Function at 0x64ca18
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xdc
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
push 0x20
push 1
push 7
mov esi, ecx
push ebx
push ebx
lea ecx, [esp + 0x70]
mov dword [esp + 0x48], esi
mov dword [esp + 0x68], 1
mov dword [esp + 0x6c], 0x100
xor edi, edi
mov dword [esp + 0x60], ebx
call fcn.00663818
mov ecx, eax
call fcn.00663898
push eax
mov eax, dword [ebp + 8]
push ebx
push pe_nt_image_headers32
push eax
push ebx
lea ecx, [esp + 0x8c]
call fcn.00663868
mov ecx, eax
call fcn.00663898
push eax
push 0x120089
lea ecx, [esp + 0x3c]
push ecx
call fcn.0061ae08
cmp eax, ebx
jne 0x64d0a0
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push 0x38
lea eax, [esp + 0xb8]
push eax
push ebx
push ecx
call fcn.0061c138
cmp eax, ebx
mov dword [esp + 0x1c], eax
je 0x64cacc
mov edx, dword [esp + 0x14]
push edx
call fcn.0061b2f8
mov eax, dword [esp + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x20]
push ecx
push ebx
push ebx
push pe_nt_image_headers32
push edx
push ebx
lea ecx, [esp + 0x78]
call fcn.00663868
mov ecx, eax
call fcn.00663898
push eax
mov ecx, esi
call fcn.006489d8
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
lea ecx, [esi + 0x58]
push edx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x20], eax
call fcn.00637a28
test eax, eax
je 0x64cb43
push 8
call fcn.0060ec48
add esp, 4
cmp eax, ebx
je 0x64cb37
mov dword [eax + 4], esi
mov ecx, dword [esi + 4]
mov dword [eax], ecx
mov dword [esi + 4], 1
jmp 0x64cb39
xor eax, eax
push eax
lea ecx, [esp + 0x14]
call fcn.00636928
mov edx, dword [esp + 0xb0]
push ebx
push ebx
push 0x21
push 2
push 7
push edx
push ebx
lea ecx, [esp + 0x70]
call fcn.00663818
mov ecx, eax
call fcn.00663898
push eax
mov eax, dword [ebp + 0xc]
push ebx
push pe_nt_image_headers32
push eax
push ebx
lea ecx, [esp + 0x8c]
call fcn.00663868
mov ecx, eax
call fcn.00663898
push eax
push 0x100002
lea ecx, [esp + 0x40]
push ecx
call fcn.0061ae08
mov esi, eax
cmp esi, ebx
je 0x64cbc4
mov edx, dword [esp + 0x14]
push edx
call fcn.0061b2f8
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x64cbb9
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push eax
mov dword [ecx + 4], edx
call fcn.0060ec38
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x64cbdd
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push eax
mov dword [ecx + 4], edx
call fcn.0060ec38
add esp, 4
mov eax, dword [esp + 0x18]
push eax
call fcn.0061b2f8
push 0x10090354
lea ecx, [esp + 0x7c]
push ecx
call dword [0x1009e924]
jmp 0x64cbfb
xor ebx, ebx
cmp edi, ebx
je 0x64cc08
push edi
call fcn.0062ab58
add esp, 4
mov esi, dword [esp + 0x50]
push esi
call fcn.0062aa08
mov edx, dword [esp + 0x50]
add esp, 4
neg edx
mov edi, eax
push ebx
sbb edx, edx
lea eax, [esp + 0x7c]
and edx, eax
push edx
push 1
push 2
push esi
push edi
lea ecx, [esp + 0xb0]
mov dword [esp + 0x5c], esi
call fcn.00663818
mov ecx, eax
call fcn.00663898
mov ecx, dword [esp + 0x2c]
push eax
push ebx
push ebx
push ebx
push ecx
call fcn.0061b868
cmp eax, 0xc0000004
je 0x64d01c
cmp eax, 0x80000005
je 0x64d01c
cmp eax, 0xc0000023
je 0x64d01c
cmp eax, ebx
jne 0x64d051
cmp dword [esp + 0x4c], ebx
je 0x64cc85
mov dword [esp + 0x4c], ebx
mov edx, dword [edi + 0x3c]
shr edx, 1
add edx, 1
push edx
lea ecx, [esp + 0x3c]
call fcn.0060ff38
mov eax, dword [edi + 0x3c]
mov esi, dword [esp + 0x38]
push eax
lea ecx, [edi + 0x44]
push ecx
push esi
call fcn.0062a988
mov edx, dword [esp + 0x48]
add esp, 0xc
push esi
lea ecx, [esp + 0x60]
mov word [esi + edx*2 - 2], bx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
call fcn.00611158
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [esp + 0x28]
call fcn.00663b18
push 0x100852f8
lea ecx, [esp + 0x28]
call fcn.00663c38
mov ebx, dword [esp + 0x5c]
push ebx
lea ecx, [esp + 0x28]
call fcn.00663c38
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [esp + 0x34]
call fcn.00663b18
push 0x100852f8
lea ecx, [esp + 0x34]
call fcn.00663c38
push ebx
lea ecx, [esp + 0x34]
call fcn.00663c38
mov eax, dword [edi + 0x3c]
cmp eax, 6
jne 0x64cd2e
cmp word [esi], 0x2e
jne 0x64cd2e
cmp word [esi + 2], 0x2e
je 0x64cd3f
cmp eax, 2
jne 0x64cd39
cmp word [esi], 0x2e
je 0x64cd3f
xor ebx, ebx
cmp eax, ebx
jne 0x64cd7a
lea ecx, [esp + 0x30]
call fcn.00663bb8
lea ecx, [esp + 0x24]
call fcn.00663bb8
lea ecx, [esp + 0x5c]
call fcn.00611378
test esi, esi
je 0x64cbf9
push esi
call fcn.0062ab58
add esp, 4
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
jmp 0x64cbf9
test dword [edi + 0x38], 0x10
je 0x64cdf4
mov edx, dword [ebp + 0x10]
push edx
lea ecx, [esp + 0x28]
call fcn.00663898
push eax
lea ecx, [esp + 0x38]
call fcn.00663898
mov ecx, dword [esp + 0x34]
push eax
call fcn.0064ca18
mov esi, eax
cmp esi, ebx
je 0x64cff3
mov ecx, dword [esp + 0x14]
push ecx
mov dword [esp + 0x44], edi
call fcn.0061b2f8
lea ecx, [esp + 0x30]
call fcn.00663bb8
lea ecx, [esp + 0x24]
call fcn.00663bb8
lea ecx, [esp + 0x5c]
call fcn.00611378
lea ecx, [esp + 0x38]
call fcn.006110e8
lea ecx, [esp + 0x40]
call fcn.006110e8
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push ebx
push ebx
push 0x20
push 1
push 4
push ebx
push ebx
lea ecx, [esp + 0xc4]
call fcn.00663818
mov ecx, eax
call fcn.00663898
push eax
push ebx
push pe_nt_image_headers32
lea ecx, [esp + 0x58]
call fcn.00663898
push eax
push ebx
lea ecx, [esp + 0xb0]
call fcn.00663868
mov ecx, eax
call fcn.00663898
push eax
push 0x100001
lea eax, [esp + 0x38]
push eax
call fcn.0061ae08
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebx
push ebx
push pe_nt_image_headers32
lea ecx, [esp + 0x38]
call fcn.00663898
push eax
push ebx
lea ecx, [esp + 0x9c]
call fcn.00663868
mov ecx, eax
call fcn.00663898
mov esi, dword [esp + 0x38]
push eax
mov ecx, esi
call fcn.006489d8
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esi + 0x58]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], eax
call fcn.00637a28
test eax, eax
je 0x64cec7
push 8
call fcn.0060ec48
add esp, 4
cmp eax, ebx
je 0x64cebb
mov dword [eax + 4], esi
mov edx, dword [esi + 4]
mov dword [eax], edx
mov dword [esi + 4], 1
jmp 0x64cebd
xor eax, eax
push eax
lea ecx, [esp + 0x1c]
call fcn.00636928
mov eax, dword [edi + 0x38]
push ebx
push ebx
push 0x60
push 2
push 7
push eax
push ebx
lea ecx, [esp + 0xbc]
call fcn.00663818
mov ecx, eax
call fcn.00663898
push eax
push ebx
push pe_nt_image_headers32
lea ecx, [esp + 0x4c]
call fcn.00663898
push eax
push ebx
lea ecx, [esp + 0xb0]
call fcn.00663868
mov ecx, eax
call fcn.00663898
push eax
push 0x100002
lea ecx, [esp + 0x70]
push ecx
call fcn.0061ae08
mov esi, eax
cmp esi, ebx
jne 0x64d02b
lea ecx, [esp + 0x18]
call fcn.00636968
push 0x400000
call fcn.0062aa08
add esp, 4
push ebx
mov ebx, dword [0x10084048]
lea edx, [esp + 0x20]
push edx
mov esi, eax
mov eax, dword [esp + 0x18]
push 0x400000
push esi
push eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], 0x400000
call ebx
test eax, eax
je 0x64cf9c
lea esp, [esp]
mov eax, dword [esp + 0x1c]
test eax, eax
jbe 0x64cf9c
mov edx, dword [esp + 0x48]
push 0
lea ecx, [esp + 0x78]
push ecx
push eax
push esi
push edx
call dword [0x100840a4]
mov ecx, dword [esp + 0x10]
push 0
lea eax, [esp + 0x20]
push eax
push 0x400000
push esi
push ecx
call ebx
test eax, eax
jne 0x64cf68
lea ecx, [esp + 0x54]
call fcn.006110e8
cmp dword [ebp + 0x10], 0
je 0x64cfdf
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push 0
push pe_nt_image_headers32
push 0
push ecx
lea ecx, [esp + 0x9c]
call fcn.00663868
mov ecx, eax
call fcn.00663898
mov ecx, dword [esp + 0x38]
push eax
call fcn.006489d8
mov edx, dword [esp + 0x10]
push edx
call fcn.0061b2f8
mov eax, dword [esp + 0x48]
push eax
call fcn.0061b2f8
lea ecx, [esp + 0x30]
call fcn.00663bb8
lea ecx, [esp + 0x24]
call fcn.00663bb8
lea ecx, [esp + 0x5c]
call fcn.00611378
lea ecx, [esp + 0x38]
call fcn.006110e8
jmp 0x64cbf9
add esi, 0x100
mov dword [esp + 0x50], esi
jmp 0x64cbfb
mov edx, dword [esp + 0x10]
push edx
mov dword [esp + 0x44], edi
call fcn.0061b2f8
mov eax, dword [esp + 0x14]
push eax
call fcn.0061b2f8
lea ecx, [esp + 0x18]
call fcn.00636968
jmp 0x64cdbc
cmp dword [ebp + 0x10], ebx
mov dword [esp + 0x40], edi
je 0x64d08b
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x24]
push edx
push ebx
push ebx
push pe_nt_image_headers32
push ebx
push eax
lea ecx, [esp + 0x9c]
call fcn.00663868
mov ecx, eax
call fcn.00663898
mov ecx, dword [esp + 0x38]
push eax
call fcn.006489d8
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0061b2f8
lea ecx, [esp + 0x40]
call fcn.006110e8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc