Function at 0xb2df71
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jne 0xa781a3
mov eax, dword [edx + 0x78]
test bh, dh
cmp bl, 0xdc
test dh, 0xaa
mov dword [ebp - 4], eax
cmp cx, 0x54b2
test ebx, 0x313728a5
test eax, eax
je 0xa781a3
mov edx, dword [edx + 0x7c]
push ebx
test si, 0x5f69
push esi
cmp di, 0x71e0
jmp 0xa8022b
jmp 0xa93c35
push eax
jmp 0xaada75
mov esp, ebp
mov ebp, ebp
pop ebp
ret
cmp byte [esi + 1], 0x23
cmove ecx, edx
xchg ch, cl
lea ecx, [esi + 1]
jmp 0xa1969d
mov dword [ebp - 8], ecx
jmp 0xab8508
jne 0xa93c35
inc esi
jmp 0xa788be
jb 0xa7407a
mov eax, dword [ebp + 8]
movsx ecx, bp
mov cl, 0xd2
lea ecx, [ebp - 0x114]
jmp 0xb26ebb
je 0xa1f6ef
push 0
jmp 0xa19969
mov esp, ebp
pop ebp
jmp 0xab58ab
je 0xab5871
cmp ecx, eax
jmp 0xa76508
push ecx
push eax
jmp 0xabbe19
sub esp, 0x114
test si, 0x4259
cmp si, ax
push edi
mov edi, dword [ebp + 8]
cmp al, 0x6f
test edi, edi
jmp 0xab5ea3
ret
ret
mov cl, byte [esi + 2]
cmp esi, 0x3f0a7d50
test eax, eax
lea esi, [esi + 2]
stc
cmp esp, ecx
cmc
xor edx, edx
stc
test cl, cl
jmp 0xaa9370
jne 0xaaee0c
lea edx, [ebp - 0x114]
bswap eax
lahf
mov al, 0xa0
push edx
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xab6c0a
jae 0xab5871
mov ecx, dword [eax + edi + 0x1c]
lea edx, [ecx + esi*4]
mov ecx, dword [edx + edi]
cmp esp, edx
cmc
test ecx, ecx
jmp 0xa1972b
jne 0xaa9376
push 0
jmp 0xa77fad
jne 0xa19731
pop esi
inc bh
sar di, 0x3b
pop ebx
sub eax, eax
mov edi, ebp
cmove edi, ebp
pop edi
jmp 0x847b90
jbe 0x84927c
lea ebx, [ebp - 0x114]
clc
sub ebx, eax
and dl, 0xa2
mov dl, byte [eax]
test sp, dx
test dl, dl
jmp 0xa99a85
mov edx, dword [edi + 0x3c]
add edx, edi
test bh, 0x7b
cmp dword [edx], 0x4550
jmp 0x845e29
call eax
test eax, eax
jmp 0xa1ffd4
jb 0xa8c48a
mov edx, dword [ebp - 0x10]
test bp, 0x6fa9
stc
test ah, dh
lea edx, [edx + eax]
cmp ecx, 0x5d94153
cmp al, ah
cmp ecx, edx
jmp 0xa8a533
push edx
jmp 0xa8490a
je 0xa74a65
xor eax, eax
pop edi
jmp 0xabd93b
mov dword [ebp + 8], esi
jmp 0xa8ff17
push eax
bt eax, 0x12
jmp 0xa7a9bd
sar esi, 1
cmc
sbb al, bh
adc al, 0x8b
mov eax, dword [edx + esi*4]
stc
cmp ebp, 0x11a87198
add eax, edi
jmp 0xb2da26
jb 0xa801ef
lea eax, [ebp - 0x114]
jmp 0x846370
mov dword [ebp - 8], esi
clc
test si, di
cmp ecx, 0xffff
jmp 0xa87345
call eax
pop esi
pop ebx
movzx edi, dx
not di
pop edi
mov esp, ebp
mov ebp, 0x2b485ad4
cmovle ebp, esp
bswap ebp
pop ebp
jmp 0xa1c69d
je 0xb2ad54
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
sub edx, edx
bts si, bp
rcr cl, 0x3b
sub ebx, eax
bt eax, ebx
mov edi, edi
bt si, sp
mov eax, 0x502b2271
cmc
not esi
mov cl, dl
bt si, dx
rol eax, cl
xor si, 0x5806
lea esi, [ebp + edx - 0x114]
add al, dl
test bh, 0x85
cmp bp, si
cmc
xor al, byte [ebx + esi]
mov byte [esi], al
je 0xa7aaff
inc edx
test edi, 0x3a217d8a
jmp 0xb2d4bc
or esi, 0xffffffff
cmc
test bp, bx
mov dword [ebp - 0x10], edx
test dh, bl
cmc
jmp 0xa7cd13
push eax
jmp 0xab72a5
ja 0xa8f19f
sub ecx, dword [eax + edi + 0x10]
cmp eax, ecx
cmp ecx, dword [eax + edi + 0x14]
jae 0xab5871
mov edx, dword [eax + edi + 0x1c]
test di, 0x953
lea ecx, [edx + ecx*4]
mov ecx, dword [ecx + edi]
cmp esi, 0x3d174dc2
clc
test ecx, ecx
jmp 0xa73ebf
jae 0xa8c48a
lea eax, [ecx + edi]
ror esi, 0xcd
stc
mov cl, byte [eax]
btc si, bp
btc esi, 0x21
cmp al, 0x7d
mov esi, eax
clc
cmp edi, esp
cmc
test cl, cl
je 0xab5871
mov edi, edi
stc
cmp cl, 0x2e
je 0xb28377
mov cl, byte [esi + 1]
jmp 0xab5867
pop esi
movzx ebx, dx
xchg al, bl
pop ebx
mov ah, bh
lea eax, [ecx + edi]
mov di, 0x1589
pop edi
mov esp, ebp
pop ebp
jmp 0xa965b7
mov ebx, dword [eax + edi + 0x18]
test ebx, ebx
je 0xaba515
mov edx, dword [eax + edi + 0x20]
jmp 0xaa1fa9
jmp 0xa93c35
je 0xa93c2a
test eax, eax
jmp 0xb2ce34
mov ecx, dword [ebp + 0xc]
bts dx, si
movzx eax, ax
sar eax, 0xa3
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
lea esi, [ebx + eax]
test si, 0x679a
mov eax, dword [ebp + 0x10]
jmp 0xa7a0e8
lea ebx, [esi - 1]
test cx, ax
cmp eax, 0x47d557a8
cmp dword [ebp + 8], ebx
jmp 0xaba505
pop edi
jmp 0xa196ef
ret
je 0x84927c
mov byte [ebx + eax], dl
dec dh
mov edx, dword [ebp + 8]
jmp 0xaba046
dec ebx
add edx, edi
cmp bx, 0x616
cmc
stc
mov dword [ebp + 8], 0
mov dword [ebp - 0xc], edx
test bp, si
stc
test ebx, ebx
jmp 0xab4834
ret
je 0xa731e9
mov bl, cl
sub bl, 0x30
jmp 0xaafd19
push edi
movzx eax, di
mov eax, esp
movsx ax, ch
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0xa7e04c
je 0xab5871
cmp eax, edi
jne 0x847c72
cmp byte [ebp + 0x10], 0
jmp 0xa801cc
inc esi
test bp, 0xe06
cmp bl, 9
ja 0xa731e9
movsx ecx, cl
cmp sp, ax
clc
lea edx, [edx + edx*4]
test dh, dh
lea edx, [ecx + edx*2 - 0x30]
xadd cl, cl
mov cl, byte [esi]
clc
cmp si, 0x1891
test cl, cl
jmp 0xa731e3
jl 0xaba515
jmp 0xa9350b
inc esi
stc
test cl, cl
jne 0xa8a55d
pop esi
pop ebx
btc di, di
xor eax, eax
mov edi, 0x21da7a59
pop edi
jmp 0xb2ceb4
ret
je 0xa781a3
mov ecx, dword [ebp + 0xc]
cmc
test ecx, edi
test ecx, ecx
jmp 0xb2d287
cmp word [edi], ax
jmp 0xa7819d
call eax
test eax, eax
jmp 0xaaee06
call fcn.00b2df71
add esp, 0xc
cmovb bx, si
mov di, bp
movsx bx, ch
pop esi
movzx edi, sp
pop ebx
jmp 0xa940ca
mov dword [ebp + 8], edx
jmp 0x845e7c
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edi + 0x24]
lea eax, [edx + esi*2]
cmovp edx, eax
movzx ecx, word [eax + edi]
setns dl
xchg dh, dh
cmovns edx, esp
lea edx, [ebx + 1]
jmp 0x847dc4
inc edx
jmp 0xb2a2cc
jle 0xa934fb
mov eax, dword [ebp - 4]
bsr si, dx
mov esi, dword [ebp - 8]
cmp esi, dword [eax + edi + 0x14]
jmp 0xa20890
call fcn.00b2df71
add esp, 0xc
pop esi
pop ebx
pop edi
jmp 0xb2e4b1
jae 0xab5871
mov dword [ebp + 8], 0
jmp 0xb29562
mov esp, ebp
not bp
cmovb bp, ax
pop ebp
ret
push ecx
mov byte [ebp + eax - 0x114], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0xa74ba1
mov ecx, esi
test ch, 0xd7
stc
sub ecx, eax
cmp bp, 0x2ecc
cmp ecx, 0x104
jmp 0xabcb2b
test ecx, ecx
jmp 0xa74068
inc eax
cmp ax, 0x25b1
stc
test cx, 0x817
mov dword [ebp + 8], edx
cmp cx, 0x7ed4
cmp edx, ecx
jmp 0x849276
mov eax, dword [ebp + 0xc]
jmp 0xb2df53
je 0xab91d5
cmp eax, 1
jmp 0x84803a
mov esp, ebp
movsx ebp, di
mov ebp, 0x1d995a87
pop ebp
jmp 0xa1b1a6
je 0xa781a3
mov eax, 0x5a4d
jmp 0xab5f2e
cmp edx, 0x104
jmp 0xa7aaf9
call fcn.00a7e6ac
lea esp, [esp + 4]
clc
cmp eax, 0xffffffff
jmp 0xa90e11
push eax
push edi
movzx ax, cl
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop esi
pop ebx
pop edi
mov esp, ebp
pop ebp
ret
push ebp
bt bp, dx
mov ebp, esp
jmp 0xa1af21
mov esp, ebp
xchg ebp, ebp
not ebp
pop ebp
jmp 0xaa35e9