Function at 0x2d1da50
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push eax
cbw
movzx ax, dh
push edi
xchg al, al
jmp 0x3091dd7
inc esi
cmp ebp, 0x3f1a1a94
test cl, cl
jne 0x2bcea60
pop esi
rcr bx, cl
btc di, 0x4f
bsr di, si
pop ebx
xor eax, eax
xchg di, di
cmovg di, bp
movzx edi, sp
pop edi
jmp 0x2d65cb2
test cl, cl
jmp 0x2bc12b4
jne 0x307dc70
push 0
jmp 0x2d6c9af
jmp 0x2be3f48
je 0x1efe014
mov edi, edi
test eax, ebp
cmp cl, 0x2e
je 0x2da44c8
mov cl, byte [esi + 1]
jmp 0x1efe005
jle 0x300a890
mov eax, dword [ebp - 4]
bts si, si
jmp 0x2db674f
mov dword [ebp + 8], edx
jmp 0x2d65d8a
ret
cmp dword [ebp + 8], ebx
jmp 0x2bd7ca8
inc edx
jmp 0x2d662bb
push eax
jmp 0x30318c6
ret
jne 0x30318b6
mov eax, dword [edx + 0x78]
cmp bp, sp
mov dword [ebp - 4], eax
cmc
test eax, eax
jmp 0x2db53a4
call eax
test eax, eax
jmp 0x2db7f76
jb 0x3000d6e
lea eax, [ebp - 0x114]
jmp 0x2d4489a
ret
push ebp
mov ebp, esp
test esi, 0x224248df
clc
lea esp, [esp - 0x114]
push edi
xchg di, di
stc
and edi, 0x79b26b39
mov edi, dword [ebp + 8]
test edx, esp
test si, 0xc1
test edi, edi
jmp 0x2ffe4bf
mov ecx, dword [ebp - 4]
lahf
rdtsc
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
movzx ecx, word [eax + edi]
cdq
lea edx, [ebx + 1]
jmp 0x2d33a38
pop ebp
ret
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleA_3]
jmp 0x304f09c
je 0x2db6753
mov edx, dword [eax + edi + 0x20]
jmp 0x3013818
mov dword [ebp - 8], ecx
jmp 0x2bdaab8
mov esp, ebp
movsx ebp, di
jmp 0x3082f8e
ret
push eax
movzx eax, si
push edi
movzx ax, ah
bswap eax
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress_3]
jmp 0x2d6c19e
pop esi
setl bh
mov ebx, eax
pop ebx
lea eax, [ecx + edi]
pop edi
jmp 0x2d7a1c1
cmp byte [esi + 1], 0x23
movzx ecx, bx
setno ch
mov cl, ah
lea ecx, [esi + 1]
je 0x307dc5c
push 0
push ecx
jmp 0x2be915f
mov esp, ebp
pop ebp
jmp 0x2d17865
je 0x2d1692a
inc edx
cmp edx, 0x104
jmp 0x2d16924
mov esp, ebp
pop ebp
jmp 0x2be24eb
jmp 0x2be3f48
inc eax
jmp 0x30f085f
call eax
pop esi
not di
pop ebx
movsx edi, di
xchg edi, edi
pop edi
jmp 0x2db2097
push edx
jmp 0x2d8b738
jbe 0x2db3446
lea ebx, [ebp - 0x114]
sub ebx, eax
rol dl, 0xaa
mov dl, al
mov dl, byte [eax]
test dl, dl
jmp 0x30a0561
mov esp, ebp
movsx ebp, bx
xchg bp, bp
jmp 0x3022fd5
lea edx, [edx + edi]
test ebx, edx
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
test ebp, 0xe67226c
test ebx, ebx
jmp 0x306d51a
lea ebx, [esi - 1]
jmp 0x2be3f48
push eax
jmp 0x302e152
mov ecx, esi
cmc
cmp si, 0x10f2
sub ecx, eax
cmp ebx, 0x43975ae0
cmp ecx, 0x104
jae 0x1efe014
mov dword [ebp + 8], 0
cmp di, cx
clc
test ecx, ecx
jmp 0x2d734c1
jae 0x2d4f500
lea eax, [ecx + edi]
sub cl, 0xf6
mov cl, byte [eax]
bt esi, 0x43
sal esi, 0xc6
mov esi, eax
test cl, cl
jmp 0x2bcea56
mov ecx, dword [ecx + edi]
test di, si
test ecx, ecx
jne 0x301fde3
pop esi
sar bl, cl
pop ebx
xor eax, eax
pop edi
mov esp, ebp
not ebp
xchg bp, bp
mov bp, bp
pop ebp
ret
mov esp, ebp
jmp 0x2d256ae
jb 0x2d734d4
mov eax, dword [ebp + 8]
xchg cl, cl
mov ecx, ebp
lea ecx, [ebp - 0x114]
jmp 0x30f4b58
je 0x30318b6
mov edx, dword [edx + 0x7c]
test cl, dh
cmp ebp, esi
push ebx
cmp eax, eax
stc
push esi
cmc
or esi, 0xffffffff
cmc
cmp esi, 0x606e7d6c
mov dword [ebp - 0x10], edx
mov dword [ebp - 8], esi
cmp ecx, 0xffff
ja 0x309e1b6
sub ecx, dword [eax + edi + 0x10]
test ah, 0xcc
cmp ecx, dword [eax + edi + 0x14]
jmp 0x2db6f0d
mov esi, dword [ebp - 8]
cmc
cmp esi, dword [eax + edi + 0x14]
jmp 0x3002352
jae 0x1efe014
mov edx, dword [eax + edi + 0x1c]
cmp eax, esi
lea ecx, [edx + ecx*4]
jmp 0x2dae4dd
je 0x1efe014
cmp eax, edi
jmp 0x3000d48
je 0x30318b6
mov ecx, dword [ebp + 0xc]
test sp, bx
stc
test ecx, ecx
jmp 0x30318a2
jne 0x2d55032
cmp byte [ebp + 0x10], 0
je 0x3039aef
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
rcl cl, 0xc2
sub edx, edx
sub ebx, eax
xchg esi, eax
mov edi, edi
rol cl, 0xf9
mov eax, 0x4271305e
cmova esi, ecx
rcl cl, cl
mov cl, dl
bswap si
btc esi, 0xaf
rol eax, cl
lea esi, [ebp + edx - 0x114]
add al, dl
xor al, byte [ebx + esi]
jmp 0x307a420
jae 0x1efe014
mov ecx, dword [eax + edi + 0x1c]
jmp 0x301fdce
ja 0x2bc12ba
movsx ecx, cl
test edi, 0x7224655a
cmc
cmp bx, sp
lea edx, [edx + edx*4]
cmc
lea edx, [ecx + edx*2 - 0x30]
mov cl, byte [esi]
jmp 0x1f0097e
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
sbb ax, sp
btr esi, edx
mov eax, dword [ebp + 8]
bts si, sp
lea esi, [ebx + eax]
mov eax, dword [ebp + 0x10]
clc
push eax
sar esi, 1
mov eax, dword [edx + esi*4]
add eax, edi
jmp 0x30755c9
dec ebx
jmp 0x2d7ccd0
lea edx, [ecx + esi*4]
setnp cl
test bl, 0x7a
mov ecx, dword [edx + edi]
stc
test ecx, ecx
je 0x1efe014
cmp ecx, eax
jb 0x2d4f500
mov edx, dword [ebp - 0x10]
lea edx, [edx + eax]
cmp ecx, edx
jmp 0x2daaad5
pop ebp
jmp 0x2d3c4cb
call fcn.02d1da50
add esp, 0xc
pop esi
bswap ebx
mov bx, 0x23c
pop ebx
xchg di, di
mov edi, ecx
movzx edi, bp
pop edi
mov esp, ebp
xchg ebp, ebp
pop ebp
jmp 0x2d1321d
mov dword [ebp + 8], esi
jmp 0x2bc2b7a
je 0x30318b6
mov eax, 0x5a4d
cmp word [edi], ax
je 0x30f50e7
xor eax, eax
bswap di
pop edi
mov esp, ebp
xchg bp, bp
movsx ebp, bp
pop ebp
ret
call fcn.02d1da50
add esp, 0xc
not edi
movzx esi, cx
pop esi
pop ebx
bswap edi
pop edi
jmp 0x2d5bacd
mov eax, dword [ebp + 0xc]
jmp 0x1efb198
call eax
test eax, eax
jmp 0x307f43f
call eax
pop esi
mov di, 0xea2
pop ebx
pop edi
jmp 0x2d3b768
jl 0x2db6753
jmp 0x300a89c
call fcn.02da90ae
add esp, 4
cmp sp, 0x211c
cmp eax, 0xffffffff
je 0x2d8aca3
test eax, eax
je 0x2d22c00
cmp eax, 1
jne 0x2be3f48
inc esi
jmp 0x30311dd
mov byte [esi], al
jmp 0x2d5c35d
mov cl, byte [esi + 2]
lea esi, [esi + 2]
cmc
sub edx, edx
test si, bx
test cl, cl
je 0x2bc12ba
mov bl, cl
sub bl, 0x30
inc esi
clc
cmc
cmp cx, si
cmp bl, 9
jmp 0x3006940
jne 0x2db7f7c
lea edx, [ebp - 0x114]
push edx
jmp 0x30c8c84
pop ebp
ret
mov eax, dword [sym.imp.kernel32.dll_GetProcAddress_3]
jmp 0x306096a
cmp dword [edx], 0x4550
jmp 0x2d14131
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
jmp 0x2d2e4c7
je 0x2db3446
mov byte [ebx + eax], dl
dec dl
not dh
mov edx, dword [ebp + 8]
jmp 0x2be4c30
mov eax, dword [sym.imp.kernel32.dll_LoadLibraryA_3]
jmp 0x2d143ce
mov dword [ebp + 8], edx
cmp edx, ecx
jmp 0x2db3440
push ecx
jmp 0x2d2c5db
mov edx, dword [edi + 0x3c]
cmc
add edx, edi
cmc
jmp 0x309dc4a