Function at 0x326aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop edi
pop ebx
je 0x31a006
jne 0x31a006
je 0x31a015
jmp 0x31a04f
ret 8
jmp 0x31a07a
je 0x31a0da
jne 0x31a0da
jmp 0x4919d725
push dword [esi]
call fcn.0033ff71
je 0x31a084
jne 0x31a084
add byte [eax], al
add byte [eax], al
mov dword [esi + 4], eax
push 0x34a4a0
je 0x31a0a1
push 0x31a00e
ret
push 0x34a49a
jmp 0x31a0e7
push dword [esi]
je 0x31a093
jne 0x31a093
add byte [eax], al
add byte [eax], al
add esp, 8
mov eax, 1
pop esi
jmp 0x319ff3
call fcn.0033ff71
add esp, 8
push edi
je 0x31a022
jne 0x31a022
jmp 0xca19d7a4
push dword [esi]
call fcn.0033ff71
add esp, 8
je 0x31a0bd
jne 0x31a0bd
jmp 0xff9124c3
push ebx
push dword [esi]
call fcn.0033ff71
add esp, 8
push 0x34a4a4
je 0x31a00b
jne 0x31a00b
jmp 0x31a296
mov eax, 1
push 0x31a045
ret
push dword [esi]
call fcn.0033ff71
add esp, 8
push 0x31a059
ret
movsb byte es:[edi], byte [esi]
xor dword [eax], eax
mov byte [ecx + 0x2b], 0
mov byte [ecx + 0x2c], 0
mov byte [ecx + 0x2d], 0
mov byte [ecx + 0x2e], 0
push 0x325dd0
ret
mov byte [ecx + 0x17], 0
mov byte [ecx + 0x18], 0
mov byte [ecx + 0x19], 0
je 0x325e48
jne 0x325e48
mov byte [ecx + 0x28], 0
mov byte [ecx + 0x29], 0
mov byte [ecx + 0x2a], 0
je 0x325d0d
jne 0x325d0d
jmp 0x8da7edbc
je 0x325fc5
nop word cs:[eax + eax]
nop
push ecx
call dword [sym.imp.HDWOMH_6aod_FoqdzGzmpl_ieUfephml]
mov eax, dword [esi + 0x3c]
push 0x325eb5
ret
jmp 0x803426bf
mov eax, dword [esi + 4]
test eax, eax
je 0x325fa9
push 0x325ee1
ret
call dword [sym.imp.HDWOMH_6aod_FoqdzGzmpl_ieUfephml]
je 0x3260a3
jne 0x3260a3
add byte [eax], al
add byte [eax], al
test edi, edi
mov eax, edi
jne 0x3260b0
je 0x326046
jne 0x326046
test eax, eax
je 0x326062
je 0x32605b
jne 0x32605b
je 0x49a7abba
je 0x32608f
jne 0x32608f
je 0x32602e
jne 0x325de5
je 0x329298c0
add bl, al
jmp 0xa4485faf
push eax
call dword [sym.imp.HDWOMH_6aod_OddwmGzmpl_ieUfephml]
pop esi
pop edi
ret
mov edi, dword [eax + 0xc]
push eax
call fcn.00305d50
add esp, 4
je 0x32602e
jne 0x32602e
add byte [eax], al
add byte [eax], al
push eax
je 0x326020
jne 0x326020
mov eax, dword [esi + 4]
je 0x326038
jne 0x326038
je 0x325ff5
jne 0x32608f
add byte [eax], al
add byte [eax], al
test byte [ebx - 0x3f7ac3ba], cl
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x326046
nop word [eax + eax]
je 0x326076
jne 0x326076
je 0x325f36
jne 0x325dc8
push ebx
push edi
push esi
xor esi, esi
cmp dword [ecx + 4], 0
je 0x32619f
je 0x326199
jne 0x326199
push eax
call fcn.003015a0
test eax, eax
je 0x326158
push 0x3260eb
ret
jne 0x326158
mov eax, dword [edi + 4]
je 0x3261d5
jne 0x3261d5
je 0xf91518b
mov eax, esi
pop esi
je 0x326208
test byte [ecx], al
add dword [eax], eax
add byte [edi], cl
test ebx, edi
add byte [eax], al
add byte [edi], cl
test byte [eax + eax - 0x7bf10000], cl
dec edx
add dword [eax], eax
add byte [edi], cl
test dword [ecx + eax], eax
add cl, ch
jne 0x326208
je 0x32619f
je 0x326263
jne 0x326263
jmp 0x3262e2
mov esi, 1
jmp 0x326236
test byte [esp + 0x68], dh
sub byte [eax + eax], al
add al, ch
mov esp, 0x83fffdfb
les eax, [eax*4 + 0x44789c0]
je 0x3260fe
push 0x428
call fcn.00305d20
add esp, 4
test eax, eax
mov dword [edi + 4], eax
je 0x3262b5
jne 0x3262b5
je 0x79b5e3f3
jne 0x3260fe
cmp dword [ecx + 0xc], 1
or al, 1
mov edi, ecx
je 0x3260fe
lea eax, [edi + 0x10]
je 0x3260db
jne 0x3260db
je 0x326612
jne 0x32619f
add byte [eax], al
add byte [eax], al
je 0x32617a
jne 0x32617a
je 0x326199
jne 0x325d27
je 0x456ea3a
mov dword [eax + 0x424], ecx
add byte [eax], al
push 0x18
call fcn.00305d20
add esp, 4
je 0x32626a
jne 0x32626a
je 0x32624d
jne 0x32624d
lea ecx, [edi + 0x3c]
mov dword [eax + 0x41c], 2
mov dword [eax + 0x420], 0x327890
jmp 0x3261ad
pop edi
pop ebx
ret
mov dword [edi + 0xc], 1
je 0x3260fe
jne 0x3260fe
add byte [eax], al
add byte [eax], al
mov ecx, ebx
call dword [eax + 8]
test eax, eax
jne 0x3260fe
jmp 0x326120
jne 0x325eee
jmp 0xc3bc23f7
mov ecx, eax
mov ebx, eax
call fcn.00322850
test ebx, ebx
push 0x32612a
ret
push 0x326215
ret
je 0x3262ad
push 0x3261f2
ret
or byte [ecx], dh
dec dword [edi]
test dl, ah
add al, byte [eax]
add byte [edi], cl
test esp, ebx
add al, byte [eax]
add cl, ch
jmp 0x3263ce
jne 0x32635c
je 0x3263d1
jne 0x3263d1
jmp 0x1b3e761
je 0x3264d5
jne 0x3264d5
je 0x148362b5
push ebp
call dword [eax + 0x14]
cmp eax, 5
jmp 0x32643c
mov ecx, dword [esi + 8]
push 0x326518
ret
mov byte [esp], 0
mov byte [esp + 1], 0
mov byte [esp + 2], 0
je 0x32654b
jne 0x32654b
je 0x32642b
jne 0x32642b
jmp 0xecb5ba49
jmp 0x326380
add esp, 4
mov byte [esp], 0
mov byte [esp + 1], 0
push 0x326575
ret
mov edi, 1
xor ebp, ebp
je 0x3262f2
jne 0x3262f2
je 0x456b8be
lea edx, [esp + 4]
jne 0x3265a0
cmp dword [esp + 4], 0xb1
je 0x326508
jne 0x326508
je 0x3260a3
jne 0x325d6c
jmp 0x3265b1
mov byte [esp + 3], 0
mov byte [esp + 4], 0
mov byte [esp + 5], 0
mov byte [esp + 6], 0
push 0x326369
ret
add byte [eax], al
add byte [eax], al
jmp 0x326508
inc ebp
cmp ebx, ebp
je fcn.003263fd
je 0x3263ce
jne 0x3263ce
je 0x325d83
jne 0x326038
add byte [eax], al
add byte [eax], al
mov eax, dword [ecx]
call dword [eax + 0x18]
test eax, eax
mov dword [esp + 8], 0
jmp 0x3263a2
jb 0x3265a0
mov eax, dword [esi]
mov ecx, esi
push 0
je 0x32655b
jne 0x32655b
je 0x32660e
jne 0x32660e
jmp 0x326495
je 0x326479
jne 0x326479
add byte [eax], al
add byte [eax], al
je 0x32642d
jne 0x32642d
je 0x3260a3
jne 0x325ec1
jmp 0x32654b
mov eax, dword [esp]
test eax, eax
je 0x3264b0
push 0x3265fb
ret
jmp 0xffa7e9c5
test ecx, ecx
je fcn.003263fd
cmp dword [esi + 4], 0
je fcn.003263fd
jmp 0x32634e
lea edx, [esp + 8]
mov eax, dword [ecx]
push 0x3265e5
ret
je 0x326905
jne 0x326905
je 0x3267c1
jne 0x326420
je 0x24aea67
add byte [eax], al
jne 0x326872
je 0x325f64
jne 0x326157
jmp 0xc4b65efa
mov eax, edi
add esp, 4
push 0x3267b3
ret
mov edi, 1
test ebp, ebp
je 0x326872
je 0x32695a
jne 0x32695a
push 0x326847
ret
mov eax, dword [ebx + 0xc]
mov dword [esp], edx
add edx, eax
cmp edx, ecx
je 0x326820
jne 0x326820
je 0x32640d
jne 0x3265b1
je 0x8536b455
mov ecx, dword [ebp + 4]
test ecx, ecx
leave
je 0x32695a
mov edx, dword [ebx + 4]
je 0x3266a2
jne 0x3266a2
add byte [eax], al
add byte [eax], al
push 0x3268b1
ret
jmp 0x3267e1
mov esi, ecx
je 0x32695a
je 0x32676b
jne 0x32676b
je 0x3266e4
nop dword [eax + eax]
cmp dword [eax], edi
je 0x326733
je 0x32663a
jne 0x32663a
ret 8
mov ebp, 1
mov eax, dword [esi + 4]
test eax, eax
jne 0x326789
jmp 0x32667a
mov ebx, dword [ebp]
test ebx, ebx
je 0x32695a
jmp 0x3266c6
jmp 0x32666f
je 0x32667a
push eax
call dword [sym.imp.HDWOMH_6aod_OddwmGzmpl_ieUfephml]
jmp 0x32667a
je 0x32695a
cmp dword [ecx + 4], 0
jmp 0x32670d
mov eax, dword [esi + 4]
test eax, eax
je 0x326783
jne 0x326783
add byte [eax], al
add byte [eax], al
add edx, 0x2c
push edx
push dword [esp + 4]
push 0x326796
ret
ja 0x32695a
mov edx, dword [0x360690]
lea ecx, [ebx + 0x18]
add eax, ebx
je 0x3267ee
jne 0x3267ee
call dword [sym.imp.HDWOMH_6aod_FoqdzGzmpl_ieUfephml]
je 0x32693a
jne 0x32693a
je 0x326158
jne 0x325ec1
mov eax, dword [esi + 4]
je 0x3266dc
jne 0x3266dc
je 0x326905
jne 0x326905
add byte [eax], al
add byte [eax], al
mov ecx, esi
push dword [ebx + 0x14]
push dword [esp + 4]
call fcn.00326aa0
je 0x32677d
jne 0x32677d
je 0x3260db
jne 0x32633f
test ebp, ebp
je 0x3267c1
jne 0x3267c1
add byte [eax], al
add byte [eax], al
jmp 0x32695a
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x326720
push 0x3266e4
ret
mov eax, dword [esi + 0x3c]
xor ebp, ebp
test eax, eax
je 0x326719
jne 0x326719
jmp 0xe98fc4b1
je 0x326964
jne 0x326964
add byte [eax], al
add byte [eax], al
je 0xfd35ed77
je 0x32666d
invalid
jne 0x32666d
call dword [eax + 0x14]
je 0x326853
jne 0x326853
je 0xfd9652d5
invalid
push edi
push esi
mov eax, dword [ecx + 4]
je 0x326a38
jne 0x326a38
je 0xfdedb6
je 0x326a74
add byte [eax], al
je 0x326a0b
jne 0x326a0b
push 0x326a7f
ret
jne 0x326a1f
jmp 0x3269c7
push 0x3269e3
ret
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x326a43
jmp 0x326a18
mov edi, 1
mov eax, dword [esi + 4]
test eax, eax
je 0x3269be
jne 0x3269be
push 0x3269ff
ret
push eax
je 0x326a6e
jne 0x326a6e
push 0x3269ce
ret
mov eax, dword [esi + 4]
test eax, eax
je 0x3269c7
push eax
call dword [sym.imp.HDWOMH_6aod_OddwmGzmpl_ieUfephml]
je 0x326a8d
jmp 0x326a6a
test eax, eax
je 0x326a18
push 0x326a59
ret
mov esi, ecx
test eax, eax
jmp 0x3269a3
cmp dword [eax], ecx
je 0x3269ea
je 0x3269da
jne 0x3269da
je 0x326158
jne 0x3265cd
je 0xc56b6e8
nop dword [eax]
je 0x326a64
jne 0x326a64
jmp 0x326a43
jne 0x326a8d
je 0xa0da8071
call dword [sym.imp.HDWOMH_6aod_FoqdzGzmpl_ieUfephml]
xor al, 0
mov eax, dword [esi + 0x3c]
xor edi, edi
je 0x326a2c
jne 0x326a2c
je 0xf86dee92
invalid
je 0x31a07a
jmp 0x3269c7
jmp dword [esi + 0x2e]
push ebp
push ebx
push edi
jmp 0x326c09
mov ecx, esp
push 0x35fb3e
call fcn.00310d80
lea ebp, [esi + 0x10]
push 0x326bb7
ret
call fcn.00310d80
je 0x326b03
jne 0x326b03
je 0x3266a2
jne 0x326038
jmp 0x8da74cd4
push esi
sub esp, 0x10
mov edi, dword [esp + 0x24]
mov esi, ecx
lea ecx, [esp + 8]
je 0x326c1f
jne 0x326c1f
add byte [eax], al
add byte [eax], al
push 0x35fb28
je 0x326b31
jne 0x326b31
jmp 0x326c36
push ebp
push ebx
push edi
jmp 0x326e38
jne 0x326ca4
mov ecx, esi
push dword [edi + 4]
je 0x326e01
jne 0x326e01
jmp 0x3da7abcb
je 0x326c94
jne 0x326c94
je 0x326990
jne 0x3260eb
jmp 0x85422ced
test eax, eax
jne 0x326e67
mov eax, dword [esi + 4]
je 0x326cba
jne 0x326cba
add byte [eax], al
add byte [eax], al
je 0x326d17
jne 0x326d17
jmp 0x106f197
jne 0x326d5e
jmp 0x339978
jmp 0x326dbc
cmp dword [edi], 0x14c
je 0x326c3f
jne 0x326c3f
jmp 0x89f401b2
je 0x326ced
jne 0x326ced
je fcn.00325e90
jne 0x326a8b
jne 0x326c53
add byte [eax], al
add byte [eax], al
test eax, eax
je 0x326deb
jne 0x326deb
je fcn.00325c70
jne 0x325e2b
jmp 0x3394c2
mov edi, dword [edx]
test edi, edi
je 0x326d0b
jne 0x326d0b
add byte [eax], al
add byte [eax], al
push 0x326e44
ret
je 0x326d5e
jmp 0x326c84
jne 0x326d20
jmp 0x326d27
je 0x326ca4
push 0x326d8f
ret
mov eax, dword [esi + 4]
test eax, eax
jmp 0x326d00
push eax
call dword [sym.imp.HDWOMH_6aod_OddwmGzmpl_ieUfephml]
mov eax, 1
test ebx, ebx
jne 0x326ca4
xor eax, eax
je 0x326c53
je 0x326cb4
jne 0x326cb4
je 0xc9a838c2
je 0x326d17
jne 0x326d17
je 0x3267ee
jne fcn.00326aa0
add byte [eax], al
add byte [eax], al
je 0x326e14
jne 0x326e14
add byte [eax], al
add byte [eax], al
mov eax, dword [eax + 0xc]
jmp 0x326c64
pop edi
pop ebx
pop ebp
ret 4
mov ebx, 1
jmp 0x326d4a
mov esi, ecx
mov ecx, dword [ecx + 4]
test ecx, ecx
je 0x326ca4
jmp 0x326cda
mov edx, dword [esp + 0x14]
xor eax, eax
test edx, edx
je 0x326ca4
je 0x326c8b
jne 0x326c8b
jmp 0x8441f1fc
je 0x326d27
je 0x326d20
jne 0x326d20
add byte [eax], al
add byte [eax], al
add edi, 0x24
push edi
call fcn.00326aa0
push 0x326cf2
ret
pop esi
je 0x326d80
jne 0x326d80
je 0x3269da
jne 0x325d9b
jmp 0x679afe98
push esi
je 0x326dce
jne 0x326dce
push 0x326de9
ret
cmp dword [eax], ebp
je 0x326d86
jmp 0x326d6e
add byte [eax], al
and al, 0x6c