Function at 0x65e950
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x24]
cmp eax, dword [ecx + 8]
jbe 0x65f1c5
sub esp, 0xa4
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov eax, dword [esp + 0xa8]
test byte [eax], al
mov dword [esp], eax
call fcn.00473950
mov dword [esp + 0x54], 4
lea eax, [0x9b2b70]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x70], eax
lea ecx, [esp + 0x54]
mov dword [esp], ecx
call fcn.0042c560
test eax, eax
jne 0x65f1a8
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
jmp 0x65e9df
mov ebp, dword [esp + 0x50]
inc ebp
mov ebx, edx
mov edx, ecx
mov ecx, eax
mov eax, ebp
mov ebp, dword [esp + 0xb8]
cmp eax, ebp
jge 0x65f08b
mov dword [esp + 0x50], eax
mov esi, dword [esp + 0xb4]
mov edi, dword [esi + eax*4]
mov esi, dword [edi]
mov ebp, dword [esi + 0x14]
lea eax, [0xa52e60]
cmp dword [esi + 0x10], eax
jne 0x65f081
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0xa0], ebx
jne 0x65ef91
mov dword [esp + 0x80], edi
mov dword [esp + 0x88], ebp
mov dword [esp], esi
call fcn.00631c80
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x10]
test ebp, ebp
jne 0x65ef76
mov ecx, dword [esp + 0xa8]
movzx ebp, byte [ecx + 0xd8]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x65ef6b
lea ebp, [0x983cd9]
mov dword [esp + 0x84], eax
mov dword [esp + 0x44], edx
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x88]
movzx edi, byte [esi]
xchg edi, eax
cmp al, 0xb
xchg edi, eax
ja 0x65eea7
xchg edi, eax
cmp al, 1
xchg edi, eax
ja 0x65ee38
xchg edi, eax
test al, al
xchg edi, eax
jne 0x65ee1f
mov edi, 0xc
lea edi, [0x988573]
mov dword [esp + 0x74], edi
mov edi, 0xc
mov dword [esp + 0x24], edi
mov dword [esp], ebp
mov dword [esp + 4], 6
call fcn.004086a0
mov eax, dword [esp + 8]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 4], ecx
call fcn.004086a0
mov eax, dword [esp + 0x80]
mov ecx, dword [eax]
mov edx, dword [esp + 8]
mov dword [esp + 0x98], edx
movzx ecx, word [ecx + 6]
mov word [esp], cx
call fcn.00408570
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x88]
movzx edx, word [ecx + 8]
mov word [esp], dx
call fcn.00408570
mov eax, dword [esp + 4]
mov dword [esp + 0x90], eax
lea ecx, [0x8d8e20]
mov dword [esp], ecx
call fcn.0040ae10
mov eax, dword [esp + 4]
lea ecx, [0x8eba40]
mov dword [eax], ecx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x65ee07
mov edx, dword [esp + 0x9c]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov edx, dword [0xdd7ec0]
test edx, edx
jne 0x65edef
mov edx, dword [esp + 0x98]
mov dword [eax + 0xc], edx
lea edx, [0x8ebc40]
mov dword [eax + 0x10], edx
mov ebx, dword [0xdd7ec0]
test ebx, ebx
jne 0x65edd7
mov ebx, dword [esp + 0x94]
mov dword [eax + 0x14], ebx
mov dword [eax + 0x18], edx
mov ebx, dword [0xdd7ec0]
test ebx, ebx
jne 0x65edbf
mov ebx, dword [esp + 0x90]
mov dword [eax + 0x1c], ebx
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0x180]
mov ebx, dword [ecx + 0x184]
mov edx, dword [edx + 0x2c]
mov dword [esp], ebx
lea ebx, [0x99e7cb]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0x29
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
mov dword [esp + 0x14], 4
call edx
mov ecx, dword [esp + 0x40]
cmp ecx, 0xd
jb 0x65f1ba
mov eax, dword [esp + 0x80]
mov edx, dword [eax]
mov ebx, dword [esp + 0xa8]
mov ebp, dword [ebx + 0x24]
movzx edx, word [edx + 6]
mov esi, dword [esp + 0x88]
movzx edi, word [esi + 8]
movzx esi, byte [esi]
movzx eax, byte [ebx + 0xd8]
mov dword [esp], ebp
mov ebp, dword [esp + 0x44]
add ebp, 0xfffffff3
mov dword [esp + 0x4c], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 0xd
mov ebx, dword [esp + 0x84]
add ebx, ebp
mov dword [esp + 4], ebx
add ecx, 0xfffffff3
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0xc], ecx
mov word [esp + 0x10], dx
mov word [esp + 0x12], di
xchg esi, eax
mov byte [esp + 0x14], al
xchg esi, eax
mov byte [esp + 0x15], al
call fcn.0066d780
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 8], ecx
call fcn.0065f700
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0xc]
test ecx, ecx
jne 0x65eda4
mov eax, dword [esp + 0x28]
lea ecx, [eax + ebx]
mov dword [esp + 0x4c], ecx
mov esi, dword [esp + 0x2c]
cmp ecx, esi
ja 0x65ed52
mov edi, dword [esp + 0xa0]
cmp eax, ecx
ja 0x65f1b5
mov dword [esp + 0xa0], edi
mov dword [esp + 0x2c], esi
lea ecx, [0x8c74c0]
mov dword [esp], ecx
lea ecx, [eax + eax*2]
sub esi, eax
mov eax, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
shl ecx, 2
sar esi, 0x1f
and esi, ecx
lea ecx, [edi + esi]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], edx
call fcn.00411140
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0xa0]
jmp 0x65e9d2
mov dword [esp + 0x3c], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x7c], ebp
lea edx, [0x8c74c0]
mov dword [esp], edx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.00440660
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x7c]
jmp 0x65eced
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], eax
nop
call fcn.0042cca0
add esp, 0xa4
ret
lea edi, [eax + 0x1c]
mov ebx, eax
mov eax, dword [esp + 0x90]
call fcn.00456fe0
mov eax, ebx
jmp 0x65ebc9
lea edi, [eax + 0x14]
mov ebx, eax
mov eax, dword [esp + 0x94]
call fcn.00456fe0
mov eax, ebx
jmp 0x65ebae
lea edi, [eax + 0xc]
mov edx, eax
mov eax, dword [esp + 0x98]
call fcn.00456fe0
mov eax, edx
jmp 0x65eb8d
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0x9c]
call fcn.00456fe0
mov eax, edx
jmp 0x65eb72
mov edi, 0xb
lea edi, [0x987ab3]
mov dword [esp + 0x74], edi
mov edi, 0xb
jmp 0x65eac2
xchg edi, eax
cmp al, 2
xchg edi, eax
jne 0x65ee58
mov edi, 0xb
lea edi, [0x987cd9]
mov dword [esp + 0x74], edi
mov edi, 0xb
jmp 0x65eac2
xchg edi, eax
cmp al, 3
xchg edi, eax
jne 0x65ee78
mov edi, 0x12
lea edi, [0x98caf9]
mov dword [esp + 0x74], edi
mov edi, 0x12
jmp 0x65eac2
xchg edi, eax
cmp al, 0xb
xchg edi, eax
jne 0x65ee98
mov edi, 0xf
lea edi, [0x98a8e4]
mov dword [esp + 0x74], edi
mov edi, 0xf
jmp 0x65eac2
xor edi, edi
xor edi, edi
mov dword [esp + 0x74], edi
xor edi, edi
jmp 0x65eac2
xchg edi, eax
cmp al, 0xe
xchg edi, eax
ja 0x65ef07
xchg edi, eax
cmp al, 0xc
xchg edi, eax
jne 0x65eece
mov edi, 0x11
lea edi, [0x98c06b]
mov dword [esp + 0x74], edi
mov edi, 0x11
jmp 0x65eac2
xchg edi, eax
cmp al, 0xd
xchg edi, eax
jne 0x65eeee
mov edi, 0x12
lea edi, [0x98c8cb]
mov dword [esp + 0x74], edi
mov edi, 0x12
jmp 0x65eac2
mov edi, 0xf
lea edi, [0x98a83f]
mov dword [esp + 0x74], edi
mov edi, 0xf
jmp 0x65eac2
xchg edi, eax
cmp al, 0xf
xchg edi, eax
jne 0x65ef27
mov edi, 0x11
lea edi, [0x98bcf7]
mov dword [esp + 0x74], edi
mov edi, 0x11
jmp 0x65eac2
xchg edi, eax
cmp al, 0x10
xchg edi, eax
jne 0x65ef47
mov edi, 0x11
lea edi, [0x98bd08]
mov dword [esp + 0x74], edi
mov edi, 0x11
jmp 0x65eac2
xchg edi, eax
cmp al, 0x14
xchg edi, eax
jne 0x65ee98
mov edi, 8
lea edi, [0x9859e1]
mov dword [esp + 0x74], edi
mov edi, 8
jmp 0x65eac2
lea ebp, [0x98439f]
jmp 0x65ea75
mov dword [esp + 0xc0], ebp
mov dword [esp + 0xc4], ecx
nop
call fcn.0042cca0
add esp, 0xa4
ret
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0065f4d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
test ebx, ebx
jne 0x65f066
mov edx, dword [esp + 0x28]
lea ebx, [edx + 1]
mov esi, dword [esp + 0x2c]
cmp ebx, esi
ja 0x65f011
mov edi, dword [esp + 0xa0]
lea edx, [edx + edx*2]
mov dword [edi + edx*4 + 4], eax
mov dword [edi + edx*4 + 8], ebp
mov ebp, dword [0xdd7ec0]
mov eax, ebx
lea ebx, [edi + edx*4]
test ebp, ebp
jne 0x65effe
mov dword [edi + edx*4], ecx
mov ecx, eax
mov edx, edi
mov eax, esi
jmp 0x65e9d2
mov edx, edi
mov edi, ebx
mov ebp, eax
mov eax, ecx
call fcn.00456fe0
mov eax, ebp
mov edi, edx
jmp 0x65eff3
mov dword [esp + 0x30], eax
mov dword [esp + 0x78], ecx
mov dword [esp + 0x34], ebp
lea eax, [0x8c74c0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00440660
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x28]
mov ebp, dword [esp + 0x34]
jmp 0x65efd6
mov dword [esp + 0xc0], ebx
mov dword [esp + 0xc4], edx
nop
call fcn.0042cca0
add esp, 0xa4
ret
mov ebp, 0
jmp 0x65ea10
test edx, edx
je 0x65f185
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.0065f1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
test eax, eax
jle 0x65f133
mov dword [esp + 0x48], eax
xor edx, edx
jmp 0x65f0d0
mov ebx, dword [esp + 0x8c]
add ebx, 0xc
mov ecx, ebx
mov edx, eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x50], edx
mov eax, dword [esp + 0xa8]
mov ebx, dword [eax + 0x18]
mov ebp, dword [ecx]
mov esi, dword [ecx + 8]
mov edi, dword [ecx + 4]
mov eax, dword [eax + 0x1c]
mov ebx, dword [ebx + 0x24]
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], esi
call ebx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
test eax, eax
jne 0x65f156
mov eax, dword [esp + 0x50]
inc eax
mov ecx, dword [esp + 0x48]
cmp eax, ecx
jl 0x65f0c2
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
nop
call fcn.0042cca0
add esp, 0xa4
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00664600
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
nop
call fcn.0042cca0
add esp, 0xa4
ret
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
nop
call fcn.0042cca0
add esp, 0xa4
ret
nop
call fcn.0042cca0
add esp, 0xa4
ret
call fcn.004570c0
mov eax, 0xd
call fcn.004570c0
nop
call fcn.004557a0
jmp fcn.0065e950