Function at 0x64ae1400
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x10]
cmp eax, dword [ecx + 8]
jbe 0x64ae1fee
sub esp, 0x90
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x7c]
test edx, edx
jne 0x64ae1446
mov edx, dword [ecx + 0x6c]
test edx, edx
jne 0x64ae1446
cmp dword [ecx], eax
jne 0x64ae1fd7
mov eax, dword [esp + 0x94]
mov ecx, dword [eax]
movzx edx, byte [esp + 0x98]
test dl, dl
jne 0x64ae1461
mov dword [eax], 0
mov dword [esp + 0x2c], ecx
test byte [ecx], al
mov eax, dword [0x64bea238]
mov dword [esp + 0x24], eax
nop
lea edx, [ecx + 0x3b]
mov dword [esp + 0x6c], edx
mov dword [esp], edx
call fcn.64ac24a0
movzx eax, byte [esp + 4]
mov byte [esp + 0x18], al
cmp al, 1
jne 0x64ae1fce
mov ecx, dword [esp + 0x24]
lea edx, [ecx - 1]
mov ebx, dword [esp + 0x2c]
cmp dword [ebx + 0x30], edx
jne 0x64ae1f20
mov dword [esp + 0x5c], edx
movzx eax, byte [0x64bee7e8]
test al, al
je 0x64ae14c8
mov eax, dword [ebx + 0x10]
shl eax, 0xd
mov dword [esp], eax
call fcn.64b0faf0
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebx + 0x10]
lea ecx, [0x64bea250]
mov dword [esp], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], eax
call fcn.64ac2680
mov eax, dword [esp + 0x2c]
movzx ecx, byte [eax + 0x3a]
mov byte [esp + 0x19], cl
mov edx, dword [eax + 0x40]
mov dword [esp + 0x28], edx
mov ebx, dword [eax + 0x4c]
mov dword [esp + 0x58], ebx
lea ebp, [eax + 0x4c]
mov dword [esp + 0x70], ebp
mov dword [esp + 0x74], ebx
jmp 0x64ae151b
mov eax, edx
movzx ecx, byte [esp + 0x19]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0x74]
test ebp, ebp
je 0x64ae15fc
movzx esi, word [ebp + 4]
test edx, edx
je 0x64ae1f1b
mov edi, dword [eax + 0x2c]
mov dword [esp + 0x4c], edi
test byte [edi], al
mov eax, esi
mov ebx, edx
xor edx, edx
div ebx
mov dword [esp + 0x34], eax
mov edx, eax
imul eax, ebx
mov esi, dword [esp + 0x2c]
mov esi, dword [esi + 0xc]
add esi, eax
mov dword [esp + 0x30], esi
nop
shr edx, 3
mov dword [esp + 0x38], edx
movzx edx, byte [edx + edi]
mov edi, dword [esp + 0x34]
and edi, 7
mov ecx, edi
mov esi, 1
shl esi, cl
xchg esi, eax
test al, dl
xchg esi, eax
je 0x64ae15c5
cmp byte [ebp + 6], 3
je 0x64ae1590
nop
mov dword [esp + 0x70], ebp
mov edx, dword [ebp]
mov dword [esp + 0x74], edx
jmp 0x64ae15ba
nop
mov eax, dword [ebp]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x70]
mov dword [ecx], eax
mov byte [ebp + 9], 1
mov eax, dword [esp + 0x30]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.64ae5da0
mov ebx, dword [esp + 0x28]
mov eax, ebx
mov edx, dword [esp + 0x2c]
jmp 0x64ae150c
lea edi, [eax + ebx]
jmp 0x64ae1e96
nop
or edx, esi
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x4c]
mov byte [ebp + ebx], dl
mov ecx, 1
jmp 0x64ae15eb
xor ecx, ecx
jmp 0x64ae15eb
mov eax, ebx
xor ecx, ecx
mov dword [esp + 0x48], edi
mov byte [esp + 0x1a], cl
mov edx, dword [esp + 0x2c]
jmp 0x64ae1eb7
test ebx, ebx
je 0x64ae161c
mov ebx, dword [eax + 0x4c]
test ebx, ebx
jne 0x64ae161c
mov dword [esp], eax
call fcn.64ae5730
mov eax, dword [esp + 0x2c]
movzx ecx, byte [esp + 0x19]
mov edx, dword [esp + 0x28]
mov ebx, dword [0x64c0a4e8]
test ebx, ebx
jne 0x64ae1630
mov ebx, dword [0x64c0a4a4]
test ebx, ebx
je 0x64ae1670
mov ebx, dword [eax + 0x2c]
test byte [ebx], al
mov dword [esp + 0x78], ebx
mov byte [esp + 0x7c], 1
mov dword [esp + 0x80], 0
mov ebx, dword [eax + 0x28]
test byte [ebx], al
nop
mov dword [esp + 0x84], ebx
mov byte [esp + 0x88], 1
mov dword [esp + 0x8c], 0
xor ebx, ebx
jmp 0x64ae1d92
mov ebx, dword [eax + 0x18]
cmp dword [eax + 0x1c], ebx
jbe 0x64ae16ce
mov ebp, dword [eax + 0x2c]
test byte [ebp], al
mov esi, dword [eax + 0x28]
test byte [esi], al
mov edi, ebx
shr ebx, 3
movzx ebp, byte [ebx + ebp]
movzx esi, byte [ebx + esi]
xchg esi, ebx
not ebx
xchg esi, ebx
and esi, ebp
and edi, 7
mov ebp, ecx
mov ecx, edi
xchg esi, eax
shr al, cl
xchg esi, eax
xchg esi, eax
test al, al
xchg esi, eax
je 0x64ae16c6
mov dword [esp + 0x3c], ebx
mov dword [esp], eax
call fcn.64ae20a0
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x3c]
movzx ebp, byte [esp + 0x19]
lea ecx, [ebx + 1]
jmp 0x64ae1d3c
mov dword [esp], eax
call fcn.64acf770
mov eax, dword [esp + 4]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x2c]
movzx edx, word [ecx + 0x38]
mov ebx, edx
sub edx, eax
mov word [esp + 0x1c], dx
cmp ax, bx
ja 0x64ae1c57
mov word [ecx + 0x38], ax
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x58], 0
movzx ebx, byte [0x64bee7e8]
test bl, bl
je 0x64ae1735
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x18]
mov ebx, dword [ebx + 0x58]
movzx ebp, dx
imul ebp, dword [ecx + 0x40]
add dword [ebx + 0x918], ebp
mov eax, dword [ecx + 0x2c]
mov dword [ecx + 0x28], eax
mov eax, dword [ecx + 0x1c]
mov dword [esp], eax
call fcn.64ae5f70
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x2c]
mov dword [ecx + 0x2c], eax
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.64ace740
nop
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.64ac24a0
movzx eax, byte [esp + 4]
mov byte [esp + 0x17], al
cmp al, 1
jne 0x64ae1c4e
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x30]
mov ebx, dword [esp + 0x5c]
cmp edx, ebx
jne 0x64ae1ba0
mov eax, dword [esp + 0x24]
lea ebx, [eax + 1]
cmp edx, ebx
je 0x64ae1b8a
lea ebx, [eax + 3]
cmp edx, ebx
je 0x64ae1b8a
lea edx, [ecx + 0x30]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.64ac2730
mov eax, dword [esp + 0x2c]
movzx ecx, byte [eax + 0x3d]
test cl, cl
je 0x64ae1897
movzx edx, byte [esp + 0x98]
test dl, dl
jne 0x64ae1b74
mov edx, dword [esp + 0x54]
test dx, dx
jbe 0x64ae1830
movzx edx, byte [esp + 0x19]
movzx edx, dl
cmp edx, 0x88
jae 0x64ae1b68
shl edx, 7
lea ecx, [0x64bea2d0]
lea ecx, [edx + ecx + 0x38]
mov edx, dword [esp + 0x24]
shr edx, 1
and edx, 1
lea edx, [edx + edx*2]
lea ecx, [ecx + edx*8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.64aec730
mov byte [esp + 0x9c], 0
add esp, 0x90
ret
mov ecx, dword [eax + 0x10]
lea edx, [0x64bea248]
mov dword [esp], edx
neg ecx
mov dword [esp + 4], ecx
call fcn.64ac25c0
nop
nop
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov byte [esp + 4], 0
call fcn.64ac27c0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
lea eax, [0x64ae2000]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x64], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.64b1a130
mov byte [esp + 0x9c], 0
add esp, 0x90
ret
movzx edx, byte [esp + 0x19]
mov ebx, edx
shr dl, 1
test dl, dl
je 0x64ae1a0d
movzx ebp, word [esp + 0x1c]
test bp, bp
ja 0x64ae18c1
movzx edx, byte [esp + 0x98]
test dl, dl
jmp 0x64ae1959
mov byte [esp + 0x1b], dl
mov byte [eax + 0x3c], 1
lea ecx, [0x64c0bbe0]
mov dword [esp], ecx
call fcn.64aecff0
mov eax, dword [esp + 4]
test byte [eax], al
movzx ecx, byte [esp + 0x1b]
movsx ecx, cl
cmp ecx, 0x44
jae 0x64ae1b5c
lea eax, [eax + ecx*8 + 0x278]
mov dword [esp], eax
mov dword [esp + 8], 0
movzx eax, word [esp + 0x1c]
movzx eax, ax
mov dword [esp + 0x5c], eax
mov dword [esp + 4], eax
call fcn.64ac2680
lea eax, [0x64c0bbe0]
mov dword [esp], eax
call fcn.64aed0f0
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x40]
mov eax, dword [esp + 0x5c]
mul ecx
lea ecx, [0x64c0ab78]
mov dword [esp], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.64ac2680
movzx eax, byte [esp + 0x98]
test al, al
mov eax, dword [esp + 0x2c]
movzx ebx, byte [esp + 0x19]
jne 0x64ae1b29
mov edx, dword [esp + 0x54]
test dx, dx
je 0x64ae19ec
movzx edx, dx
cmp dword [eax + 0x1c], edx
jne 0x64ae19b0
movzx edx, bl
cmp edx, 0x88
jae 0x64ae1b50
shl edx, 7
lea ecx, [0x64bea2d0]
lea ecx, [edx + ecx + 0x38]
mov edx, dword [esp + 0x24]
shr edx, 1
and edx, 1
lea edx, [edx + edx*2]
lea ecx, [ecx + edx*8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.64aec730
jmp 0x64ae1b29
movzx edx, bl
cmp edx, 0x88
jae 0x64ae1b44
shl edx, 7
lea ecx, [0x64bea2d0]
lea ecx, [ecx + edx + 8]
mov edx, dword [esp + 0x24]
shr edx, 1
and edx, 1
lea edx, [edx + edx*2]
lea ecx, [ecx + edx*8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.64aec730
jmp 0x64ae1b29
lea ecx, [0x64bea1a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.64ae4e30
mov byte [esp + 0x9c], 1
add esp, 0x90
ret
movzx edx, byte [esp + 0x98]
test dl, dl
jne 0x64ae1b29
movzx edx, word [esp + 0x1c]
test dx, dx
je 0x64ae1af6
mov ecx, dword [0x64c0a4a8]
test ecx, ecx
jle 0x64ae1a51
mov dword [eax + 0x44], 0
mov eax, dword [eax + 0xc]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.64ad1bf0
jmp 0x64ae1a63
lea ecx, [0x64bea1a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.64ae4e30
lea eax, [0x64c0bbe0]
mov dword [esp], eax
call fcn.64aecff0
mov eax, dword [esp + 4]
mov dword [esp + 0x68], eax
test byte [eax], al
lea ecx, [eax + 0x270]
mov dword [esp], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], 1
call fcn.64ac2680
mov eax, dword [esp + 0x68]
add eax, 0x268
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.64ac2680
lea eax, [0x64c0bbe0]
mov dword [esp], eax
call fcn.64aed0f0
nop
lea eax, [0x64c0ab78]
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.64ac2680
mov byte [esp + 0x9c], 1
add esp, 0x90
ret
movzx edx, bl
cmp edx, 0x88
jae 0x64ae1b38
shl edx, 7
lea ecx, [0x64bea2d0]
lea ecx, [edx + ecx + 0x38]
mov edx, dword [esp + 0x24]
shr edx, 1
and edx, 1
lea edx, [edx + edx*2]
lea ecx, [ecx + edx*8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.64aec730
mov byte [esp + 0x9c], 0
add esp, 0x90
ret
mov eax, edx
mov ecx, 0x88
call fcn.64b1b6e0
mov eax, edx
mov ecx, 0x88
call fcn.64b1b6e0
mov eax, edx
mov ecx, 0x88
call fcn.64b1b6e0
mov eax, ecx
mov ecx, 0x44
call fcn.64b1b6e0
mov eax, edx
mov ecx, 0x88
call fcn.64b1b6e0
lea eax, [0x64b6f53f]
mov dword [esp], eax
mov dword [esp + 4], 0x2a
call fcn.64af31f0
lea eax, [0x64b6a3ac]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.64af31f0
mov eax, dword [ecx + 0x30]
mov dword [esp + 0x5c], eax
call fcn.64af49a0
lea eax, [0x64b6abe0]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.64af52a0
mov dword [esp + 4], 0
movzx eax, byte [esp + 0x17]
movzx eax, al
mov dword [esp], eax
call fcn.64af4f20
lea eax, [0x64b689e7]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.64af52a0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.64af4f20
lea eax, [0x64b69d63]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.64af52a0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.64af4f20
call fcn.64af4bc0
call fcn.64af4a10
lea eax, [0x64b6ef3f]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.64af31f0
mov ecx, dword [esp + 0x2c]
jmp 0x64ae1ba0
mov word [esp + 0x1e], bx
mov eax, dword [ecx + 0x1c]
mov dword [esp + 0x50], eax
call fcn.64af49a0
lea eax, [0x64b6a0a3]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.64af52a0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.64af4f20
lea eax, [0x64b684bb]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.64af52a0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x54]
movzx eax, ax
mov dword [esp], eax
call fcn.64af4f20
lea eax, [0x64b6b1a9]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.64af52a0
mov dword [esp + 4], 0
movzx eax, word [esp + 0x1e]
movzx eax, ax
mov dword [esp], eax
call fcn.64af4f20
lea eax, [0x64b684cb]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.64af52a0
mov dword [esp + 4], 0
movzx eax, word [esp + 0x1c]
movzx eax, ax
mov dword [esp], eax
call fcn.64af4f20
call fcn.64af4bc0
call fcn.64af4a10
lea eax, [0x64b6e0e6]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.64af31f0
inc ecx
mov ebx, dword [eax + 0x1c]
add ebx, 7
shr ebx, 3
cmp ecx, ebx
jae 0x64ae16ce
mov ebx, dword [eax + 0x2c]
test byte [ebx], al
mov esi, dword [eax + 0x28]
test byte [esi], al
movzx ebx, byte [ecx + ebx]
movzx esi, byte [ecx + esi]
xchg esi, ebx
not ebx
xchg esi, ebx
xchg esi, eax
test bl, al
xchg esi, eax
je 0x64ae1d3b
mov dword [esp + 0x40], ecx
mov dword [esp], eax
call fcn.64ae20a0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x28]
movzx ebp, byte [esp + 0x19]
jmp 0x64ae1d3b
inc dword [esp + 0x8c]
inc ebx
cmp dword [eax + 0x1c], ebx
jbe 0x64ae1670
mov ebp, dword [esp + 0x78]
movzx esi, byte [esp + 0x7c]
movzx ebp, byte [ebp]
xchg esi, eax
xchg ebp, ebx
test bl, al
xchg ebp, ebx
xchg esi, eax
jne 0x64ae1e25
mov ebp, dword [esp + 0x8c]
cmp dword [eax + 0x18], ebp
ja 0x64ae1ddb
mov ebp, dword [esp + 0x84]
movzx esi, byte [esp + 0x88]
movzx ebp, byte [ebp]
xchg esi, eax
xchg ebp, ebx
test bl, al
xchg ebp, ebx
xchg esi, eax
je 0x64ae1e25
mov ebp, dword [eax + 0x40]
imul ebp, ebx
add ebp, dword [eax + 0xc]
mov esi, dword [0x64c0a4e8]
test esi, esi
je 0x64ae1e17
mov dword [esp + 0x44], ebx
mov dword [esp + 0x20], ebp
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.64aebc60
mov eax, dword [esp + 0x2c]
movzx ecx, byte [esp + 0x19]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x20]
mov esi, dword [0x64c0a4a4]
test esi, esi
je 0x64ae1e25
xor esi, esi
jmp 0x64ae1e8b
nop
movzx ebp, byte [esp + 0x7c]
xchg ebp, eax
cmp al, 0x80
xchg ebp, eax
jne 0x64ae1e3d
inc dword [esp + 0x78]
mov byte [esp + 0x7c], 1
jmp 0x64ae1e45
shl ebp, 1
xchg ebp, eax
mov byte [esp + 0x7c], al
xchg ebp, eax
inc dword [esp + 0x80]
nop
movzx ebp, byte [esp + 0x88]
xchg ebp, eax
cmp al, 0x80
xchg ebp, eax
jne 0x64ae1e70
inc dword [esp + 0x84]
mov byte [esp + 0x88], 1
jmp 0x64ae1d8a
shl ebp, 1
xchg ebp, eax
mov byte [esp + 0x88], al
xchg ebp, eax
jmp 0x64ae1d8a
mov dword [ebp + esi], 0xdeadbeef
add esi, 4
cmp esi, edx
jb 0x64ae1e80
jmp 0x64ae1e25
mov ebp, dword [ebp]
mov ebx, eax
test ebp, ebp
je 0x64ae15e7
mov eax, ebx
movzx ebx, word [ebp + 4]
cmp ebx, edi
jae 0x64ae15e3
cmp byte [ebp + 6], 1
jne 0x64ae1e91
jmp 0x64ae15cd
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x64ae150c
movzx ebp, word [ebx + 4]
cmp ebp, edi
jae 0x64ae150c
mov esi, dword [edx + 0xc]
add ebp, esi
cmp byte [ebx + 6], 1
je 0x64ae1eeb
test cl, cl
je 0x64ae1eeb
nop
mov dword [esp + 0x70], ebx
mov ebx, dword [ebx]
mov dword [esp + 0x74], ebx
jmp 0x64ae1eb7
nop
mov ecx, dword [ebx]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x70]
mov dword [edx], ecx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.64ae5da0
mov eax, dword [esp + 0x28]
movzx ecx, byte [esp + 0x1a]
mov edx, dword [esp + 0x2c]
mov edi, dword [esp + 0x48]
jmp 0x64ae1eb7
call fcn.64af1ac0
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x5c], eax
call fcn.64af49a0
lea eax, [0x64b6abe0]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.64af52a0
mov dword [esp + 4], 0
movzx eax, byte [esp + 0x18]
movzx eax, al
mov dword [esp], eax
call fcn.64af4f20
lea eax, [0x64b689e7]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.64af52a0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.64af4f20
lea eax, [0x64b69d63]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.64af52a0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.64af4f20
call fcn.64af4bc0
call fcn.64af4a10
lea eax, [0x64b6cddd]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.64af31f0
mov ebx, dword [esp + 0x2c]
jmp 0x64ae1f20
lea eax, [0x64b6d22b]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.64af31f0
nop
call fcn.64b1a240
jmp fcn.64ae1400