Function at 0x317790
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
add byte [ebx + 0x5f5e5cc4], al
xor eax, eax
push 0x311e8a
ret
jmp 0x312542
test edi, edi
jne 0x311f3c
je 0x3124d6
jne 0x3124d6
je 0xfda3a963
invalid
jne 0x312131
push 0
push 3
call dword [eax + 0xc]
mov dword [esi + 0x2c], eax
add eax, 0x2801
push 0x3126ec
ret
mov ebx, dword [esi + 4]
cmp edx, 1
mov dword [esi + 8], ebp
mov ebp, dword [esp + 0x18]
mov byte [ebx + ecx], 0x90
jmp 0x312691
je 0x31256e
jne 0x3124f0
add byte [eax], al
add byte [eax], al
pop esi
pop edi
pop ebx
pop ebp
je 0x312743
jne 0x312743
mov esi, ecx
jne 0x312627
mov ecx, dword [esi + 0x28]
mov ebp, dword [esp + 0x18]
je 0x31275c
jne 0x31275c
je 0x3158f688
add bl, al
add byte [eax], al
add byte [eax], al
jmp 0x31587293
add eax, 0xfffffffc
nop word [eax + eax]
je 0x312591
jne 0x312591
je 0x3125e7
jne 0x3125e7
je 0x311dae
jne 0x311e5c
jmp 0xff4fab80
add edi, dword [esi + 0x20]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
je 0x31282c
jne 0x31282c
push 0x312703
ret
je 0x312673
jmp 0x312644
je 0x312591
jne 0x311f9f
jmp 0xf316c39
lea ebx, [edx + 1]
je 0x312778
jne 0x312778
add byte [eax], al
add byte [eax], al
mov dword [esi + 8], 0
push eax
call fcn.00344b2a
je 0x3126fe
jne 0x3126fe
jmp 0x31bbeb
jmp 0x312797
mov dword [eax], edi
mov eax, dword [esi + 4]
mov dword [ecx], eax
je 0x3127d0
jne 0x3127d0
jmp 0x31595993
ret 0xc
mov eax, dword [ecx]
push 0x400
push 0x10
je 0x3125a2
jne 0x3125a2
mov dword [esi + 8], ebx
mov byte [ecx + edx], 0x90
je 0x3127e0
jne 0x3127e0
jmp 0x9fa6c8fc
cmp dword [ecx + 8], 0
jmp 0x312603
add esp, 4
mov ecx, esi
mov dword [esi + 4], eax
call fcn.00312860
mov ecx, esi
call fcn.00312cf0
push 0x3127b5
ret
je 0x312633
jne 0x312633
je 0x3123b1
jne 0x31221f
lea ebp, [ecx + 1]
je 0x3125b8
jne 0x3125b8
jne 0x3126d9
jmp 0x31269f
jmp 0x312713
je 0x3120bd
jne 0x3133ae
jmp 0x8935abb4
add esp, 4
mov ebx, eax
sar eax, 0x1f
je 0x3130f1
jne 0x3130f1
jmp 0x312d61
je 0x311ec5
push 0x312cff
ret
jne 0x312e68
mov edx, edi
mov edi, dword [esp]
mov ecx, ebp
jmp 0x313136
jmp 0x313714
mov edx, edi
je 0x313278
jne 0x313278
jmp 0x5498303
cmp dword [esp + 4], 0x8664
je 0x312d86
jne 0x312d86
je 0x312950
jne 0x31329b
je 0x886b3c6
add byte [eax], al
push 0x313223
ret
lea edx, [esp + 0x1c]
push edx
push eax
call dword [edi + 0xc]
mov eax, dword [esi + 4]
je 0x312de1
jne 0x312de1
je 0x85db306
add byte [eax], al
jne 0x313725
je 0x3122bb
jne 0x312807
add byte [eax], al
add byte [eax], al
mov eax, dword [esi + 0x24]
jmp 0x31337b
je 0x3168fea3
add bl, al
jmp 0xe93975cb
mov eax, dword [esi + 0x24]
je 0x313746
jne 0x313746
jmp 0x3164c735
add edx, 2
mov dword [esi + 8], edx
mov dword [esp + 4], edx
je 0x312fb9
jne 0x312fb9
add byte [eax], al
add byte [eax], al
jne 0x312e91
jmp 0x68553cac
push edi
call fcn.00306490
je 0x312d47
jne 0x312d47
je 0x3130a8
mov ecx, ebp
shr eax, 0x1d
add eax, ebx
je 0x3133d0
jne 0x3133d0
je 0x237b619
add byte [eax], al
je 0x3121e6
jne 0x311ec5
je 0x4557da9
mov ecx, dword [esp + 4]
je 0x31375e
jne 0x31375e
je 0x31278c
push 0x31336e
ret
mov byte [edi + edx], 0x48
push 0x3135b8
ret
mov edi, dword [ecx]
push dword [esi + 0x24]
je 0x31370e
push 0x312eb3
ret
mov eax, ebx
or eax, 1
cmp ebx, ebp
je 0x313090
cmp eax, 5
je 0x3135e3
jmp 0x313707
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x24]
push 0x313255
ret
push 0x31332d
ret
mov edi, dword [esp]
mov ecx, ebp
mov eax, ebx
add al, 0xb8
je 0x313397
jne 0x313397
je 0x3133f6
jne 0x3133f6
je 0xf35a99e
push dword [esi + 4]
je 0x3135a2
test dh, bh
add al, byte [eax]
add byte [edi], cl
test eax, edi
add al, byte [eax]
add byte [edi], cl
test byte [edi], cl
test byte [edi], ch
add al, byte [eax]
add byte [edi], cl
test dword [ecx], ebp
add al, byte [eax]
add byte [edi], cl
test bh, al
inc esp
and al, 0x10
jne 0x3135a2
je 0x260b6bf
add byte [eax], al
jne 0x3134e1
je 0x10557785
mov dword [esp + 0x10], 0
add byte [eax], al
add byte [eax], al
lea edx, [esp + 0x10]
mov ecx, dword [esi + 0xc]
je 0x313170
jne 0x313170
je 0x312f35
jne 0x312f35
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
je 0x3130f1
jne 0x3130f1
mov ecx, ebp
je 0x3135f5
jne 0x3135f5
je 0x3127c3
jmp 0x31330b
jne 0x312633
jmp 0x455879f
mov ecx, dword [esi + 0xc]
je 0x313657
jne 0x313657
jmp 0xfe99b79e
je 0x3131f9
jne 0x3131f9
push 0x313269
ret
mov dword [esp + 8], edx
mov edx, ecx
lea ecx, [ebx + 3]
mov dword [esp], ecx
je 0x31311a
je 0x313758
jne 0x313758
add byte [eax], al
add byte [eax], al
je 0x313835
jne 0x313835
je 0x312d18
jne 0x312d18
je 0x3134e1
jne 0x31262f
je 0x3133fa
add byte [eax], al
add byte [eax], al
mov byte [edx + edi], cl
mov edx, dword [esp]
je 0x313794
jne 0x313794
add byte [eax], al
add byte [eax], al
je 0x313725
jne 0x313725
jmp 0x8a2e15a4
call fcn.00305df0
add esp, 0xc
je 0x31345e
jne 0x31345e
je 0x31206a
jne 0x311e60
jmp 0x31615eb6
add dword [eax], eax
add byte [edi], cl
test ah, bh
add dword [eax], eax
add byte [edi], cl
test esi, esi
add dword [eax], eax
add byte [ebx + 0x968fbc2], al
xor dh, byte [ecx]
add bl, al
add byte [eax], al
add byte [eax], al
mov eax, ebx
add al, 0x58
mov byte [edi + edx + 2], al
add edx, 3
jmp 0x313009
add edx, 0xfffffffb
push 0x313209
ret
push dword [esp + 0x14]
push dword [eax + 0x18]
push 0x313140
ret
mov edx, ebp
push 0x312e03
ret
je 0x3135af
jne 0x3135af
push 0x313349
ret
je 0x313090
je 0x31338b
jne 0x31338b
jne 0x313006
push 0x3130b5
ret
mov byte [edi + ecx], 0x48
inc ecx
je 0x3135d9
jne 0x3135d9
je 0x31255d
jne 0x311e60
add byte [eax], al
add byte [eax], al
jne 0x3121b5
mov edi, dword [esi + 4]
mov dword [esp], eax
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, dword [esi + 8]
cmp dword [esp], 0x8664
jne 0x3135af
jmp 0x31373a
je 0x3136cd
cmp eax, 0x14c
jne 0x313812
je 0x3136cd
jne 0x3136cd
push 0x3130a4
ret
lea eax, [edx + 1]
push 0x312ec1
ret
jne 0x3135e3
jmp 0xf7f72064
push edx
jmp 0x312ed9
add eax, dword [esi + 8]
push dword [esp + 0x10]
push dword [esp + 0x18]
push eax
jmp 0x313431
mov eax, dword [esi + 0x14]
push dword [esi + 0x10]
push dword [esi + 0x24]
mov edi, dword [esp + 0x20]
push edi
jmp 0x31329b
je 0x313638
jne 0x313638
cmp eax, 0x8664
je 0x313687
jne 0x313687
jmp 0xf9edbc6b
jne 0x31311a
shl dl, 3
or dl, 5
jmp 0x3137f8
mov dword [esi + 8], edx
je 0x313809
jne 0x313809
je 0x3135f5
jne 0x313397
push 0x3132e5
ret
add eax, 0xfffffff9
je 0x313219
jne 0x313219
je 0x4558c96
mov dword [esp + 4], edx
jmp 0x3132ba
mov eax, ecx
jmp 0x3132ba
and eax, 0xfffffff8
sub ebx, eax
je 0x3131c1
jne 0x3131c1
jmp 0xf8acbc5a
push ebx
push dword [esp + 0x14]
push 0x316bf9
ret
push 0x2710
call dword [sym.imp.HDWOMH_6aod_Pm_dx]
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
je 0x316f74
jne 0x316f74
jmp 0xf4e8f0a8
push ebp
push edi
je 0x316a66
jne 0x316a66
je 0x316b78
jne 0x316b78
add byte [eax], al
add byte [eax], al
call fcn.00310d80
lea ecx, [esp + 8]
push 0x31764d
ret
ret 4
pop esi
pop edi
pop ebx
jmp 0x317644
lea ecx, [esp + 0x10]
call fcn.00310ed0
mov eax, ebx
add esp, 0x18
je 0x3176c7
jne 0x3176c7
je 0x316781
jne 0x316e37
je 0x1055c384
push 0x35f130
je 0x3175b1
jne 0x3175b1
je 0x316013
jne 0x316938
jmp 0x9519c76c
je 0x3177a9
jne 0x3177a9
je 0x317b51
jne 0x317b51
je 0x32eb8f
add byte [edi], cl
test byte [ebp + 0x53], dl
push ebp
push ebx
push edi
push esi
sub esp, 0x40
mov ebx, ecx
lea ecx, [esp + 0x20]
push 0x35f182
call fcn.00310d80
push 0x317794
ret
push eax
push esi
je 0x317c8c
jne 0x317c8c
add byte [eax], al
add byte [eax], al
mov eax, dword [ecx]
call dword [eax + 8]
push eax
push 0x317cbe
ret
pop edi
pop ebx
je 0x3179be
jne 0x3179be
lea eax, [esp + 0x28]
lea ebp, [esp + 0x30]
je 0x3178ff
jne 0x3178ff
add byte [eax], al
add byte [eax], al
je 0x317c10
jne 0x317c10
je 0x317a99
jne 0x317a99
jmp 0x49ffc6d
je 0x317cce
lea ecx, [esp + 0x10]
je 0x317985
jne 0x317985
test eax, eax
je 0x317a88
mov esi, eax
je 0x317829
je 0x317a0e
jne 0x317a0e
je 0x84415917
mov eax, esp
je 0x3177f9
invalid
jne 0x3177f9
je 0x3163fb
jne 0x3176d3
jmp 0xc7b53e32
push 0x4000
call fcn.00344b2a
je 0x317bdb
jne 0x317bdb
je 0x316403
jne 0x316052
je 0x3208e8
jmp 0x31788a
add byte [eax], al
push eax
push ebp
call fcn.0033d9e0
add esp, 8
cmp eax, 1
jne 0x317cce
je 0x3178f9
jne 0x3178f9
add byte [eax], al
add byte [eax], al
mov dword [esp + 4], eax
je 0x31793e
jmp 0x317841
xor ebp, ebp
xor edi, edi
je 0x317990
jne 0x317990
je 0x317c6e
jne 0x316fa8
je 0x31781b
jne 0x31781b
add byte [eax], al
add byte [eax], al
call fcn.0033d4b0
add esp, 0x10
mov edi, eax
jmp 0x317990
call fcn.00310f90
push 0x3177d6
ret
push esi
call fcn.00344b33
add esp, 4
push dword [esp + 0xc]
je 0x317ac9
jne 0x317ac9
add byte [eax], al
add byte [eax], al
push 0x317bed
ret
pop ebp
ret 8
je 0x31793c
jmp 0x317c21
je 0x3179c2
je 0x317c56
je 0x317b21
jne 0x317b21
jmp 0xfe46ff21
jne 0x317829
jmp 0x284fe28
push 0x35f198
call fcn.00310d80
lea ecx, [esp + 0x10]
push 0x35f1ae
call fcn.00310d80
mov dword [esp], 0x400
mov dword [esp + 8], 0
je 0x3178d5
jne 0x3178d5
mov edi, eax
add edi, 2
jmp 0x317ca9
mov eax, edi
je 0x317ce6
jne 0x317ce6
je 0x317c21
jne 0x316e35
add byte [eax], al
add byte [eax], al
call fcn.00344b33
add esp, 4
lea ecx, [esp + 0x10]
call fcn.00310ed0
push 0x317bcc
ret
test eax, eax
je 0x3179ad
push eax
je 0x317c5e
jne 0x317c5e
push ebp
push dword [esp + 0x10]
push 0x317ab9
ret
call fcn.00344b33
add esp, 4
mov eax, dword [esp + 4]
je 0x317b41
jne 0x317b41
jmp 0xf35c669
mov ecx, dword [ebx + 4]
je 0x31780b
push 0x317819
ret
jne 0x317c56
add byte [eax], al
add byte [eax], al
lea ecx, [esp + 0x20]
mov ebp, eax
call fcn.00310f90
push 0
push ebp
push 0x3179cd
ret
je 0x31784d
jne 0x31784d
add byte [eax], al
add byte [eax], al
lea ecx, [esp + 0x18]
je 0x317a25
jne 0x317a25
jmp 0x30954f
push edi
push eax
call fcn.00307cc0
add esp, 8
test eax, eax
je 0x3179f9
jne 0x3179f9
je 0x31699d
jne 0x317bdb
jmp 0x317c0e
add esp, 4
xor edi, edi
je 0x317870
jne 0x317870
jmp 0x84416976
mov edi, 0
jne 0x317990
jmp 0x317ada
je 0x855f897
cmp dword [esp + 8], 0x40
inc eax
je 0x317bfc
jne 0x317bfc
push 0x317b87
ret
jne 0x31793c
add byte [eax], al
add byte [eax], al
lea ecx, [esp + 0x20]
call fcn.00310ed0
jmp 0x317a62
push 0x3177cc
ret
call fcn.00344b33
add esp, 4
push 0x317c3d
ret
push dword [esp + 0x68]
call fcn.00307b50
add esp, 0x18
test eax, eax
je 0x31785a
jne 0x31785a
jmp 0x317cef
push dword [esp + 0x60]
push dword [esp + 0x60]
push ebp
call fcn.0033da30
add esp, 0x14
cmp eax, 1
jne 0x317cce
push 0x3177c6
ret
mov eax, dword [ecx]
je 0x317cf3
jne 0x317cf3
jmp 0xfbd600c3
je 0x317cd2
jne 0x317cd2
push esi
je 0x317a80
jne 0x317a80
jmp 0x31addb4c
add esp, 0x40
pop esi
jmp 0x317950
add byte [eax], al
add byte [eax], al
call dword [eax + 8]
jmp 0x317ba8
test eax, eax
push 0x31bb65
ret
lea ecx, [eax + 8]
jne 0x31bc7a
jmp 0x31bc57
adc al, 0x75
adc ch, cl
nop
jmp 0x31bc7a
push 0x31bc8e
ret
mov eax, dword [ecx]
mov ebp, ecx
test eax, eax
je 0x31bb8d
jne 0x31bb8d
je 0x89bc9fc
push dword [edi + 0x18]
call dword [sym.imp.HDWOMH_6aod_KddqIhdkg]
je 0x31bb5d
jne 0x31bb5d
je 0x75d0310b
pushfd
jmp 0xf6a67ce4
dec dword [ebp + 0x6820244c]
adc dl, bh
xor eax, 0x489e800
invalid
jmp 0x32eb94
mov word [eax], 0x8b66
push dword [ebp]
call fcn.00306490
je 0x32f1c6
jne 0x32f1c6
je 0x32ecfb
jne 0x32ecf3
add esp, 4
mov edx, 0x82082083
mov ecx, eax
mov ebx, 3
imul edx
je 0x32f853
jne 0x32f853
je 0x3134d2
dec dword [edi]
test dword [ecx - 3], ebx
invalid