - 0x10]
test bp, si
cmc
add edx, eax
cmp ecx, edx
jae 0x29e1788
lea eax, [ecx + edi]
mov cl, byte [eax]
mov esi, eax
test edi, 0x287e4f5f
stc
test cl, cl
jmp 0x29d3c77
push esi
or esi, 0xffffffff
test esp, 0x5ac2bcf
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
jmp 0x294fdf8
je 0x29ccf58
cmp eax, edi
jmp 0x2a46512
mov edx, dword [ebp + 8]
inc edx
jmp 0x298b35e
mov esp, ebp
mov ebp, 0x4ac301f7
pop ebp
ret
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
je 0x2a7ecdb
mov edx, dword [eax + edi + 0x20]
jmp 0x2a84386
mov cl, byte [esi + 2]
test ebp, 0x20ea1012
stc
lea esi, [esi + 2]
sub edx, edx
test cl, cl
jmp 0x29a9197
mov ecx, dword [ebp + 0xc]
sub esi, 0x2143237c
mov edx, dword [ebp - 0xc]
xor esi, edx
mov si, 0x7ac0
cbw
mov eax, dword [ebp + 8]
cmc
and esi, 0x29f45b47
neg si
lea esi, [ebx + eax]
neg eax
mov eax, dword [ebp + 0x10]
cmp esp, 0x68823bf1
push eax
add ah, 0x85
ror al, cl
and ah, bh
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x2adc72c
mov esp, ebp
bswap bp
pop ebp
jmp 0x2964d65
call eax
pop esi
pop ebx
movsx edi, cx
pop edi
jmp 0x2aa0cbc
mov esp, ebp
movzx ebp, bx
mov bp, ax
pop ebp
jmp 0x296fcf3
jne 0x29a919d
push 0
push edx
jmp 0x2a1e624
inc esi
test cl, cl
jmp 0x29ccf52
jb 0x299706f
lea eax, [ebp - 0x114]
push eax
nop
lahf
push edi
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress_2]
jmp 0x2ac0db3
call fcn.029a8f55
add esp, 4
cmp eax, 0xffffffff
jmp 0x2a26d4e
pop edi
jmp 0x298ca5c
jne 0x29fc676
mov eax, dword [edx + 0x78]
cmp si, 0x700e
test sp, 0x2a3b
stc
mov dword [ebp - 4], eax
cmc
clc
test eax, eax
jmp 0x29b7b7d
inc esi
cmp bl, 9
jmp 0x1833d39