Function at 0x2bcca93
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
je 0x2b42145
mov eax, dword [eax + ecx + 0x7c]
push ebx
test esp, 0x28263937
push edi
stc
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0xffffffff
cmp ax, 0x77ac
cmp edx, ecx
cmp esi, 0xffff
jmp 0x2ce4aed
mov ecx, esi
sub ecx, eax
cmp ecx, 0x104
jae 0x2ceb6ad
sub edi, edi
test ecx, ecx
je 0x2ce3d31
lea ebx, [ebp - 0x114]
mov dl, 0x2a
sub ebx, eax
rcr dl, cl
shr dl, cl
mov dl, byte [eax]
stc
cmp bh, 0x7e
test dl, dl
je 0x2ce3d31
mov byte [ebx + eax], dl
jmp 0x2cb3ae8
call fcn.02bcca93
add esp, 0xc
mov esi, 0x69b84b83
pop edi
pop ebx
jmp 0x2bfc2d6
call fcn.02ba7f7d
add esp, 4
test eax, eax
jmp 0x2ca577d
ja 0x2b76d2b
movsx eax, cl
mov cl, byte [esi]
clc
lea edx, [edx + edx*4]
test ah, 0x28
cmc
lea edx, [eax + edx*2 - 0x30]
test cl, cl
jmp 0x2b76d25
mov dword [ebp - 0xc], eax
jmp 0x2c1bb86
mov edi, dword [edx + ecx + 0x18]
test edi, edi
jmp 0x2c26f49
mov esp, ebp
pop ebp
jmp 0x2b8e677
pop edi
xchg si, si
shrd si, cx, 0x20
pop ebx
xor si, 0x7f6e
xadd esi, esi
add eax, ecx
mov esi, 0x7037679c
pop esi
jmp 0x3787bb0
je 0x2b7b423
xor eax, eax
xchg si, si
not si
pop esi
jmp 0x2c314c0
call eax
mov edi, eax
cmp dl, dl
test esp, 0xf0a141f
test edi, edi
jmp 0x2d3d895
cmp al, 9
jmp 0x2b26953
push eax
movzx ax, dl
push edx
cwde
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x3c6b0ad
je 0x3c6b89f
inc eax
cmp esi, ebx
jmp 0x2be7065
mov dword [ebp - 4], edx
test bh, ch
cmc
test edx, edx
jmp 0x2afc888
ret
mov esp, ebp
pop ebp
jmp 0x2b73b1f
jne 0x2cacfef
push 0
jmp 0x2d4d2d3
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx + 0x3c]
clc
test si, dx
cmp ch, dh
cmp dword [eax + ecx], 0x4550
jmp 0x2d1d5c8
ret
inc eax
test ch, 0x64
cmp edi, ecx
jmp 0x2ce3d2b
jle 0x2bd65f9
jmp 0x2cd0d1e
mov eax, dword [eax + esi*4]
clc
jmp 0x2d6e783
mov cl, byte [esi + 2]
cmc
stc
cmp sp, si
add esi, 2
sub edx, edx
test cl, cl
jmp 0x2cacfe9
mov eax, dword [ebp + 0xc]
push eax
mov ah, 0xcb
cmovg eax, esi
push edx
mov al, bl
nop
seta ah
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x2cf91f0
push ebp
mov ebp, esp
ror cl, cl
mov ecx, dword [ebp + 8]
test al, 0xd
clc
sub esp, 0x114
push esi
test ecx, ecx
je 0x2b42145
mov esi, dword [ebp + 0xc]
cmc
cmp ah, 0xab
test esi, esi
jmp 0x2d3bb93
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x2b43933
mov eax, dword [ebp - 0xc]
stc
sbb dh, 0xac
mov edx, dword [ebp + 0x10]
clc
lea esi, [edi + ebx]
cmp bl, ah
cmp esp, 0x40392bf6
sar esi, 1
jmp 0x2bad013
je 0x2bb1493
mov edi, dword [ebp + 0xc]
rcr cl, cl
btr ebx, edi
lea ecx, [ebp - 0x114]
xor eax, eax
shl bh, cl
not bx
sub edi, ecx
cmc
lea esp, [esp]
rcr esi, 0xdf
rol bh, 0x79
btc esi, 0xd1
mov cl, al
btc ebx, esi
rol bl, 0xcb
mov ebx, 0x229b2cb7
rol ebx, cl
bsr esi, eax
lea esi, [ebp + eax - 0x114]
lea ecx, [eax + ebx]
xor cl, byte [edi + esi]
mov byte [esi], cl
jmp 0x2b6590e
cmp eax, 0x104
jmp 0x3c6b899
push edi
jmp 0x2b1e772
pop esi
mov esp, ebp
movsx ebp, si
pop ebp
jmp 0x2c03b1f
call fcn.02bcca93
add esp, 0xc
not di
jmp 0x2d29bcf
ret
jne 0x37cda9e
cmp byte [ebp + 0x10], 0
jmp 0x2bda260
pop ebx
movsx esi, bx
movzx esi, sp
pop esi
jmp 0x2b74488
js 0x2cd0d26
jmp 0x2bd6600
jb 0x2b39658
mov esi, dword [ebp - 0x10]
lea esi, [esi + edx]
cmp esi, edi
cmp eax, esi
jae 0x2b39658
add eax, ecx
shl cl, 0xc6
or esi, edx
mov cl, byte [eax]
mov esi, eax
test cl, cl
jmp 0x375dd0d
je 0x2cd0d26
mov eax, dword [edx + ecx + 0x20]
clc
add eax, ecx
cmp ch, 0xe4
sub ebx, ebx
jmp 0x2c27b04
dec edi
jmp 0x2b28175
ret
mov esp, ebp
xchg bp, bp
mov ebp, 0x43f319c
mov bp, cx
pop ebp
jmp 0x2c2d433
jns 0x2d2a6da
lea edi, [esi - 1]
jmp 0x2d2a6e5
ret
je 0x2b76d2b
lea eax, [ecx - 0x30]
inc esi
jmp 0x2b501f5
inc edi
jmp 0x2b91001
jne 0x2d3d89b
lea edx, [ebp - 0x114]
jmp 0x2bcdb1a
call eax
mov edi, eax
cmp bx, 0x25e4
test edi, edi
jmp 0x2ccc337
mov eax, dword [ebp + 8]
bsr cx, ax
mov ecx, dword [ebp - 4]
shr edx, 0x45
add dx, 0x59b5
mov edx, dword [ecx + eax + 0x24]
lea ecx, [edx + esi*2]
movzx edx, word [ecx + eax]
bts ecx, ebx
shr ecx, cl
mov dword [ebp - 8], edx
mov ecx, eax
mov edx, dword [ebp - 4]
sar al, cl
movsx eax, si
mov eax, dword [ebp - 8]
cmp ah, dh
cmp eax, dword [edx + ecx + 0x14]
jmp 0x2d04aac
jb 0x2b04645
lea ecx, [ebp - 0x114]
mov eax, 0x1a1c378f
lahf
push ecx
lahf
mov byte [ebp + edi - 0x114], 0
not eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x2ccd344
ja 0x2b2b378
mov eax, esi
sub eax, dword [edx + ecx + 0x10]
jmp 0x2cf9a22
pop ebx
cmovae esi, edx
xchg si, si
pop esi
jmp 0x2b318f1
inc esi
cmc
test cl, cl
jne 0x375dd13
pop edi
cmp cl, 0x5f
pop ebx
xor eax, eax
movsx esi, di
bswap esi
pop esi
jmp 0x375d2b1
je 0x2baf712
push 0
push ecx
push edi
jmp 0x2bfc7a0
call eax
pop edi
pop ebx
pop esi
jmp 0x2b7856c
mov dword [ebp - 8], eax
jmp 0x2d5cb63
jae 0x2ceb6ad
mov esi, dword [edx + ecx + 0x1c]
lea eax, [esi + eax*4]
mov eax, dword [eax + ecx]
cmp edi, esp
test sp, 0x5416
test eax, eax
jmp 0x379d446
jne 0x2b42145
mov edx, dword [eax + ecx + 0x78]
jmp 0x2b71023
pop edi
jmp 0x2ce519e
jle 0x2cd0cf7
lea ebx, [esi + 1]
ror ch, cl
mov ecx, dword [ebp + 8]
cmp ebx, edi
jmp 0x2b9f1dc
je 0x2b42145
mov eax, 0x5a4d
clc
cmp word [ecx], ax
jmp 0x2b4213f
je 0x2ceb6ad
mov edx, dword [ebp + 8]
cmc
stc
cmp edi, edx
jmp 0x2c0ba5b
je 0x2b0461d
mov cl, byte [esi + 1]
jmp 0x2ceb6a3
push edx
jmp 0x2bf0cfc
jmp 0x2cd0d26
push edx
xchg dh, dh
mov edx, dword [ebp + 0xc]
clc
cmp al, 0x9a
add eax, ecx
jmp 0x2b1e7e0
mov esp, ebp
mov ebp, 0x26e6b45
pop ebp
jmp 0x2ca6ba3
je 0x2ceb6ad
cmp cl, 0x2e
jmp 0x2d42251
je 0x2ceb6ad
cmp eax, edx
jmp 0x2c1d6f4
cmp byte [esi + 1], 0x23
lea ecx, [esi + 1]
jmp 0x2cf6940
call eax
pop edi
jmp 0x2c1a873
jb 0x2bda28f
lea eax, [ebp - 0x114]
jmp 0x2b5e63c