Function at 0x2e8d115
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov esp, ebp
cmovnp bp, sp
jmp 0x2e78743
test eax, eax
je 0x2991d38
cmp eax, edx
jb 0x2063ea0
mov esi, dword [ebp - 0x10]
add esi, edx
stc
cmc
cmp eax, esi
jmp 0x1fab84b
je 0x2041d97
xor eax, eax
cmovge esi, esi
movzx esi, ax
pop esi
jmp 0x1f9dd11
ret
je 0x2a7a321
push 0
push ecx
jmp 0x209c5e6
mov eax, dword [ebp + 8]
adc cx, 0x3095
mov ecx, dword [ebp - 4]
clc
rcr dx, 0xc1
rcl edx, cl
mov edx, dword [ecx + eax + 0x24]
sal ch, 0x9e
shr ecx, 9
shld cx, dx, 0x85
lea ecx, [edx + esi*2]
movzx edx, word [ecx + eax]
mov dword [ebp - 8], edx
rcr ch, 0xf9
btc dx, bp
and dh, 0x18
mov ecx, eax
xor ah, 0xf7
rcr ax, cl
mov edx, dword [ebp - 4]
bt ax, 0xb4
bt eax, edi
mov eax, dword [ebp - 8]
jmp 0x1ff52ca
mov esp, ebp
not bp
cmovo ebp, esp
pop ebp
jmp 0x2041833
jae 0x2063ea0
lea eax, [eax + ecx]
mov cl, byte [eax]
mov esi, eax
cmp ah, 0x56
clc
cmc
test cl, cl
jmp 0x2a730dd
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x2098166
jae 0x2991d38
xor edi, edi
test si, si
cmp edi, edx
test ecx, ecx
je 0x213362b
lea ebx, [ebp - 0x114]
cmp ebp, ebx
sub ebx, eax
ror dl, 0x9d
clc
mov dl, byte [eax]
test esi, 0x6658603b
test dl, dl
jmp 0x1fe0b74
test cl, cl
jmp 0x29aa4f8
je 0x213362b
mov byte [ebx + eax], dl
jmp 0x296c693
je 0x1f79f45
mov esi, dword [ebp + 0xc]
cmp si, bx
test esi, esi
jmp 0x209ea29
cmp eax, dword [edx + ecx + 0x14]
jmp 0x29f2c28
cmp byte [esi + 1], 0x23
setp cl
lea ecx, [esi + 1]
jmp 0x1f88244
call fcn.02e8d115
add esp, 0xc
xchg di, si
cmovbe di, ax
pop edi
pop ebx
not si
pop esi
jmp 0x1f738ad
jne 0x1fff9d5
cmp byte [ebp + 0x10], 0
jmp 0x211f67c
je 0x1f79f45
mov eax, dword [eax + ecx + 0x7c]
push ebx
push edi
stc
mov dword [ebp - 0x10], eax
jmp 0x29832f4
sub eax, dword [edx + ecx + 0x10]
mov dword [ebp - 8], eax
jmp 0x29710cb
cmp dword [eax + ecx], 0x4550
jne 0x1f79f45
mov edx, dword [eax + ecx + 0x78]
mov dword [ebp - 4], edx
test edx, edx
jmp 0x201c9ca
ret
mov eax, dword [ecx + 0x3c]
cmp bl, 0xb3
jmp 0x2034da3
ret
cmp word [ecx], ax
jmp 0x1f79f3f
pop edi
btc esi, 0x23
rcl si, 0x3b
pop ebx
add eax, ecx
movzx esi, di
pop esi
jmp 0x20e37bc
call eax
pop edi
mov si, 0x5991
jmp 0x29f55de
mov edi, dword [edx + ecx + 0x18]
test esp, edi
clc
test edi, edi
jmp 0x2087d63
je 0x1f95474
mov eax, dword [edx + ecx + 0x20]
cmc
cmp dh, 0xb7
lea eax, [eax + ecx]
xor ebx, ebx
jmp 0x212948d
jne 0x2e8d0c7
lea edx, [ebp - 0x114]
movsx eax, si
push edx
movsx eax, bp
movsx ax, dh
setnp ah
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x2e8d0ba
call eax
pop edi
mov bl, 0x25
pop ebx
movzx esi, bx
pop esi
mov esp, ebp
pop ebp
jmp 0x1f81ad6
push edi
jmp 0x20ab721
je 0x1f79f45
mov eax, 0x5a4d
jmp 0x205b35f
call fcn.02e8d115
add esp, 0xc
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0xc], eax
jmp 0x2e84625
call eax
mov edi, eax
cmc
test edi, edi
jmp 0x2090bcb
jns 0x21394b7
lea edi, [esi - 1]
jmp 0x29c7fa4
mov esp, ebp
movzx ebp, sp
xchg ebp, ebp
pop ebp
ret
lea edx, [eax + edx*2 - 0x30]
jmp 0x1fe006e
ja 0x206cf84
mov eax, esi
clc
jmp 0x2028e5d
inc esi
test ax, bp
test ah, 0xf8
cmp al, 9
ja 0x29aa4fe
movsx eax, cl
mov cl, byte [esi]
cmc
cmp al, 0x69
lea edx, [edx + edx*4]
jmp 0x20e99b7
je 0x29593af
mov edi, dword [ebp + 0xc]
dec bh
bt esi, esi
lea ecx, [ebp - 0x114]
xor eax, eax
or esi, 0x82a458a
sub edi, ecx
xchg cl, bl
ror bx, cl
lea esp, [esp]
clc
jmp 0x2e98342
dec edi
jmp 0x20b2c80
je 0x2a52a59
inc eax
cmp bx, bp
jmp 0x2a52a4e
inc eax
cmp edi, ecx
jb 0x1fb4baa
lea ecx, [ebp - 0x114]
movzx ax, cl
nop
push ecx
mov byte [ebp + edi - 0x114], 0
movzx eax, si
mov eax, edx
seta al
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x20d5e0d
jle 0x1f9542c
lea ebx, [esi + 1]
add ch, 0xaa
rcr ch, 0x89
or cx, cx
mov ecx, dword [ebp + 8]
stc
cmp di, 0x2084
cmp ebx, edi
jmp 0x2a730c9
mov eax, dword [ebp + 0xc]
jmp 0x29c98ca
inc edi
jmp 0x2133622
jmp 0x1f95474
call fcn.02142400
add esp, 4
cmp al, 0x68
test eax, eax
jmp 0x20e2d43
push eax
push edx
bswap ax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x206ba39
mov dword [ebp - 8], 0xffffffff
cmc
cmp esi, 0xffff
jmp 0x20ea4b6
je 0x2a05399
mov cl, byte [esi + 1]
inc esi
test cl, cl
jmp 0x2991d32
jne 0x2a730e3
pop edi
pop ebx
rcl esi, 0x2f
xor eax, eax
bswap esi
pop esi
mov esp, ebp
mov ebp, eax
pop ebp
ret
je 0x29aa4fe
lea eax, [ecx - 0x30]
jmp 0x21052d5
jne 0x2996ff8
push 0
jmp 0x29e5074
mov byte [esi], cl
jmp 0x212e8b0
jmp 0x21394c9
push eax
push edx
jmp 0x1fadddd
mov eax, dword [ebp - 0xc]
bt si, 0x1d
bsf edx, ebx
mov edx, dword [ebp + 0x10]
bts si, bp
lea esi, [edi + ebx]
test eax, 0x466539a1
stc
test bx, di
sar esi, 1
mov eax, dword [eax + esi*4]
clc
stc
test si, 0x311e
push edx
cmp cl, dl
cmp dl, 0x9e
test edi, 0x38d122df
mov edx, dword [ebp + 0xc]
add eax, ecx
jmp 0x2975691
push edx
push edi
jmp 0x20083a9
jae 0x2991d38
mov esi, dword [edx + ecx + 0x1c]
clc
cmp edx, 0x1ea86b78
lea eax, [esi + eax*4]
test al, 0xec
clc
mov eax, dword [eax + ecx]
jmp 0x1f7823d
pop ebx
pop esi
jmp 0x2e6c63e
mov ecx, esi
cmp esp, 0x17eb5ae4
clc
sub ecx, eax
cmp edi, 0x3a9f36f8
cmc
cmp ecx, 0x104
jmp 0x1fb4b87
cmp eax, 0x104
jb 0x2e98342
lea eax, [ebp - 0x114]
jmp 0x29832cd
push esi
test edi, esi
test ecx, ecx
jmp 0x1fec4ff
jle 0x29cea8f
jmp 0x1f95469
je 0x2991d38
cmp cl, 0x2e
jmp 0x29843a0
mov cl, byte [esi + 2]
cmp ecx, ebp
cmp ebp, 0x43ad1ff8
test bp, si
lea esi, [esi + 2]
test bx, sp
xor edx, edx
cmp dx, 0x3cf7
test cl, cl
jmp 0x2996ff2
mov esp, ebp
movsx ebp, bp
mov bp, 0x31e7
pop ebp
ret
pop ebp
jmp 0x2058efb
js 0x1f95474
jmp 0x29cea9a
call eax
mov edi, eax
cmc
test edi, edi
je 0x2991d38
mov edx, dword [ebp + 8]
cmp ebx, 0x28320ee
cmp edi, edx
jmp 0x201c39b
push ebp
mov ebp, esp
cmp esi, 0x5de8065e
bt cx, 0xbe
sbb ecx, 0x4c50f8f
mov ecx, dword [ebp + 8]
cmp esp, ebp
lea esp, [esp - 0x114]
test ebx, eax
jmp 0x2a72038
mov cl, al
clc
movsx esi, cx
rol bh, 0x36
mov ebx, 0x1ea24b11
rol ebx, cl
test si, 0x3201
bswap ecx
bsr ecx, edx
lea esi, [ebp + eax - 0x114]
rcl ch, cl
cmp ax, bp
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
jmp 0x29af9a1