Function at 0x2b36f90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x2b37c41
sub esp, 0xa0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x9c], ecx
lea edx, [0x2d0fce0]
mov dword [esp], edx
mov ebx, dword [esp + 0xac]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x98]
mov dword [esp + 8], ebp
call fcn.02aec6b0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x2b375f1
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x9c], ecx
lea edx, [0x2d0fce0]
mov dword [esp], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
lea ebx, [esp + 0x98]
mov dword [esp + 8], ebx
call fcn.02aeca30
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
je 0x2b375e2
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [eax + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x2b375d3
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], ecx
call fcn.02b35bb0
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.02b35bb0
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x2b370cb
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.02ae2800
movzx eax, byte [esp + 0xc]
test al, al
jne 0x2b370da
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.02b35c40
mov eax, dword [esp + 4]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call fcn.02b35c40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x68]
test ecx, ecx
jne 0x2b37118
test eax, eax
je 0x2b371b0
test ecx, ecx
je 0x2b3711c
test eax, eax
jne 0x2b3712b
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov dword [esp + 0x64], eax
mov eax, dword [ecx]
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.02b35dd0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.02b366b0
mov eax, dword [esp + 0x64]
mov eax, dword [eax]
mov ecx, dword [esp + 4]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x28], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.02b35dd0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.02b366b0
mov eax, dword [esp + 0x28]
cmp dword [esp + 8], eax
jne 0x2b375c4
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.02ae2800
movzx eax, byte [esp + 0xc]
test al, al
je 0x2b375c4
movzx ebx, byte [esp + 0x16]
lea ebp, [ebx - 1]
xchg ebp, eax
cmp al, 0xf
xchg ebp, eax
jbe 0x2b375b5
cmp bl, 0x15
ja 0x2b3745b
cmp bl, 0x12
jbe 0x2b373a6
cmp bl, 0x13
jne 0x2b3728b
mov ebx, dword [esp + 0xa4]
movzx ebp, word [ebx + 0x22]
mov esi, dword [esp + 0xa8]
cmp word [esi + 0x22], bp
jne 0x2b3727c
movzx ebp, word [ebx + 0x20]
movzx edi, word [esi + 0x20]
cmp di, bp
jne 0x2b3727c
nop
mov eax, edi
movzx edi, byte [ebx + 0xc]
xchg edi, eax
test al, 1
xchg edi, eax
je 0x2b3721c
mov ecx, 0x34
jmp 0x2b37221
mov ecx, 0x24
movzx ebp, bp
lea edi, [ecx + ebx]
cmp ebp, 0x100000
ja 0x2b37c34
nop
mov ecx, ebx
movzx ebx, byte [esi + 0xc]
test bl, 1
je 0x2b37246
mov edx, 0x34
jmp 0x2b3724b
mov edx, 0x24
mov dword [esp + 0x5c], edi
mov dword [esp + 0x1c], ebp
movzx ebx, ax
mov dword [esp + 0x20], ebx
mov eax, esi
add esi, edx
mov dword [esp + 0x58], esi
mov edx, dword [esp + 0xac]
mov dword [esp + 0x48], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
jmp 0x2b37a62
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp bl, 0x14
jne 0x2b37330
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.02b366b0
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.02b366b0
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x2b37321
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.02ae2800
movzx eax, byte [esp + 0xc]
test al, al
je 0x2b37321
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x28]
mov ebp, dword [esp + 0xa8]
cmp dword [ebp + 0x28], ebx
jne 0x2b37312
mov dword [esp + 0x44], ebx
xor eax, eax
jmp 0x2b37840
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
test al, al
jne 0x2b37368
xor eax, eax
jmp 0x2b37398
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
cmp bl, 0x11
je 0x2b373fe
cmp bl, 0x12
jne 0x2b37600
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0xa8]
cmp dword [edx + 0x24], ecx
je 0x2b373ce
xor eax, eax
jmp 0x2b373f0
mov eax, dword [eax + 0x20]
mov ecx, dword [edx + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
test al, al
je 0x2b3744b
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa8]
cmp dword [ecx + 0x28], eax
sete al
jmp 0x2b3744d
xor eax, eax
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
cmp bl, 0x17
ja 0x2b374e5
cmp bl, 0x16
jne 0x2b374a7
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
cmp bl, 0x18
je 0x2b375a6
cmp bl, 0x19
jne 0x2b375a1
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa4]
cmp dword [edx + 0x28], ecx
jne 0x2b37592
mov eax, dword [edx + 0x20]
mov dword [esp], eax
call fcn.02b366b0
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.02b366b0
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x2b37583
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.02ae2800
movzx eax, byte [esp + 0xc]
test al, al
je 0x2b37583
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0xa8]
xor eax, eax
jmp 0x2b3766c
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp bl, 0x1a
jne 0x2b37600
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
call fcn.02b155b0
lea eax, [0x2d49c6b]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.02b15e90
mov dword [esp + 4], 0
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
call fcn.02b15b30
call fcn.02b157d0
call fcn.02b15620
lea eax, [0x2d4946c]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.02b13bb0
mov esi, dword [esp + 0x30]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0xa8]
mov edx, dword [esp + 0xa4]
cmp eax, ebx
jge 0x2b3780c
mov esi, dword [edx + 0x24]
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x2b37822
lea edi, [eax + eax*2]
mov edx, dword [ebp + 0x24]
mov ebp, dword [ebp + 0x28]
cmp eax, ebp
jae 0x2b3781b
mov dword [esp + 0x90], esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x40], edi
mov eax, dword [esi + edi*4]
mov dword [esp], eax
call fcn.02b366b0
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.02b366b0
mov eax, dword [esp + 0x3c]
cmp dword [esp + 8], eax
jne 0x2b377fd
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.02ae2800
movzx eax, byte [esp + 0xc]
test al, al
je 0x2b377fd
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
test al, al
je 0x2b377ee
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x90]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.02b36780
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.02b36780
mov eax, dword [esp + 0x3c]
cmp dword [esp + 8], eax
jne 0x2b377df
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.02ae2800
movzx eax, byte [esp + 0xc]
test al, al
je 0x2b377df
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x90]
mov ebx, dword [ebx + edx*4 + 8]
mov ebp, dword [esp + 0x8c]
lea edx, [ebp + edx*4 + 8]
cmp dword [edx], ebx
je 0x2b37653
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov ecx, ebp
call fcn.02b3e900
call fcn.02b3e900
mov esi, dword [esp + 0x2c]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0xa8]
mov edx, dword [esp + 0xa4]
cmp eax, ebx
jge 0x2b37a19
mov esi, dword [edx + 0x24]
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x2b37a2f
lea edi, [esi + eax*8]
mov edx, dword [ebp + 0x24]
mov ebp, dword [ebp + 0x28]
cmp eax, ebp
jae 0x2b37a28
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x6c], edi
lea ecx, [esi + eax*8]
mov ecx, dword [ecx]
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.02b35dd0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x88]
lea edx, [ecx + eax*8]
mov dword [esp + 0x60], edx
lea ebx, [ecx + eax*8]
mov ebx, dword [ebx]
mov ebp, dword [esp + 8]
mov dword [esp + 0x80], ebp
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.02b35dd0
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
call fcn.02b366b0
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call fcn.02b366b0
mov eax, dword [esp + 0x40]
cmp dword [esp + 8], eax
jne 0x2b37a0a
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.02ae2800
movzx eax, byte [esp + 0xc]
test al, al
je 0x2b37a0a
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.02b368a0
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call fcn.02b368a0
mov eax, dword [esp + 0x40]
cmp dword [esp + 8], eax
jne 0x2b379fb
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.02ae2800
movzx eax, byte [esp + 0xc]
test al, al
je 0x2b379fb
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x84]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x6c]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.02b36090
mov eax, dword [esp + 8]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x88]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.02b36090
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
test al, al
jne 0x2b37827
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov ecx, ebp
call fcn.02b3e900
call fcn.02b3e900
mov eax, dword [esp + 0x34]
inc eax
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x5c]
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xa8]
mov esi, dword [esp + 0x34]
cmp esi, ebp
jge 0x2b37aaa
jae 0x2b37c2b
mov edi, dword [edi + esi*4]
cmp esi, ebx
jae 0x2b37c22
mov eax, dword [esp + 0x58]
mov ecx, dword [eax + esi*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
test al, al
jne 0x2b37a34
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
nop
movzx ebx, byte [ecx + 0xc]
test bl, 1
je 0x2b37abb
mov ebx, 0x34
jmp 0x2b37ac0
mov ebx, 0x24
movzx ebp, word [ecx + 0x22]
and ebp, 0x7fff
movzx esi, word [ecx + 0x20]
add ebp, esi
movzx ebp, bp
add ebx, ecx
cmp ebp, 0x100000
ja 0x2b37c16
movzx esi, si
cmp esi, ebp
ja 0x2b37c0d
nop
sub ebp, esi
lea edi, [esi - 0x100000]
xchg edi, ebx
neg ebx
xchg edi, ebx
xchg edi, ebx
neg ebx
xchg edi, ebx
shl esi, 2
sar edi, 0x1f
and esi, edi
add ebx, esi
movzx esi, byte [eax + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
je 0x2b37b1d
mov ecx, 0x34
jmp 0x2b37b22
mov ecx, 0x24
mov dword [esp + 0x54], ebx
movzx esi, word [eax + 0x22]
and esi, 0x7fff
movzx edi, word [eax + 0x20]
add esi, edi
movzx esi, si
lea ebx, [ecx + eax]
cmp esi, 0x100000
ja 0x2b37c01
movzx eax, di
cmp eax, esi
ja 0x2b37bfa
mov dword [esp + 0x18], ebp
sub esi, eax
mov dword [esp + 0x24], esi
lea edi, [eax - 0x100000]
xchg edi, ebx
neg ebx
xchg edi, ebx
xchg edi, ebx
neg ebx
xchg edi, ebx
shl eax, 2
sar edi, 0x1f
and eax, edi
add ebx, eax
mov dword [esp + 0x50], ebx
mov edi, dword [esp + 0x54]
xor eax, eax
jmp 0x2b37ba1
mov eax, dword [esp + 0x38]
inc eax
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0xac]
mov esi, dword [esp + 0x24]
mov ebx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
cmp eax, ebp
jge 0x2b37bdd
jae 0x2b37bf3
mov edi, dword [edi + eax*4]
cmp eax, esi
jae 0x2b37bec
mov dword [esp + 0x38], eax
mov ecx, dword [ebx + eax*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.02b36f90
movzx eax, byte [esp + 0xc]
test al, al
jne 0x2b37b85
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov ecx, esi
call fcn.02b3e900
mov ecx, ebp
call fcn.02b3e900
mov ecx, esi
call fcn.02b3e960
mov ecx, esi
mov edx, 0x100000
call fcn.02b3e920
mov eax, esi
mov ecx, ebp
call fcn.02b3e960
mov ecx, ebp
mov edx, 0x100000
call fcn.02b3e920
mov eax, esi
mov ecx, ebx
call fcn.02b3e900
mov eax, esi
mov ecx, ebp
call fcn.02b3e900
mov ecx, ebp
mov edx, 0x100000
call fcn.02b3e920
nop
call fcn.02b3d440
jmp fcn.02b36f90