Function at 0x64b0a3b0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x64b0ab41
sub esp, 0x74
mov edx, dword [esp + 0x78]
mov ebx, dword [edx]
mov ebp, dword [ebx]
mov dword [esp + 0x48], ebp
cmp ebp, 0xfffffff1
jne 0x64b0a989
movzx esi, byte [ebx + 4]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x64b0a989
movzx esi, byte [ebx + 5]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x64b0a989
cmp byte [ebx + 6], 1
jne 0x64b0a989
cmp byte [ebx + 7], 4
jne 0x64b0a989
mov esi, dword [ebx + 0x10]
cmp dword [edx + 0x58], esi
jne 0x64b0a989
mov ecx, dword [edx + 0x44]
mov ebx, dword [edx + 0x40]
lea ebp, [ecx - 1]
xor eax, eax
jmp 0x64b0a42d
mov edx, dword [esp + 0x78]
mov eax, edi
cmp eax, ebp
jge 0x64b0a5fa
cmp eax, ecx
jae 0x64b0a984
lea esi, [ebx + eax*8]
mov esi, dword [esi]
lea edi, [eax + 1]
cmp ecx, edi
jbe 0x64b0a97d
lea edx, [ebx + eax*8 + 8]
cmp dword [edx], esi
jae 0x64b0a427
mov edx, dword [esp + 0x78]
mov ecx, dword [edx + 0x38]
mov esi, dword [edx + 0x34]
lea edx, [ebx + eax*8 + 4]
mov edx, dword [edx]
cmp edx, ecx
jae 0x64b0a976
add edx, esi
lea ebx, [ebx + eax*8 + 0xc]
mov ebx, dword [ebx]
cmp ebx, ecx
jae 0x64b0a96f
mov dword [esp + 0x20], eax
mov dword [esp + 0x44], edi
lea ecx, [ebx + esi]
cmp edi, ebp
jl 0x64b0a499
mov ecx, 3
lea ebx, [0x64b67de1]
jmp 0x64b0a4bb
mov dword [esp + 0x5c], edx
mov dword [esp], ecx
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
call fcn.64b0b3b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x5c]
mov ebx, eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x24], ecx
mov dword [esp], edx
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
call fcn.64b0b3b0
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x44]
mov edx, dword [eax + 0x40]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x20]
cmp esi, ecx
jae 0x64b0a968
mov dword [esp + 0x40], ebp
lea edi, [edx + esi*8]
mov edi, dword [edi]
mov ebp, dword [esp + 0x44]
cmp ecx, ebp
jbe 0x64b0a961
mov dword [esp + 0x48], edi
mov dword [esp + 0x58], ebx
lea ecx, [edx + esi*8 + 8]
mov ecx, dword [ecx]
mov dword [esp + 0x3c], ecx
mov edx, dword [eax + 0xd4]
mov dword [esp + 0x54], edx
mov ebx, dword [eax + 0xd8]
mov dword [esp + 0x44], ebx
call fcn.64af4960
lea eax, [0x64b6fdfa]
mov dword [esp], eax
mov dword [esp + 4], 0x2f
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.64af50e0
call fcn.64af4b40
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.64af5260
lea eax, [0x64b67d00]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.64af50e0
call fcn.64af4b40
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
call fcn.64af5260
lea eax, [0x64b68c29]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.64af5260
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.64af5260
call fcn.64af4b80
call fcn.64af49d0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x78]
xor edx, edx
jmp 0x64b0a8e2
test ecx, ecx
jbe 0x64b0a867
mov dword [esp + 0x10], ebp
mov dword [esp + 0x44], ecx
mov eax, dword [ebx]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.64b0ab50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 0x44]
mov ebx, dword [ecx + 0x40]
mov ebp, dword [esp + 0x10]
cmp edx, ebp
jbe 0x64b0a85e
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
lea eax, [ebx + eax*8 - 8]
mov eax, dword [eax]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.64b0ab50
mov eax, dword [esp + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 0x50]
mov dword [esp + 0x38], edx
mov ebx, dword [esp + 0x14]
cmp edx, ebx
jne 0x64b0a78a
cmp dword [ecx + 0x54], eax
jne 0x64b0a78a
mov eax, dword [ecx + 0xf0]
mov edx, dword [ecx + 0xf4]
mov dword [esp + 0x44], edx
xor ebx, ebx
jmp 0x64b0a69e
mov ebp, dword [esp + 0x50]
lea eax, [ebp + 0x14]
mov ebp, dword [esp + 0x40]
lea ebx, [ebp + 1]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x78]
cmp ebx, edx
jge 0x64b0a6e5
lea edi, [esp + 0x60]
mov esi, eax
call fcn.64b1bd7e
mov ecx, dword [esp + 0x70]
mov ebp, dword [esp + 0x6c]
mov edx, dword [esp + 0x68]
mov edi, ebx
mov ebx, dword [ecx]
cmp dword [ecx + 4], ebp
jne 0x64b0a6e9
mov dword [esp + 0x40], edi
mov dword [esp + 0x50], eax
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.64ac2cc0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x64b0a688
jmp 0x64b0a6e9
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0xe8]
mov dword [esp + 0x58], ecx
mov eax, dword [eax + 0xec]
mov dword [esp + 0x44], eax
mov edx, dword [esp + 0x60]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x40], ebx
call fcn.64af4960
lea eax, [0x64b6d8b3]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.64af5260
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.64af5260
lea eax, [0x64b67f3c]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.64af5260
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.64af5260
call fcn.64af4b80
call fcn.64af49d0
lea eax, [0x64b691df]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.64af31b0
mov eax, dword [ecx + 0x54]
mov dword [esp + 0x34], eax
call fcn.64af4960
lea eax, [0x64b6840e]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.64af50e0
lea eax, [0x64b680d9]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.64af50e0
lea eax, [0x64b68465]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.64af50e0
lea eax, [0x64b680d3]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.64af50e0
call fcn.64af4b80
call fcn.64af49d0
lea eax, [0x64b6b90b]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.64af31b0
mov eax, ebp
mov ecx, edx
call fcn.64b1b760
xor eax, eax
mov ecx, eax
call fcn.64b1b760
mov dword [esp + 0x44], ebp
mov dword [esp + 0x58], ebx
lea eax, [edx + esi*8]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
call fcn.64af4960
lea eax, [0x64b67cd7]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.64af50e0
call fcn.64af4b40
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.64af5260
call fcn.64af4b80
call fcn.64af49d0
mov eax, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x78]
cmp edx, eax
jg 0x64b0a94b
mov ebx, dword [ecx + 0x38]
mov ebp, dword [ecx + 0x34]
mov esi, dword [ecx + 0x44]
mov edi, dword [ecx + 0x40]
cmp edx, esi
jae 0x64b0a942
lea esi, [edi + edx*8 + 4]
mov esi, dword [esi]
cmp ebx, esi
jbe 0x64b0a939
mov dword [esp + 0x1c], edx
lea eax, [ebp + esi]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.64b0b3b0
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x44]
mov edx, dword [eax + 0x40]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x1c]
cmp esi, ecx
jb 0x64b0a870
mov eax, esi
call fcn.64b1b760
mov eax, esi
mov ecx, ebx
call fcn.64b1b770
mov eax, edx
mov ecx, esi
call fcn.64b1b760
lea eax, [0x64b6d207]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.64af31b0
mov eax, ebp
call fcn.64b1b760
mov eax, esi
call fcn.64b1b760
mov eax, ebx
call fcn.64b1b770
mov eax, edx
call fcn.64b1b770
mov eax, edi
call fcn.64b1b760
call fcn.64b1b760
movzx eax, byte [ebx + 4]
mov dword [esp + 0x3c], eax
movzx ecx, byte [ebx + 5]
mov dword [esp + 0x30], ecx
movzx ebp, byte [ebx + 6]
mov dword [esp + 0x2c], ebp
movzx esi, byte [ebx + 7]
mov dword [esp + 0x28], esi
mov ebx, dword [ebx + 0x10]
mov dword [esp + 0x38], ebx
mov edi, dword [edx + 0x58]
mov dword [esp + 0x34], edi
mov edi, dword [edx + 0xd4]
mov dword [esp + 0x58], edi
mov edx, dword [edx + 0xd8]
mov dword [esp + 0x44], edx
call fcn.64af4960
lea eax, [0x64b6cb8a]
mov dword [esp], eax
mov dword [esp + 4], 0x1a
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.64af50e0
lea eax, [0x64b6827f]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.64af4ee0
lea eax, [0x64b68286]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.64af4ee0
lea eax, [0x64b68475]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.64af4ee0
lea eax, [0x64b6896b]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.64af4ee0
lea eax, [0x64b6b197]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.64af50e0
lea eax, [0x64b68294]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.64af5260
mov dword [esp + 4], 0
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.64af50e0
lea eax, [0x64b693f7]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.64af5260
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.64af5260
call fcn.64af4b80
call fcn.64af49d0
lea eax, [0x64b6d4cf]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.64af31b0
nop
call fcn.64b1a2c0
jmp fcn.64b0a3b0