Function at 0x63a5a0
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe4]
cmp eax, dword [ecx + 8]
jbe 0x63b362
sub esp, 0x164
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], 0
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
call fcn.00470800
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
test eax, eax
je 0x63a604
xor ecx, ecx
jmp 0x63a60c
test edx, edx
jbe 0x63b358
mov dword [esp + 0xc0], ecx
lea edi, [esp + 0x120]
xor eax, eax
call fcn.00462cef
call fcn.00638f00
lea ecx, [0x680280]
mov dword [esp], ecx
call fcn.0040b7c0
mov ecx, dword [esp + 4]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x120], 4
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x14], 0x8000004
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
lea edx, [esp + 0x120]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], ecx
call fcn.004738c0
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3c], ecx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
call fcn.0063bf60
mov ecx, dword [esp + 0x3c]
test ecx, ecx
jne 0x63af38
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 4]
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
lea edx, [0x63bf20]
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], ecx
lea ecx, [esp + 0x70]
mov dword [esp + 0xa8], ecx
lea ecx, [esp + 0x9c]
mov dword [esp], ecx
call fcn.00435bb0
test eax, eax
jne 0x63af63
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea edx, [0x63bee0]
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], ecx
lea ecx, [esp + 0x68]
mov dword [esp + 0x84], ecx
lea ecx, [esp + 0x78]
mov dword [esp], ecx
call fcn.00435bb0
test eax, eax
jne 0x63af57
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax]
mov dword [esp + 0x64], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x60], edx
lea ebx, [0x67a040]
mov dword [esp], ebx
call fcn.0040b7c0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x174]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x178]
mov dword [edi + 8], ecx
mov ecx, dword [0x8e4520]
test ecx, ecx
jne 0x63a7dc
mov ecx, dword [esp + 0x170]
mov dword [edi], ecx
jmp 0x63a7e8
mov eax, dword [esp + 0x170]
call fcn.00462a70
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xffffffff
lea eax, [0x70aa00]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.004e2740
mov eax, dword [esp + 8]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x40], ecx
call fcn.00638f00
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x63af38
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 0x20]
mov edx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x18]
mov ebp, dword [eax + 0x14]
lea esi, [0x64fd60]
cmp ebp, esi
jne 0x63b342
mov dword [esp + 0xc8], edx
mov dword [esp + 0x44], ecx
mov dword [esp + 0xec], ebx
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x38], eax
lea ecx, [0x691dc0]
mov dword [esp], ecx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [esp + 0x11c], eax
mov dword [eax], 0x100002
mov dword [esp + 0xe4], eax
lea ecx, [0x65dbc0]
mov dword [esp], ecx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x60]
mov dword [eax], ecx
mov edx, dword [esp + 0xe4]
mov dword [eax + 4], edx
mov edx, dword [0x8bc0c0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0046e540
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x63af38
mov eax, dword [esp + 0x11c]
mov ecx, dword [eax + 0xa4]
mov dword [esp + 0x5c], ecx
lea edx, [0x662d20]
mov dword [esp], edx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [esp + 0x110], eax
lea ecx, [0x662da0]
mov dword [esp], ecx
mov dword [esp + 4], 4
mov dword [esp + 8], 4
call fcn.0044b410
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0x110]
mov dword [esp + 0xdc], ecx
lea ecx, [0x65e1c0]
mov dword [esp], ecx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x5c]
add edx, 8
mov dword [esp + 0x48], edx
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xe0]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], 4
mov ebx, dword [esp + 0xdc]
mov dword [eax + 0x10], ebx
mov ebx, dword [0x8bc0c8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e540
mov eax, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
call fcn.0063bbf0
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x63af38
nop
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jne 0x63aa78
lea eax, [0x65dbc0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x5c]
mov dword [eax + 4], edx
mov ebx, dword [0x8bc0d4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0046e540
cmp dword [esp + 0x10], 1
je 0x63af16
lea eax, [0x662de0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [esp + 0x114], eax
lea ecx, [0x65e1c0]
mov dword [esp], ecx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xec]
mov ebp, dword [ebx + 0x38]
mov dword [eax + 8], ebp
mov dword [eax + 0xc], 0x3000
mov dword [eax + 0x10], 0x40
mov ebp, dword [0x8bc0dc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e540
mov eax, dword [esp + 0x10]
mov dword [esp + 0x58], eax
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0063b990
mov eax, dword [esp + 0x58]
test eax, eax
je 0x63ab44
mov ecx, dword [esp + 0x114]
mov dword [ecx], eax
jmp 0x63abb5
lea eax, [0x65e1c0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov dword [eax + 4], 0
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 0x38]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], 0x3000
mov dword [eax + 0x10], 0x40
mov ebx, dword [0x8bc0dc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e540
mov eax, dword [esp + 0x10]
test eax, eax
je 0x63aef4
mov ecx, dword [esp + 0x114]
mov dword [ecx], eax
lea eax, [0x662de0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [esp + 0x10c], eax
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x114]
cmp dword [edx], ecx
je 0x63ac52
mov dword [esp + 0xd8], edx
mov dword [esp + 0xd4], eax
lea ecx, [0x65e1c0]
mov dword [esp], ecx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x48]
mov dword [eax + 4], edx
mov edx, dword [esp + 0xd8]
mov dword [eax + 8], edx
mov dword [eax + 0xc], 4
mov edx, dword [esp + 0xd4]
mov dword [eax + 0x10], edx
mov edx, dword [0x8bc0d8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e540
cmp dword [esp + 0x10], 1
je 0x63aed2
call fcn.00638f00
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.0063b7f0
mov eax, dword [esp + 0xec]
mov word [eax + 0x44], 2
mov ecx, dword [esp + 0x114]
mov edx, dword [ecx]
mov ebx, dword [esp + 0x38]
cmp edx, ebx
je 0x63acd2
mov ebx, dword [esp + 0xcc]
movzx ebp, word [ebx + 0x12]
test bp, 1
ja 0x63acb0
mov dword [eax + 0x1c], edx
jmp 0x63acd2
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
mov edx, dword [eax + 0x10]
add edx, dword [ecx]
mov ebx, dword [esp + 0x11c]
mov dword [ebx + 0xb0], edx
mov dword [esp + 0x108], ebx
lea edx, [0x65dbc0]
mov dword [esp], edx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x60]
mov dword [eax], ecx
mov ecx, dword [esp + 0x108]
mov dword [eax + 4], ecx
mov ecx, dword [0x8bc0d0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0046e540
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x63af38
mov edx, dword [esp + 0x174]
test edx, edx
jbe 0x63b339
mov eax, dword [esp + 0x170]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x100], eax
lea ecx, [0x65e1c0]
mov dword [esp], ecx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x114]
mov ebx, dword [edx]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0x104]
mov dword [eax + 8], ebx
mov ebx, dword [esp + 0xec]
mov ebp, dword [ebx + 0x3c]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x100]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x8bc0d8]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e540
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x63af38
lea eax, [0x662de0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [esp + 0x118], eax
mov dword [esp + 0xfc], eax
lea ecx, [0x65e1c0]
mov dword [esp], ecx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x114]
mov ebx, dword [edx]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xec]
mov ebp, dword [ebx + 0x3c]
mov dword [eax + 8], ebp
mov dword [eax + 0xc], 2
mov ebp, dword [esp + 0xfc]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x8bc0c4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e540
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0063b590
mov eax, dword [esp + 0x34]
test eax, eax
je 0x63aeb0
xor eax, eax
jmp 0x63af76
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], 0
call fcn.004361a0
add esp, 0x164
ret
call fcn.004361a0
add esp, 0x164
ret
call fcn.004361a0
add esp, 0x164
ret
mov ecx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
jge 0x63b28c
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xc8]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0xd0], edx
mov dword [esp], edx
call fcn.004e5fd0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
test eax, eax
jne 0x63b26a
test edx, edx
jbe 0x63b330
mov dword [esp + 0xf8], ecx
mov eax, dword [esp + 0x10c]
mov dword [esp + 0xf4], eax
lea ecx, [0x65e1c0]
mov dword [esp], ecx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0xd0]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0x114]
add ebx, dword [ebp]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + 8], ebx
mov ebx, dword [edx + 0x10]
mov dword [eax + 0xc], ebx
mov ebx, dword [esp + 0xf4]
mov dword [eax + 0x10], ebx
mov ebx, dword [0x8bc0d8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e540
cmp dword [esp + 0x10], 1
je 0x63b248
mov edx, dword [esp + 0xcc]
movzx ebx, word [edx + 2]
dec ebx
mov eax, dword [esp + 0x4c]
cmp eax, ebx
jne 0x63b076
mov ebx, dword [esp + 0xec]
mov ebp, dword [ebx + 0x38]
mov esi, dword [esp + 0xd0]
sub ebp, dword [esi + 0xc]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
jmp 0x63b0b1
lea ebx, [eax + 1]
mov ecx, dword [esp + 0x44]
cmp ecx, ebx
jbe 0x63b329
mov ebx, dword [esp + 0xc8]
mov ebp, dword [ebx + eax*4 + 4]
mov ebp, dword [ebp + 0xc]
cmp eax, ecx
jae 0x63b324
mov esi, dword [ebx + eax*4]
sub ebp, dword [esi + 0xc]
cmp eax, ecx
mov ebx, dword [esp + 0xec]
mov esi, dword [esp + 0xd0]
jae 0x63b31f
mov dword [esp + 0x54], ebp
mov edi, dword [esp + 0xc8]
mov ebx, dword [edi + eax*4]
mov ebx, dword [ebx + 0x24]
test ebx, 0x20000000
jbe 0x63b120
test ebx, 0x40000000
jbe 0x63b0f2
test ebx, 0x80000000
jbe 0x63b0ea
mov ebx, 0x40
jmp 0x63b16c
test ebx, 0x20000000
jmp 0x63b0f8
test ebx, 0x20000000
jbe 0x63b120
test ebx, 0x40000000
jbe 0x63b109
mov ebx, 0x20
jmp 0x63b16c
test ebx, 0x20000000
jbe 0x63b120
test ebx, 0x80000000
jbe 0x63b120
mov ebx, pe_nt_image_headers32
jmp 0x63b16c
test ebx, 0x40000000
jbe 0x63b137
test ebx, 0x80000000
jbe 0x63b137
mov ebx, 4
jmp 0x63b16c
mov ebx, dword [esi + 0x24]
test ebx, 0x20000000
jbe 0x63b149
mov ebx, 0x10
jmp 0x63b16c
test ebx, 0x40000000
jbe 0x63b158
mov ebx, 2
jmp 0x63b16c
test ebx, 0x80000000
jbe 0x63b167
mov ebx, 8
jmp 0x63b16c
mov ebx, 1
mov dword [esp + 0x50], ebx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.0063b370
mov eax, dword [esp + 0x118]
mov dword [esp + 0xf0], eax
lea ecx, [0x65e1c0]
mov dword [esp], ecx
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0xd0]
mov edx, dword [edx + 0xc]
mov ebx, dword [esp + 0x114]
add edx, dword [ebx]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x50]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0xf0]
mov dword [eax + 0x10], edx
mov edx, dword [0x8bc0c4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e540
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x63af6f
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
lea eax, [0x65dbc0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xc4]
mov edx, dword [ecx + 4]
mov dword [eax], edx
mov dword [eax + 4], 0
mov edx, dword [0x8bc0cc]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0046e540
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x63b2fd
mov byte [esp + 0x17c], 1
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.004361a0
add esp, 0x164
ret
call fcn.00462af0
call fcn.00462af0
mov eax, ebx
call fcn.00462af0
xor eax, eax
mov ecx, eax
call fcn.00462af0
xor eax, eax
mov ecx, eax
call fcn.00462af0
mov dword [esp], ebp
mov dword [esp + 4], esi
lea eax, [0x662460]
mov dword [esp + 8], eax
call fcn.00408df0
xor eax, eax
mov ecx, eax
call fcn.00462af0
nop
call fcn.00461660
jmp fcn.0063a5a0