Function at 0x23ae15b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x23bd7ef0
mov eax, dword fs:[0]
push eax
sub esp, 0x94
push ebx
push ebp
push esi
push edi
mov eax, dword [0x23c68938]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi]
mov edi, dword [esp + 0xc0]
mov edx, dword [eax + 0xe8]
push edi
call edx
mov ebp, dword [esp + 0xbc]
push eax
push ebp
lea ecx, [esp + 0x88]
call fcn.23a677a0
cmp dword [esp + 0xc4], 0
mov dword [esp + 0xb0], 0
je 0x23ae1645
mov eax, dword [edi + 0x80]
mov ecx, dword [edi + 0x84]
mov edx, dword [edi + 0x88]
mov dword [esp + 0x14], eax
mov eax, dword [edi + 0x8c]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
jmp 0x23ae166c
lea ecx, [esp + 0x98]
call fcn.23a674f0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x14], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x18], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
lea eax, [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x28], edx
mov edx, dword [eax + 0xc]
mov eax, dword [edi + 0xbc]
mov dword [esp + 0x2c], ecx
mov ecx, edi
mov dword [esp + 0x30], edx
mov dword [esp + 0x44], eax
call fcn.23afe280
push edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0x58], eax
call fcn.23adb2e0
mov edx, dword [edi]
mov edx, dword [edx + 0xc8]
lea eax, [esp + 0x34]
push eax
mov ecx, edi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0xf0]
push edi
mov ecx, esi
call edx
mov ebx, eax
dec ebx
neg ebx
sbb ebx, ebx
inc ebx
cmp dword [esp + 0x50], 0
mov dword [esp + 0x58], ebx
jne 0x23ae16ef
cmp dword [esp + 0x44], 2
jne 0x23ae1704
mov dword [esp + 0x54], 0
jmp 0x23ae1750
cmp dword [esp + 0x50], 2
je 0x23ae1704
cmp dword [esp + 0x50], 3
je 0x23ae1704
cmp dword [esp + 0x50], 4
jne 0x23ae16e5
mov eax, dword [edi + 0x50]
test eax, eax
jne 0x23ae172f
mov eax, dword [edi + 0x48]
test eax, eax
jg 0x23ae172f
mov ecx, dword [edi + 0x11c]
test ecx, ecx
je 0x23ae1728
mov eax, dword [ecx + 0x2c]
test eax, eax
jg 0x23ae172f
mov eax, dword [ecx + 0x28]
jmp 0x23ae172b
mov eax, dword [edi + 0x44]
test eax, eax
je 0x23ae16e5
mov ecx, dword [esp + 0x14]
mov eax, dword [edi]
mov edx, dword [eax + 0xa8]
push ecx
mov ecx, edi
call edx
mov dword [esp + 0x54], eax
mov dword [esp + 0x3c], 1
test eax, eax
jne 0x23ae1758
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x54]
push eax
push ecx
push edx
lea eax, [esp + 0x78]
push eax
mov ecx, esi
call fcn.23adc360
mov edx, dword [edi]
mov eax, dword [edx + 0x84]
mov ecx, edi
call eax
mov edx, dword [edi]
mov dword [esp + 0x64], eax
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
mov edx, dword [edi]
mov dword [esp + 0x60], eax
mov eax, dword [edx + 0x6c]
mov ecx, edi
call eax
mov ecx, edi
mov dword [esp + 0x40], eax
call fcn.23aff200
mov dword [esp + 0x48], eax
mov eax, dword [edi + 0x60]
cmp eax, 0xffffffff
jne 0x23ae17c3
mov ecx, dword [edi + 0x11c]
test ecx, ecx
je 0x23ae17c3
mov ecx, dword [ecx + 0x38]
mov dword [esp + 0x4c], ecx
jmp 0x23ae17c7
mov dword [esp + 0x4c], eax
mov edx, dword [edi]
mov eax, dword [edx + 0xb4]
mov ecx, edi
call eax
cmp dword [esp + 0x44], 4
mov dword [esp + 0x90], eax
jne 0x23ae17f2
cmp dword [esp + 0x48], 5
jne 0x23ae1808
mov dword [esp + 0x48], 0
jmp 0x23ae1808
mov eax, dword [esp + 0x44]
cmp eax, 9
je 0x23ae2124
cmp eax, 0xb
je 0x23ae20e0
cmp dword [esp + 0xc4], 0
je 0x23ae18aa
cmp dword [esp + 0x44], 4
je 0x23ae183a
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
mov ecx, edi
call eax
test eax, eax
jne 0x23ae188d
mov edx, dword [esi]
mov eax, dword [edx + 0x70]
push edi
push ebp
mov ecx, esi
call eax
jmp 0x23ae188d
cmp dword [edi + 0x118], 0
je 0x23ae1862
cmp dword [esi + 0xe4], 0
je 0x23ae1862
mov ecx, dword [esi + 0xe4]
mov edx, dword [ecx]
mov eax, dword [edx + 0xa0]
push edi
push ebp
call eax
test eax, eax
jne 0x23ae188d
mov ecx, dword [esp + 0x24]
mov edx, dword [esi]
mov edx, dword [edx + 0x58]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x40]
push edi
mov dword [eax + 0xc], ecx
push ebp
mov ecx, esi
call edx
mov eax, dword [ebp]
mov edx, dword [esi]
mov dword [esp + 0x7c], eax
mov eax, dword [edx + 0x74]
push edi
mov ecx, esi
call eax
mov edx, dword [esp + 0x7c]
push eax
mov eax, dword [edx + 0x30]
mov ecx, ebp
call eax
cmp dword [esp + 0x50], 4
jne 0x23ae1ae2
mov edx, dword [edi]
mov eax, dword [edx + 0x8c]
mov ecx, edi
call eax
neg eax
sbb eax, eax
neg eax
mov ecx, esi
mov dword [esp + 0x50], eax
call fcn.23adacb0
mov edx, eax
call fcn.23adb340
mov dword [esp + 0x64], eax
mov eax, dword [esi + 0x12c]
test eax, eax
jle 0x23ae18ec
lea ecx, [eax + eax*2]
jmp 0x23ae18f8
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x64]
lea ecx, [ecx + eax + 7]
lea eax, [edx + edx - 3]
cmp eax, 0x2a
jge 0x23ae1906
mov eax, 0x2a
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
test ebx, ebx
je 0x23ae191a
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], eax
cmp dword [esp + 0xc4], 0
je 0x23ae1a63
cmp dword [esp + 0x3c], 0
je 0x23ae19eb
test ebx, ebx
je 0x23ae1969
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x28]
call fcn.23abcf10
mov ecx, eax
mov eax, dword [esp + 0x70]
cdq
sub eax, edx
mov edx, eax
mov eax, dword [ecx + 4]
mov ecx, dword [esp + 0x24]
sar edx, 1
sub eax, edx
mov edx, dword [esp + 0x64]
lea ecx, [edx + ecx + 4]
mov dword [esp + 0x18], eax
jmp 0x23ae199c
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x14]
add edx, 3
push eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x80], edx
call fcn.23abcf10
mov ecx, eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [ecx]
cdq
sub eax, edx
mov edx, dword [esp + 0x7c]
sar eax, 1
sub ecx, eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x90]
push 1
push ecx
mov ecx, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x70]
mov edx, dword [esi]
push ecx
mov ecx, dword [esp + 0x54]
mov edx, dword [edx + 0xc8]
push ecx
mov ecx, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x8c]
push ecx
mov ecx, dword [esp + 0x8c]
push ecx
lea eax, [esp + 0x38]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push eax
push ebp
mov ecx, esi
call edx
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x14], edx
mov dword [esp + 0x20], eax
test ebx, ebx
je 0x23ae1a17
mov eax, dword [esp + 0x64]
add eax, edx
mov dword [esp + 0x1c], eax
jmp 0x23ae1a22
dec eax
mov ecx, eax
sub ecx, dword [esp + 0x64]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x50]
push edx
mov edx, dword [esp + 0x18]
push ebx
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
push edi
mov dword [eax + 0xc], edx
push ebp
lea eax, [esp + 0x38]
push eax
mov ecx, esi
call fcn.23adf6b0
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push ebx
push edx
jmp 0x23ae23a5
lea ecx, [esp + 0x98]
call fcn.23a674f0
mov ecx, dword [esp + 0x50]
mov edx, dword [eax]
push ecx
push ebx
push 0
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
push edi
mov dword [ecx + 0xc], eax
push ebp
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
call fcn.23adf6b0
test ebx, ebx
je 0x23ae1ac2
mov eax, dword [esp + 0x18]
add eax, 6
cmp dword [esp + 0x38], eax
jg 0x23ae1ad3
mov edx, eax
push ebx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x38]
push edx
jmp 0x23ae23a5
mov eax, dword [esp + 0x14]
add eax, 5
cmp dword [esp + 0x34], eax
jg 0x23ae1ad3
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push ebx
push edx
jmp 0x23ae23a5
mov ecx, dword [edi + 0xc0]
call fcn.23b01e80
mov ecx, dword [esp + 0x3c]
test eax, eax
je 0x23ae1cba
test ecx, ecx
je 0x23ae1cba
mov ecx, edi
call fcn.23afe4f0
test eax, eax
lea eax, [esi + 0x114]
jne 0x23ae1b18
lea eax, [esi + 0x10c]
push eax
push ebp
lea ecx, [esp + 0xa0]
call fcn.23a677a0
xor ecx, ecx
cmp dword [esp + 0x44], 2
mov byte [esp + 0xb0], 1
sete cl
cmp dword [esp + 0xc4], 0
mov dword [esp + 0x64], ecx
je 0x23ae1c16
cmp dword [esp + 0x44], 4
jne 0x23ae1b5b
mov edx, dword [esi + 0xc8]
sub dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x28]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x28]
add ebx, 4
call fcn.23abcf10
mov ecx, eax
mov eax, dword [esp + 0x6c]
cdq
push 1
sub eax, edx
mov edx, eax
mov eax, dword [ecx]
mov ecx, dword [esp + 0x94]
push ecx
mov ecx, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x70]
push ecx
mov ecx, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x8c]
push ecx
mov ecx, dword [esp + 0x8c]
push ecx
sar edx, 1
sub eax, edx
mov edx, dword [esi]
mov edx, dword [edx + 0xc8]
push ebx
push eax
push ebp
mov ecx, esi
call edx
mov eax, dword [esp + 0x28]
mov ebx, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
lea ebx, [ebx + eax - 4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x64]
push eax
push 1
push 0
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], ebx
push edi
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
push ebp
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
call fcn.23adfe10
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov ebx, dword [esp + 0x58]
jmp 0x23ae1c8e
lea ecx, [esp + 0x6c]
call fcn.23a674f0
mov edx, dword [esp + 0x64]
push edx
mov edx, dword [eax]
push 1
push 0
push 0
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
push edi
mov dword [ecx + 0xc], eax
push ebp
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
call fcn.23adfe10
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x14]
add eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x34]
add edx, 0xa
cmp ecx, edx
mov dword [esp + 0x38], eax
jg 0x23ae1c74
mov ecx, edx
mov dword [esp + 0x34], ecx
cmp dword [edi + 0xbc], 4
jne 0x23ae1c84
add ecx, 0xb
mov dword [esp + 0x34], ecx
cmp ecx, eax
jg 0x23ae1c8e
mov ecx, eax
mov dword [esp + 0x34], ecx
push ebx
push eax
push ecx
push edi
mov edi, dword [esp + 0xc8]
push edi
mov ecx, esi
call fcn.23adb260
lea ecx, [esp + 0x98]
mov byte [esp + 0xb0], 0
call fcn.23a677e0
jmp 0x23ae23b6
cmp dword [esp + 0xc4], 0
je 0x23ae1e3d
cmp dword [esp + 0x54], 0
je 0x23ae1e3d
lea ecx, [esp + 0x24]
test ebx, ebx
jne 0x23ae1d04
lea edx, [esp + 0x14]
push edx
call fcn.23abcf10
mov ecx, eax
mov eax, dword [esp + 0x70]
cdq
sub eax, edx
mov edx, eax
mov eax, dword [ecx + 4]
mov ecx, dword [esp + 0x24]
sar edx, 1
sub eax, edx
add ecx, 3
mov dword [esp + 0x18], eax
jmp 0x23ae1d30
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x14]
add edx, 3
push eax
mov dword [esp + 0x5c], edx
call fcn.23abcf10
mov ecx, eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [ecx]
cdq
sub eax, edx
mov edx, dword [esp + 0x58]
sar eax, 1
sub ecx, eax
mov dword [esp + 0x18], edx
lea eax, [esp + 0x14]
mov dword [esp + 0x14], ecx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], edx
cmp eax, 4
jne 0x23ae1d5b
mov eax, dword [esp + 0x24]
add eax, 3
mov dword [esp + 0x58], eax
jmp 0x23ae1dda
cmp eax, 2
jne 0x23ae1d7b
cmp dword [esp + 0x3c], 0
je 0x23ae1dda
cmp dword [esp + 0x64], 0
jne 0x23ae1dda
mov ecx, dword [esp + 0x24]
add ecx, 3
mov dword [esp + 0x58], ecx
jmp 0x23ae1dda
cmp eax, 3
je 0x23ae1d85
cmp eax, 1
jne 0x23ae1dda
cmp dword [esp + 0x3c], 0
je 0x23ae1dda
cmp dword [esp + 0x64], 0
jne 0x23ae1dda
lea ecx, [esp + 0x24]
test ebx, ebx
jne 0x23ae1dba
lea edx, [esp + 0x14]
push edx
call fcn.23abcf10
mov ecx, eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [ecx]
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
mov dword [esp + 0x58], ecx
jmp 0x23ae1dda
lea eax, [esp + 0x14]
push eax
call fcn.23abcf10
mov ecx, eax
mov eax, dword [esp + 0x70]
cdq
sub eax, edx
mov edx, eax
mov eax, dword [ecx + 4]
sar edx, 1
sub eax, edx
mov dword [esp + 0x5c], eax
mov ecx, edi
call fcn.23b06710
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x54]
push 1
push edx
mov edx, dword [esp + 0x54]
push edx
mov edx, dword [esp + 0x54]
push edx
mov edx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0x54]
push edx
mov edx, dword [esp + 0x84]
push ecx
mov dword [ecx + 0x20], eax
mov ecx, dword [esp + 0x8c]
mov eax, dword [esi]
mov eax, dword [eax + 0xc8]
push ecx
mov ecx, dword [esp + 0x7c]
push edx
mov edx, dword [esp + 0x7c]
push ecx
push edx
push ebp
mov ecx, esi
call eax
mov ecx, dword [esp + 0x54]
mov dword [ecx + 0x20], 0
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x44]
dec eax
cmp eax, 9
ja case.0x23ae1e52.5
movzx edx, byte [eax + 0x23ae23fc]
jmp dword [edx*4 + 0x23ae23ec]
test ecx, ecx
jne 0x23ae1ecd
cmp dword [esp + 0xc4], ecx
je 0x23ae1e78
mov eax, dword [edi + 0xc0]
cmp dword [eax + 0xb4], ecx
jne 0x23ae1e78
xor eax, eax
jmp 0x23ae1e7d
mov eax, 1
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0xc8]
push 1
push ebx
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x50]
mov dword [eax + 8], ecx
push edi
mov dword [eax + 0xc], edx
push ebp
lea eax, [esp + 0x3c]
push eax
mov ecx, esi
call fcn.23adfe10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
add eax, 6
push ebx
add ecx, 6
push eax
push ecx
jmp 0x23ae23a6
cmp dword [esp + 0x64], 0
jne 0x23ae1f47
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x28]
call fcn.23abcf10
mov edx, dword [eax + 4]
mov ecx, dword [esi]
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff9
mov dword [esp + 0x7c], ecx
push 0
mov ecx, edi
mov dword [esp + 0x5c], edx
mov dword [esp + 0x18], eax
call fcn.23aff200
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0xb4]
mov ecx, edi
call eax
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x6c]
mov ecx, edi
call eax
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x8c]
push ecx
push edx
mov edx, dword [eax + 0x10c]
push edi
push ebp
mov ecx, esi
call edx
mov eax, dword [esp + 0x38]
push ebx
lea ecx, [eax + 7]
push eax
push ecx
jmp 0x23ae23a6
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov eax, dword [edi + 0xc0]
mov eax, dword [eax + 0xb4]
push ecx
mov ecx, dword [esp + 0x38]
push edx
xor edx, edx
test eax, eax
mov eax, dword [esp + 0xcc]
setne dl
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x38]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0xb4]
push edi
push ebp
push eax
mov ecx, esi
call fcn.23ae0bc0
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ebx
push ecx
push edx
jmp 0x23ae23a6
test ecx, ecx
jne 0x23ae1fc5
mov eax, 0x16
mov edx, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], edx
jmp 0x23ae1fc9
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x64], 0
jne 0x23ae1fe1
mov eax, dword [esi + 0xc8]
add eax, dword [esp + 0x34]
push ebx
push edx
jmp 0x23ae23a5
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [esi + 0xc8]
push eax
mov eax, dword [esp + 0xc8]
push edx
mov edx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x30]
push 0
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x54]
push edi
push ebp
lea edx, [esp + 0x40]
mov dword [eax + 0xc], ecx
push edx
mov ecx, esi
call fcn.23ae0bc0
mov eax, dword [esi + 0xc8]
add eax, dword [esp + 0x14]
jmp 0x23ae239f
cmp dword [esp + 0x64], 0
jne 0x23ae2054
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push ebx
push eax
push ecx
jmp 0x23ae23a6
test ecx, ecx
jne 0x23ae2069
mov ecx, dword [esp + 0x38]
mov eax, 0x16
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0xc8]
push eax
push ecx
mov ecx, dword [esp + 0x30]
push 0
push edx
mov edx, dword [esp + 0x3c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x88]
jmp 0x23ae1f99
mov esi, dword [esp + 0xb8]
lea ecx, [esp + 0x80]
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esp + 0xb0], 0xffffffff
call fcn.23a677e0
mov eax, esi
jmp 0x23ae23cf
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esi]
mov edx, dword [edx + 0xdc]
push eax
mov eax, dword [esp + 0x64]
push ecx
mov ecx, dword [esp + 0x48]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push 0
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
lea eax, [esp + 0x38]
jmp 0x23ae2166
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esi]
mov edx, dword [edx + 0xd8]
push eax
mov eax, dword [esp + 0x64]
push ecx
mov ecx, dword [esp + 0x48]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push 0
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
lea eax, [esp + 0x7c]
push ebp
push eax
mov ecx, esi
call edx
cmp dword [esp + 0xc4], 0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], edx
je 0x23ae2343
mov eax, dword [ebp]
mov edx, dword [esi]
mov dword [esp + 0x58], eax
mov eax, dword [edx + 0x74]
push edi
mov ecx, esi
call eax
mov edx, dword [esp + 0x58]
push eax
mov eax, dword [edx + 0x30]
mov ecx, ebp
call eax
test ebx, ebx
jne 0x23ae21ff
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
add eax, dword [esp + 0x30]
cdq
sub eax, edx
mov edx, dword [esp + 0x24]
add edx, 3
add edx, ecx
mov ecx, dword [esp + 0x70]
sar eax, 1
add ecx, eax
mov dword [esp + 0xa4], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x6c]
lea eax, [eax + edx + 5]
add ecx, 3
mov dword [esp + 0x24], eax
jmp 0x23ae225a
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
lea eax, [edx + ecx]
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0x6c]
cdq
sub eax, edx
sar eax, 1
sar ecx, 1
sub ecx, eax
mov eax, dword [esp + 0x6c]
lea edx, [ecx + eax]
mov eax, dword [esp + 0x70]
mov dword [esp + 0xa0], edx
mov edx, dword [esp + 0x28]
add edx, 3
add eax, edx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x70]
lea eax, [eax + edx + 5]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x50]
push eax
mov eax, dword [esp + 0x68]
mov edx, dword [esi]
push eax
mov eax, dword [esp + 0x4c]
push eax
push 1
sub esp, 0x10
cmp dword [esp + 0x68], 0xb
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], ecx
push ebp
lea eax, [esp + 0x3c]
mov ecx, esi
push eax
jne 0x23ae22a5
mov edx, dword [edx + 0xdc]
jmp 0x23ae22ab
mov edx, dword [edx + 0xd8]
call edx
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0xc4]
push 0
push eax
push ecx
mov ecx, dword [esp + 0x30]
push 0
push edx
mov edx, dword [esp + 0x3c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + 8], ecx
push edi
mov dword [eax + 0xc], edx
push ebp
lea eax, [esp + 0x40]
push eax
mov ecx, esi
call fcn.23ae0bc0
cmp dword [esp + 0x40], 2
je 0x23ae22ff
cmp dword [esp + 0x40], 3
jne 0x23ae2336
mov edx, dword [ebp]
push 0x12
mov ecx, esi
call fcn.23adaa20
push eax
mov eax, dword [edx + 0x30]
mov ecx, ebp
call eax
mov edx, dword [ebp]
push 0xf
mov ecx, esi
call fcn.23adaa20
push eax
mov eax, dword [edx + 0x2c]
mov ecx, ebp
call eax
mov edx, dword [ebp + 4]
lea ecx, [esp + 0x24]
push ecx
push edx
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
push ebx
push eax
push ecx
jmp 0x23ae23a6
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x24]
push 0
push edx
mov edx, dword [esp + 0x30]
push eax
push 0
push 0
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + 8], ecx
push edi
mov dword [eax + 0xc], edx
push ebp
lea eax, [esp + 0x40]
push eax
mov ecx, esi
call fcn.23ae0bc0
mov eax, dword [esp + 0x14]
test ebx, ebx
je 0x23ae2397
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x70]
lea ecx, [ecx + edx + 5]
jmp 0x23ae23a3
mov ecx, dword [esp + 0x6c]
lea eax, [eax + ecx + 5]
mov ecx, dword [esp + 0x18]
push ebx
push ecx
push eax
push edi
mov edi, dword [esp + 0xc8]
push edi
mov ecx, esi
call fcn.23adb260
lea ecx, [esp + 0x80]
mov dword [esp + 0xb0], 0xffffffff
call fcn.23a677e0
mov eax, edi
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa0
ret 0x10