Function at 0x622b33
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10016ea0
mov eax, dword fs:[0]
push eax
sub esp, 0x128
push ebx
push esi
push edi
mov eax, dword [0x1001c020]
xor eax, esp
push eax
lea eax, [esp + 0x138]
mov dword fs:[0], eax
push dword [ebp + 0x1c]
call fcn.00623ff9
test al, al
jne 0x622b8e
mov eax, 0x80004001
mov ecx, dword [esp + 0x138]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x30
mov eax, dword [ebp + 0x2c]
xor ebx, ebx
mov byte [eax], bl
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], 4
mov dword [esp + 0x60], 0x10019f7c
mov dword [esp + 0x140], ebx
mov dword [esp + 0x38], ebx
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x144], 1
call fcn.00629e2f
pop ecx
mov edi, dword [ebp + 0xc]
lea esi, [esp + 0x38]
mov byte [esp + 0x140], 2
call fcn.006225cd
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 0x30], ebx
mov dword [esp + 0x28], ebx
jle 0x622ce9
push 0x18
call fcn.006282fc
pop ecx
test eax, eax
je 0x622c0d
and dword [eax + 4], 0
mov dword [eax], 0x10019f60
mov edi, eax
jmp 0x622c0f
xor edi, edi
mov dword [esp + 0x30], edi
test edi, edi
je 0x622c1d
mov eax, dword [edi]
push edi
call dword [eax + 4]
mov ecx, dword [esp + 0x28]
mov byte [esp + 0x140], 3
lea eax, [esp + 0x38]
mov dword [edi + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [edi + 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [edi + 0x14], eax
mov eax, dword [ebp + 0x18]
lea eax, [eax + ecx*8]
mov ecx, dword [eax]
add dword [ebp + 0x10], ecx
mov dword [esp + 0x20], eax
mov eax, dword [eax + 4]
adc dword [ebp + 0x14], eax
push 0x28
call fcn.006282fc
pop ecx
test eax, eax
je 0x622c6f
and dword [eax + 4], 0
mov dword [eax], 0x10019f50
and dword [eax + 8], 0
mov ebx, eax
jmp 0x622c71
xor ebx, ebx
mov dword [esp + 0x18], ebx
test ebx, ebx
je 0x622c7f
mov eax, dword [ebx]
push ebx
call dword [eax + 4]
lea esi, [ebx + 8]
mov byte [esp + 0x140], 4
call fcn.006225cd
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
and dword [ebx + 0x18], 0
and dword [ebx + 0x1c], 0
mov dword [ebx + 0x10], eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x64]
push eax
mov dword [ebx + 0x14], ecx
mov byte [ebx + 0x20], 0
call fcn.00623c42
mov byte [esp + 0x140], 3
mov eax, dword [ebx]
push ebx
call dword [eax + 8]
mov byte [esp + 0x140], 2
mov eax, dword [edi]
push edi
call dword [eax + 8]
inc dword [esp + 0x28]
mov eax, dword [ebp + 0x1c]
mov ecx, dword [esp + 0x28]
cmp ecx, dword [eax + 0x30]
jl 0x622bf3
mov edi, dword [ebp + 0x1c]
mov eax, dword [edi + 8]
lea esi, [esp + 0xcc]
mov dword [esp + 0x28], eax
call fcn.00622abd
push edi
mov eax, esi
mov byte [esp + 0x144], 5
call fcn.006228a3
mov ebx, dword [ebp + 8]
cmp byte [ebx], 0
pop ecx
je 0x622d33
lea esi, [ebx + 4]
lea eax, [esp + 0xcc]
call fcn.006229b0
neg al
sbb al, al
inc al
je 0x623012
lea ecx, [ebx + 0x78]
push dword [ecx + 8]
mov eax, dword [ecx]
xor edi, edi
push edi
call dword [eax + 4]
mov eax, dword [ebx + 0x74]
cmp eax, edi
je 0x622d51
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebx + 0x74], edi
cmp byte [ebx + 0x68], 0
je 0x622d91
push 0x88
call fcn.006282fc
pop ecx
cmp eax, edi
je 0x622d6f
mov esi, eax
call fcn.0062368c
jmp 0x622d71
xor eax, eax
mov edi, eax
lea esi, [ebx + 0x74]
mov dword [ebx + 0x6c], eax
call fcn.006225cd
mov eax, dword [ebx + 0x6c]
test eax, eax
je 0x622d8a
add eax, 4
jmp 0x622d8c
xor eax, eax
mov dword [ebx + 0x70], eax
xor edi, edi
mov ecx, dword [ebx + 0x70]
mov eax, dword [ecx]
lea edx, [esp + 0xcc]
push edx
call dword [eax]
mov esi, eax
cmp esi, edi
je 0x622df7
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x144], 2
call fcn.00621891
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x144], 0
call dword [0x10018000]
mov eax, dword [esp + 0x38]
cmp eax, edi
je 0x622ddc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, esi
or dword [esp + 0x140], 0xffffffff
lea eax, [esp + 0x60]
push eax
call fcn.006237d5
mov eax, edi
jmp 0x622b76
cmp dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
jle 0x622f0f
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x24]
mov esi, dword [eax + ecx*4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], edi
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x148], 7
push dword [esi + 4]
push dword [esi]
call fcn.006272e7
add esp, 0x10
mov dword [esp + 0x20], eax
cmp eax, edi
jne 0x622f43
mov dword [esp + 0x2c], edi
mov byte [esp + 0x140], 8
cmp dword [esi + 0x14], 1
jne 0x622e87
cmp dword [esi + 0x18], 1
jne 0x622e87
cmp dword [esp + 0x1c], edi
je 0x622fae
mov esi, dword [esp + 0x1c]
mov eax, dword [esi]
push esi
call dword [eax + 4]
cmp byte [ebx + 0x68], 0
mov dword [esp + 0x2c], esi
je 0x622eb1
mov eax, dword [ebx + 0x6c]
mov edi, esi
call fcn.00626a65
jmp 0x622eaf
cmp dword [esp + 0x14], edi
je 0x623004
mov esi, dword [esp + 0x14]
mov eax, dword [esi]
push esi
call dword [eax + 4]
cmp byte [ebx + 0x68], 0
mov dword [esp + 0x2c], esi
je 0x622eb1
mov eax, dword [ebx + 0x6c]
mov edi, esi
call fcn.00626a86
xor edi, edi
lea eax, [esp + 0x2c]
push eax
lea eax, [ebx + 0x78]
push eax
call fcn.00623c42
mov byte [esp + 0x140], 7
cmp esi, edi
je 0x622ed1
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov byte [esp + 0x140], 6
mov eax, dword [esp + 0x14]
cmp eax, edi
je 0x622ee7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [esp + 0x140], 5
mov eax, dword [esp + 0x1c]
cmp eax, edi
je 0x622efd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x28]
jl 0x622e05
lea esi, [ebx + 4]
lea eax, [esp + 0xcc]
call fcn.006236e2
push dword [esi + 0x58]
add esi, 0x50
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 4]
lea eax, [esp + 0x11c]
push eax
mov eax, esi
call fcn.00623b34
mov byte [ebx], 1
jmp 0x623014
mov byte [esp + 0x140], 6
mov eax, dword [esp + 0x14]
cmp eax, edi
je 0x622f59
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [esp + 0x140], 5
mov eax, dword [esp + 0x1c]
cmp eax, edi
je 0x622f6f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x144], 2
call fcn.00621891
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x144], 0
call dword [0x10018000]
mov eax, dword [esp + 0x38]
cmp eax, edi
je 0x622fa5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [esp + 0x20]
jmp 0x622dde
mov byte [esp + 0x140], 6
mov eax, dword [esp + 0x14]
cmp eax, edi
je 0x622fc4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x144], 2
call fcn.00621891
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x144], 0
call dword [0x10018000]
mov eax, dword [esp + 0x38]
cmp eax, edi
je 0x622ffa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, 0x80004001
jmp 0x622dde
mov byte [esp + 0x140], 5
mov eax, dword [esp + 0x1c]
jmp 0x622fba
xor edi, edi
mov ecx, dword [ebx + 0x70]
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esp + 0x28], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x14], edi
jle 0x6233c1
mov dword [esp + 0x54], edi
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x14]
mov esi, dword [eax + ecx*4]
mov eax, dword [ebx + 0x84]
mov ecx, dword [esp + 0x54]
mov edi, dword [ecx + eax]
and dword [esp + 0x34], 0
mov dword [esp + 0x20], esi
lea edx, [esp + 0x34]
push edx
mov byte [esp + 0x144], 9
mov eax, dword [edi]
mov ecx, dword [eax]
push 0x10019aa0
push eax
call dword [ecx]
mov eax, dword [esp + 0x34]
test eax, eax
je 0x6230a0
mov ecx, dword [esi + 0xc]
cmp ecx, 0xffffffff
ja 0x623433
mov edx, dword [eax]
push ecx
push dword [esi + 0x10]
push eax
call dword [edx + 0xc]
mov dword [esp + 0x18], eax
test eax, eax
jne 0x623474
mov eax, dword [esp + 0x34]
mov byte [esp + 0x140], 5
test eax, eax
je 0x6230b2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp byte [ebp + 0x30], 0
je 0x623109
and dword [esp + 0x2c], 0
lea edx, [esp + 0x2c]
push edx
mov byte [esp + 0x144], 0xa
mov eax, dword [edi]
mov ecx, dword [eax]
push 0x10019ac0
push eax
call dword [ecx]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x6230f7
push dword [ebp + 0x34]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov dword [esp + 0x18], eax
test eax, eax
jne 0x6234c9
mov eax, dword [esp + 0x2c]
mov byte [esp + 0x140], 5
test eax, eax
je 0x623109
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
and dword [esp + 0x1c], 0
lea ecx, [esp + 0x1c]
push ecx
mov byte [esp + 0x144], 0xb
mov edi, dword [edi]
mov eax, dword [edi]
push 0x10019b20
push edi
call dword [eax]
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x623234
mov ecx, dword [ebp + 0x28]
test ecx, ecx
je 0x6234d7
and dword [esp + 0x24], 0
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x144], 0xc
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
mov edi, eax
test edi, edi
jne 0x623525
and dword [esp + 0x9c], eax
and dword [esp + 0xa0], eax
mov dword [esp + 0x98], 0x10019b6c
mov eax, dword [ebp + 0x2c]
mov byte [esp + 0x140], 0xd
mov edi, dword [esp + 0x24]
mov byte [eax], 1
lea eax, [esp + 0x74]
call fcn.006239a8
mov byte [esp + 0x140], 0xe
mov edi, dword [esp + 0x78]
add edi, edi
lea esi, [esp + 0x98]
call fcn.0061e984
cmp dword [esp + 0x78], 0
mov esi, dword [esp + 0xa0]
jle 0x6231e0
mov edx, dword [esp + 0x74]
mov eax, dword [esp + 0x78]
mov ecx, esi
sub edx, esi
mov dword [esp + 0x18], eax
movzx eax, word [edx + ecx]
mov byte [ecx], al
shr eax, 8
mov byte [ecx + 1], al
inc ecx
inc ecx
dec dword [esp + 0x18]
jne 0x6231cc
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
push edi
push esi
push eax
call dword [ecx + 0xc]
mov byte [esp + 0x140], 0xd
push dword [esp + 0x74]
mov edi, eax
call fcn.0062c37f
pop ecx
mov byte [esp + 0x140], 0xc
push esi
test edi, edi
jne 0x623584
mov dword [esp + 0x9c], 0x10019b6c
call fcn.0062c37f
pop ecx
push dword [esp + 0x24]
call dword [0x10018138]
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
mov byte [esp + 0x140], 5
test eax, eax
je 0x623246
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edx, dword [esi + 0x14]
mov edi, dword [esi + 0x18]
push 4
xor esi, esi
pop ecx
add dword [esp + 0x54], ecx
mov eax, 0x10019e9c
mov dword [esp + 0x20], edx
mov dword [esp + 0x84], esi
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], ecx
mov dword [esp + 0x80], eax
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], esi
mov dword [esp + 0xb0], esi
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xa4], eax
push edx
lea esi, [esp + 0x84]
mov byte [esp + 0x144], 0x10
call fcn.006281ed
push edi
lea esi, [esp + 0xa8]
call fcn.006281ed
test edi, edi
jbe 0x6232f4
mov dword [esp + 0x18], edi
mov edi, dword [ebp + 0x1c]
mov eax, dword [edi + 0x48]
mov ecx, dword [esp + 0x5c]
lea eax, [eax + ecx*8]
push eax
lea esi, [esp + 0xa8]
call fcn.00623c8d
inc dword [esp + 0x5c]
dec dword [esp + 0x18]
jne 0x6232d1
jmp 0x6232f7
mov edi, dword [ebp + 0x1c]
and dword [esp + 0x18], 0
cmp dword [esp + 0x20], 0
jbe 0x62336b
mov esi, dword [esp + 0x30]
push esi
mov ecx, edi
call fcn.00622858
test eax, eax
jl 0x62331f
mov ecx, dword [edi + 0x20]
mov eax, dword [ecx + eax*8 + 4]
mov ecx, dword [edi + 0x48]
jmp 0x623349
mov ecx, dword [edi + 0x30]
xor edx, edx
test ecx, ecx
jle 0x62333b
mov eax, dword [edi + 0x34]
cmp dword [eax], esi
je 0x62342c
inc edx
add eax, 4
cmp edx, ecx
jl 0x62332b
or eax, 0xffffffff
test eax, eax
jl 0x62358c
mov ecx, dword [ebp + 0x18]
lea eax, [ecx + eax*8]
push eax
lea esi, [esp + 0x84]
call fcn.00623c8d
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
inc dword [esp + 0x30]
cmp eax, dword [esp + 0x20]
jb 0x623303
push dword [esp + 0xb0]
mov ecx, dword [ebx + 0x70]
push dword [esp + 0x90]
mov eax, dword [ecx]
push dword [esp + 0x1c]
call dword [eax + 8]
lea ecx, [esp + 0xa4]
mov byte [esp + 0x140], 0xf
call fcn.00628196
lea ecx, [esp + 0x80]
mov byte [esp + 0x140], 5
call fcn.00628196
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x28]
jl 0x623036
xor edi, edi
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x118]
push dword [eax]
lea eax, [esp + 0x28]
lea edx, [esp + 0xd4]
call fcn.0062273f
cmp byte [ebx + 0x68], 0
je 0x6233ef
mov eax, dword [ebx + 0x6c]
mov ecx, dword [esp + 0x20]
mov dword [eax + 0x70], ecx
cmp dword [esp + 0x28], edi
jne 0x6235b9
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x144], 2
call fcn.00621891
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x144], 0
call dword [0x10018000]
mov eax, dword [esp + 0x38]
cmp eax, edi
jmp 0x623573
mov eax, edx
jmp 0x62333e
mov byte [esp + 0x140], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x144], 2
call fcn.00621891
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x144], 0
call dword [0x10018000]
mov eax, dword [esp + 0x38]
test eax, eax
jmp 0x622ff2
mov byte [esp + 0x140], 5
mov eax, dword [esp + 0x34]
test eax, eax
je 0x62348a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x144], 2
call fcn.00621891
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x144], 0
call dword [0x10018000]
mov eax, dword [esp + 0x38]
test eax, eax
je 0x6234c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [esp + 0x18]
jmp 0x622dde
mov byte [esp + 0x140], 5
mov eax, dword [esp + 0x2c]
jmp 0x623480
mov byte [esp + 0x140], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x144], 2
call fcn.00621891
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x144], 0
call dword [0x10018000]
mov eax, dword [esp + 0x38]
test eax, eax
je 0x62351b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, 0x80004005
jmp 0x622dde
push dword [esp + 0x24]
call dword [0x10018138]
mov byte [esp + 0x140], 5
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x623545
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x144], 2
call fcn.00621891
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x144], 0
call dword [0x10018000]
mov eax, dword [esp + 0x38]
test eax, eax
je 0x622dde
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x622dde
call fcn.0062c37f
pop ecx
jmp 0x623525
lea ecx, [esp + 0xa4]
mov byte [esp + 0x140], 0xf
call fcn.00628196
lea ecx, [esp + 0x80]
mov byte [esp + 0x140], 5
call fcn.00628196
jmp 0x6234e5
mov dword [esp + 0xbc], edi
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc8], 4
mov dword [esp + 0xb8], 0x10019e9c
mov byte [esp + 0x140], 0x11
push dword [esp + 0x68]
lea esi, [esp + 0xbc]
call fcn.006281ed
cmp dword [esp + 0x68], edi
mov dword [esp + 0x14], edi
jle 0x62362d
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x14]
mov eax, dword [eax + ecx*4]
push dword [eax]
lea esi, [esp + 0xbc]
call fcn.00623c8d
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x68]
jl 0x623606
push dword [ebp + 0x24]
mov eax, dword [ebp + 0x20]
push 1
push edi
lea edx, [esp + 0xa0]
push edx
push dword [esp + 0x78]
mov dword [esp + 0xa8], eax
mov eax, dword [ebx + 0x74]
mov ecx, dword [eax]
push edi
push dword [esp + 0xdc]
push eax
call dword [ecx + 0xc]
lea ecx, [esp + 0xb8]
mov esi, eax
mov byte [esp + 0x140], 5
call fcn.00628196
jmp 0x622da6