Function at 0x664af690
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x16c
mov edi, dword [0x66a201dc]
mov eax, dword [esp + 0x188]
mov dword [esp + 0x38], ecx
mov dword [ecx], edi
lea ecx, [esp + 0x80]
mov eax, dword [eax + 0x40]
mov dword [esp + 0xc], 0
mov edi, eax
and eax, 2
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x188]
and edi, 1
mov dword [esp + 0x48], edi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x180]
mov dword [esp], eax
call fcn.664aeee0
sub esp, 0x10
mov eax, dword [esp + 0x188]
lea ecx, [esp + 0x70]
add eax, 0x10
mov dword [esp + 4], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.664a42c0
mov ebx, dword [0x66a20044]
sub esp, 8
mov eax, dword [esp + 0x78]
mov dword [esp + 4], 0xd
mov dword [esp], 0x66810167
mov dword [esp + 0x30], eax
call ebx
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x94]
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x664b0260
lea eax, [esp + 0x108]
mov dword [esp + 0x110], 0x80000000
mov dword [esp + 0x108], 0
mov dword [esp + 0x2c], eax
mov edi, dword [esp + 0x2c]
lea ecx, [esp + 0x58]
mov dword [esp], edi
call dword [0x66a20754]
mov ecx, edi
sub esp, 4
call dword [0x66a2016c]
mov eax, dword [esp + 0xc4]
mov edx, dword [eax]
test edx, edx
je 0x664b0140
cmp edx, 0xffffffff
je 0x664af7b7
lock sub dword [eax], 1
mov eax, dword [esp + 0xc4]
je 0x664b0140
mov eax, dword [esp + 0x58]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 8]
cmp eax, edx
je 0x664b016b
mov ebx, dword [0x66a1f9dc]
sub edx, eax
mov dword [esp + 0x64], 0
mov dword [esp + 0x34], edx
mov eax, edx
mov edx, dword [ebx + 8]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
and edx, 0x7fffffff
mov dword [esp + 0x5c], ebx
cmp eax, edx
jg 0x664b00e0
mov eax, dword [ebx]
cmp eax, 1
jbe 0x664b0106
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x664af965
mov dword [esp + 0x40], 0
xor edi, edi
lea esi, [esi]
mov eax, dword [esp + 0x58]
mov edx, dword [eax]
cmp edx, 1
ja 0x664afba0
mov eax, dword [esp + 0x58]
mov edx, dword [eax + 8]
add edx, edi
mov ecx, dword [eax + edx*4 + 0x10]
mov dword [esp], 0
call dword [0x66a2073c]
sub esp, 4
mov esi, eax
cmp eax, 0x28
je 0x664afc50
cmp eax, 0x29
je 0x664afc60
lea ecx, [esp + 0x10c]
mov dword [esp + 0x108], 0
call dword [0x66a21348]
lea ecx, [esp + 0x110]
call dword [0x66a212e4]
mov eax, dword [0x66a201dc]
mov byte [esp + 0x118], 0
lea ecx, [esp + 0x148]
mov dword [esp + 0x120], 0
mov dword [esp + 0x11c], eax
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], 0
call dword [0x66a20c30]
lea eax, [esi - 0x41]
mov dword [esp + 0x14c], esi
cmp eax, 8
ja case.0x664af92b.70
jmp dword [eax*4 + 0x668102a8]
mov eax, dword [esp + 0x188]
test byte [eax + 0x46], 1
jne 0x664afcf9
lea esi, [esi]
nop
mov ecx, dword [esp + 0x2c]
call fcn.66791bf0
lea esi, [esi]
add edi, 1
cmp edi, dword [esp + 0x34]
jl 0x664af828
mov ebx, dword [esp + 0x5c]
lea eax, [esp + 0xc4]
xor ebp, ebp
mov dword [esp + 0x3c], eax
mov eax, dword [ebx + 4]
test eax, eax
jg 0x664afa32
jmp 0x664afca0
test ebx, ebx
je 0x664afb7b
mov eax, dword [edx + 0x44]
mov edi, dword [esp + 0x188]
add ebp, 1
mov ebx, dword [esp + 0x3c]
lea ecx, [eax + eax*2]
mov ecx, dword [ecx*8 + 0x66812000]
mov dword [esp + 0x60], ecx
mov ecx, dword [edi + 0xc]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x180]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ebx
mov dword [esp], eax
call fcn.664a4b60
sub esp, 0x18
lea eax, [esp + 0x60]
mov ecx, dword [esp + 0x38]
mov dword [esp], eax
call fcn.667b9120
sub esp, 4
mov edx, dword [esp + 0x108]
mov ebx, dword [esp + 0x5c]
mov dword [eax], edx
mov edx, dword [esp + 0x10c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x110]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x114]
mov dword [eax + 0xc], edx
cmp ebp, dword [ebx + 4]
jge 0x664afca0
mov eax, dword [ebx]
cmp eax, 1
jbe 0x664afa71
test dword [ebx + 8], 0x7fffffff
jne 0x664afc70
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov dword [esp], 0x54
call dword [0x66a1f9e0]
mov dword [esp + 0x5c], eax
mov ebx, eax
imul edx, ebp, 0x54
add edx, dword [ebx + 0xc]
mov edi, dword [esp + 0x30]
add edx, ebx
mov eax, dword [esp + 0x70]
mov esi, dword [esp + 0x74]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [edx + 0x4c]
mov dword [esp + 0x78], edi
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], esi
mov dword [esp + 0xcc], edi
mov dword [esp + 0xd0], ecx
cmp ebx, 1
je 0x664afb70
cmp ebx, 2
jne 0x664af990
mov ebx, ecx
mov edi, esi
sub ebx, esi
sar edi, 0x1f
mov dword [esp + 0x34], ebx
mov ebx, ecx
sar ebx, 0x1f
add ecx, esi
adc ebx, edi
xor edi, edi
mov esi, ebx
shr esi, 0x1f
add esi, ecx
adc edi, ebx
mov ebx, dword [esp + 0x34]
add eax, dword [esp + 0x64]
shrd esi, edi, 1
mov ecx, ebx
mov edi, esi
shr ecx, 0x1f
add ecx, ebx
mov ebx, eax
sar ecx, 1
sar ebx, 0x1f
sub edi, ecx
mov ecx, eax
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x68]
mov dword [esp + 0x40], edi
mov esi, eax
mov edi, eax
mov eax, dword [esp + 0x6c]
sar edi, 0x1f
add esi, ecx
adc edi, ebx
xor ebx, ebx
mov ecx, edi
shr ecx, 0x1f
add ecx, esi
lea esi, [eax - 1]
mov eax, esi
adc ebx, edi
mov edi, dword [esp + 0x40]
shr eax, 0x1f
shrd ecx, ebx, 1
add eax, esi
mov esi, dword [esp + 0x34]
sar eax, 1
sub ecx, eax
mov eax, dword [edx + 0x50]
add ecx, dword [edx + 0x48]
add esi, edi
mov dword [esp + 0xc4], ecx
add eax, ecx
mov dword [esp + 0xc8], edi
sub eax, 1
mov dword [esp + 0xd0], esi
mov dword [esp + 0xcc], eax
jmp 0x664af998
mov eax, dword [esp + 0x30]
add eax, 1
sub eax, dword [esp + 0x68]
add eax, dword [edx + 0x48]
mov dword [esp + 0xc4], eax
add eax, dword [edx + 0x50]
sub eax, 1
mov dword [esp + 0xcc], eax
jmp 0x664af998
mov edx, dword [eax + 8]
lea ecx, [esp + 0x58]
lea ebx, [eax + edx*4 + 0x10]
mov eax, dword [eax + 4]
mov dword [esp], eax
call dword [0x66a20218]
sub esp, 4
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x58]
lea edx, [eax + 0x10]
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
lea esi, [edx + ecx*4]
lea ebp, [edx + eax*4]
cmp esi, ebp
je 0x664afc10
mov dword [esp + 0x44], edi
mov edi, ebp
mov ebp, esi
lea esi, [esi]
mov dword [esp], 0x10
add edi, 4
add ebx, 4
call fcn.6678d230
mov esi, eax
mov eax, dword [ebx - 4]
mov ecx, esi
mov dword [esp], eax
call dword [0x66a20150]
mov dword [edi - 4], esi
sub esp, 4
cmp ebp, edi
jne 0x664afbe0
mov edi, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
test eax, eax
je 0x664afc38
cmp eax, 0xffffffff
je 0x664af837
mov ebx, dword [esp + 0x3c]
lock sub dword [ebx], 1
jne 0x664af837
lea esi, [esi]
mov eax, dword [esp + 0x3c]
call fcn.664a3470
jmp 0x664af837
mov dword [esp + 0x40], 2
jmp 0x664af958
mov dword [esp + 0x40], 1
jmp 0x664af958
mov dword [esp + 4], 0
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x5c]
and eax, 0x7fffffff
mov dword [esp], eax
call fcn.664ac2b0
sub esp, 8
mov ebx, dword [esp + 0x5c]
jmp 0x664afa71
mov eax, dword [ebx]
test eax, eax
je 0x664b01f8
cmp eax, 0xffffffff
je 0x664afcbd
lock sub dword [ebx], 1
mov ebx, dword [esp + 0x5c]
je 0x664b01f8
lea ecx, [esp + 0x58]
call fcn.667c1780
lea ecx, [esp + 0x80]
call fcn.66791bf0
mov eax, dword [esp + 0x38]
add esp, 0x16c
pop ebx
pop esi
pop edi
pop ebp
ret 0xc
mov eax, dword [esp + 0x188]
test byte [eax + 0x45], 0x20
je case.0x664af92b.70
mov eax, dword [esp + 0x188]
mov dword [esp + 0xc], esi
lea ebx, [esp + 0xc4]
mov ecx, ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x180]
mov dword [esp], eax
call fcn.664aeee0
sub esp, 0x10
mov dword [esp], ebx
lea ecx, [esp + 0x80]
call fcn.66791f30
mov ecx, ebx
sub esp, 4
call fcn.66791bf0
mov eax, dword [esp + 0xac]
test eax, eax
je 0x664b02c0
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0xc]
mov dword [esp + 4], 7
lea ecx, [esp + 0x80]
mov dword [esp], ebx
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], edx
call fcn.664a43f0
sub esp, 8
mov dword [esp + 0x158], eax
lea eax, [esp + 0x80]
mov ecx, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.667922a0
sub esp, 4
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + eax*4 + 0x64]
mov dword [esp + 0x154], eax
mov eax, dword [edx + 4]
mov dword [esp + 0x150], ebx
lea esi, [eax + 1]
mov eax, dword [edx + 8]
mov ecx, dword [edx]
and eax, 0x7fffffff
cmp ecx, 1
jbe 0x664b0240
xor ecx, ecx
cmp esi, eax
ja 0x664b024a
mov dword [esp + 4], ecx
lea ecx, [esp + 0x5c]
mov dword [esp], eax
call fcn.664ac2b0
sub esp, 8
mov ecx, dword [esp + 0x5c]
imul esi, dword [ecx + 4], 0x54
mov eax, dword [esp + 0x108]
add esi, dword [ecx + 0xc]
add esi, ecx
mov dword [esi], eax
lea eax, [esp + 0x10c]
lea ecx, [esi + 4]
mov dword [esp], eax
call dword [0x66a21344]
lea ecx, [esi + 8]
sub esp, 4
lea eax, [esp + 0x110]
mov dword [esp], eax
call dword [0x66a212dc]
lea ecx, [esi + 0x40]
sub esp, 4
movzx eax, byte [esp + 0x118]
mov byte [esi + 0x10], al
mov eax, dword [esp + 0x11c]
mov dword [esi + 0x14], eax
mov eax, dword [0x66a201dc]
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x120]
mov dword [esi + 0x18], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0x120], 0
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x128]
mov dword [esp + 0x124], 0
mov dword [esi + 0x20], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x128], 0
mov dword [esi + 0x24], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x12c], 0
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x130], 0
mov dword [esi + 0x2c], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x134], 0
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 0x138], 0
mov dword [esi + 0x34], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0x13c], 0
mov dword [esi + 0x38], eax
mov dword [esp + 0x140], 0
mov eax, dword [esp + 0x144]
mov dword [esi + 0x3c], eax
lea eax, [esp + 0x148]
mov dword [esp], eax
call dword [0x66a20c2c]
sub esp, 4
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x2c]
mov dword [esi + 0x44], eax
mov eax, dword [esp + 0x150]
mov dword [esi + 0x48], eax
mov eax, dword [esp + 0x154]
mov dword [esi + 0x4c], eax
mov eax, dword [esp + 0x158]
mov dword [esi + 0x50], eax
mov eax, dword [esp + 0x5c]
add ebx, dword [esp + 0x158]
add dword [eax + 4], 1
mov eax, dword [esp + 0x40]
mov dword [esp + eax*4 + 0x64], ebx
call fcn.66791bf0
jmp 0x664af958
mov eax, dword [esp + 0x188]
test dword [eax + 0x44], 0x3000
je case.0x664af92b.70
mov eax, dword [esp + 0x188]
mov dword [esp + 4], 0xffffffff
lea ebx, [eax + 0x20]
add eax, 0x38
mov ecx, ebx
mov dword [esp], eax
call dword [0x66a218e4]
mov ecx, ebx
sub esp, 8
add eax, 6
mov dword [esp + 0x158], eax
call dword [0x66a218f0]
mov dword [esp], 0x1c
mov ebx, eax
call fcn.6678d230
mov edx, dword [esp + 0x158]
mov dword [eax], 0
mov dword [eax + 4], 0xffffffff
mov dword [eax + 8], 0xffffffff
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xffffffff
mov dword [eax + 0x18], 0xffffffff
cmp eax, dword [esp + 0xac]
je 0x664afd8b
lock add dword [eax], 1
mov edx, dword [esp + 0xac]
mov dword [esp + 0xac], eax
test edx, edx
je 0x664afd8b
lock sub dword [edx], 1
jne 0x664afd8b
mov dword [esp + 4], 0x1c
mov dword [esp], edx
call fcn.6678d240
jmp 0x664afd8b
mov eax, dword [esp + 0x188]
test byte [eax + 0x46], 2
je case.0x664af92b.70
mov ebp, dword [esp + 0x48]
test ebp, ebp
je 0x664afcf9
mov dword [esp + 0x14c], 0x46
mov esi, 0x46
jmp 0x664afcf9
mov eax, dword [esp + 0x188]
test byte [eax + 0x45], 0x80
je case.0x664af92b.70
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x664afcf9
mov dword [esp + 0x14c], 0x47
mov esi, 0x47
jmp 0x664afcf9
mov eax, dword [esp + 0x188]
test byte [eax + 0x45], 0x40
je case.0x664af92b.70
mov eax, dword [esp + 0x48]
test eax, eax
je 0x664afcf9
mov dword [esp + 0x14c], 0x47
mov esi, 0x47
jmp 0x664afcf9
mov dword [esp], eax
lea ecx, [esp + 0x5c]
mov dword [esp + 4], 0
call fcn.664ac2b0
sub esp, 8
mov ebx, dword [esp + 0x5c]
mov eax, dword [ebx]
cmp eax, 1
ja 0x664af81b
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov dword [esp], 0x54
call dword [0x66a1f9e0]
cmp ebx, eax
je 0x664af80f
mov eax, dword [esp + 0x5c]
or byte [eax + 0xb], 0x80
jmp 0x664af80f
mov dword [esp], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 2
call dword [0x66a1f9d8]
mov eax, dword [esp + 0x58]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 8]
cmp eax, edx
jne 0x664af7c9
mov dword [esp + 4], 9
mov dword [esp], 0x6681029c
call ebx
lea ebx, [esp + 0xc4]
lea edx, [esp + 0x64]
mov dword [esp + 0x64], eax
mov eax, ebx
call fcn.664a5790
mov eax, dword [0x66a20204]
mov edx, dword [esp + 0xc4]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x58], edx
mov dword [esp + 0x108], eax
call fcn.667c1780
mov ecx, ebx
call fcn.667c1780
mov eax, dword [esp + 0x64]
mov edx, dword [eax]
test edx, edx
je 0x664b030c
cmp edx, 0xffffffff
je 0x664b01e5
lock sub dword [eax], 1
mov eax, dword [esp + 0x64]
je 0x664b030c
mov eax, dword [esp + 0x58]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 8]
jmp 0x664af7c9
mov esi, dword [ebx + 0xc]
imul edi, dword [ebx + 4], 0x54
add edi, dword [ebx + 0xc]
add edi, ebx
add esi, ebx
cmp edi, esi
je 0x664b021e
lea esi, [esi]
mov ecx, esi
add esi, 0x54
call fcn.66791bf0
cmp edi, esi
jne 0x664b0210
mov dword [esp + 8], 4
mov dword [esp + 4], 0x54
mov dword [esp], ebx
call dword [0x66a1f9d8]
jmp 0x664afcbd
mov ecx, edx
cmp esi, eax
jbe 0x664afdf5
mov eax, dword [edx + 4]
mov ecx, 8
add eax, 1
jmp 0x664afdde
mov edx, dword [eax + 0x18]
test edx, edx
jne 0x664b02ec
lea edi, [esp + 0xc4]
xor eax, eax
mov dword [esp + 0x3c], edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x94]
mov dword [esp], eax
call fcn.667e7080
sub esp, 8
mov eax, dword [eax]
cmp eax, dword [esp + 0x94]
je 0x664af753
lea ecx, [esp + 0x108]
add eax, 0x10
mov dword [esp + 0x2c], ecx
mov dword [esp], eax
call dword [0x66a20150]
sub esp, 4
jmp 0x664af774
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x664b02dd
mov eax, dword [edx + 0xc]
test eax, eax
js 0x664b02dd
mov edx, dword [edx + 0x10]
test edx, edx
jns 0x664afd5c
mov edx, 0xffffffff
mov eax, 0xffffffff
jmp 0x664afd5c
mov eax, dword [eax + 0x1c]
mov dword [esp + 4], eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x3c], eax
mov dword [esp], eax
call dword [0x66a1f9bc]
jmp 0x664b0278
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x66a1f9d8]
jmp 0x664b01e5