Function at 0x606430
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x110]
cmp eax, dword [ecx + 8]
jbe 0x606d96
sub esp, 0x190
mov eax, dword [esp + 0x198]
test eax, eax
je 0x6064bf
mov eax, dword [eax + 8]
cmp eax, 0x9eaa9ae
jne 0x606489
mov eax, dword [esp + 0x198]
lea ecx, [0x73dfe0]
cmp eax, ecx
jne 0x6064b7
mov eax, dword [esp + 0x19c]
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
xor ebx, ebx
jmp 0x6064c5
cmp eax, 0x4b6059d3
jne 0x6064b7
mov eax, dword [esp + 0x198]
lea ecx, [0x73dd60]
cmp eax, ecx
jne 0x6064b7
mov edx, dword [esp + 0x19c]
mov ebx, dword [edx]
test ebx, ebx
sete bl
mov ecx, dword [edx + 0x10]
mov eax, dword [edx + 0xc]
jmp 0x6064c5
xor ebx, ebx
xor ecx, ecx
xor eax, eax
jmp 0x6064c5
xor ebx, ebx
xor ecx, ecx
xor eax, eax
mov byte [esp + 0x27], bl
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0x194]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], bl
call fcn.00604e70
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x60667d
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x154], ebx
mov eax, dword [esp + 0x194]
mov dword [esp], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 8], ecx
movzx ecx, byte [esp + 0x27]
mov byte [esp + 0xc], cl
call fcn.00604e70
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x606647
test ebp, ebp
jne 0x6065ab
mov ecx, dword [esp + 0x3c]
test ecx, ecx
jne 0x6065b7
mov eax, dword [0xa84638]
mov ecx, dword [0xa8463c]
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x1b4], ecx
add esp, 0x190
ret
mov eax, edx
mov edx, dword [esp + 0x3c]
test edx, edx
je 0x6065c2
mov ecx, edx
mov eax, ecx
mov edx, dword [esp + 0x154]
jmp 0x6065cc
test ebp, ebp
je 0x606611
mov eax, edx
mov edx, ebx
mov ecx, ebp
mov dword [esp + 0x148], edx
mov dword [esp + 0x44], ebp
mov dword [esp + 0x28], ecx
mov dword [esp + 0x158], ebx
mov esi, dword [esp + 0x194]
xor edi, edi
xor edi, edi
mov dword [esp + 0x2c], edi
xor edi, edi
mov dword [esp + 0x38], edi
lea edi, [0xaaacd4]
mov dword [esp + 0x150], edi
xor edi, edi
mov dword [esp + 0x34], edi
xor edi, edi
jmp 0x6066f0
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1b4], eax
add esp, 0x190
ret
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1b4], edx
add esp, 0x190
ret
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1b4], edx
add esp, 0x190
ret
lea edi, [edx + 1]
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x148]
mov edx, esi
mov esi, dword [esp + 0x194]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x150], ebp
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x158]
mov ebp, dword [esp + 0x44]
cmp ecx, edi
jbe 0x606b73
mov dword [esp + 0x40], edi
lea edi, [esp + 0x168]
xor eax, eax
call fcn.00464656
mov ecx, dword [esp + 0x40]
mov edi, ebx
lea ebx, [ecx + ecx*2]
mov dword [esp + 0x54], ebx
mov ebp, dword [edx + ebx*4]
test ebp, ebp
xchg ebp, ebx
seta bl
xchg ebp, ebx
mov edx, dword [edx + ebx*4 + 4]
test edx, edx
seta bl
sete cl
and ecx, ebp
or ebx, ecx
test bl, bl
je 0x6069e0
and edx, 0x80000000
test edx, edx
jbe 0x60682e
mov byte [esp + 0x172], 1
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x148]
mov ebx, dword [edx + ecx*4]
and ebx, 0xffff
mov dword [esp + 0x174], ebx
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
cmp ebx, ebp
jae 0x6067ad
mov ebp, dword [esp + 0x154]
mov edx, dword [ebp + ecx*4 + 4]
mov eax, dword [ebp + ecx*4]
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], edx
mov eax, dword [ebp + ecx*4 + 8]
mov dword [esp + 0x18c], eax
xor eax, eax
mov edx, dword [esp + 0x148]
mov ebp, dword [esp + 0x3c]
mov ebp, dword [esp + 0x44]
cmp ebx, ebp
jae 0x6067d5
mov ebp, dword [edi + ecx*4 + 4]
mov edx, dword [edi + ecx*4]
mov dword [esp + 0x180], edx
mov dword [esp + 0x184], ebp
mov ecx, dword [edi + ecx*4 + 8]
mov dword [esp + 0x188], ecx
mov eax, dword [esp + 0x174]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.004b1430
mov dword [esp], 0
lea eax, str._SYhs__________P__________T_d_s________n._______0____a._...._..a.c.f.h.n.p.s.t____i00010X0b0o0s0x22255380:_::_______________A3A4CNCcCfCoCsLlLmLoLtLuMcMeMnMuNONdNlNoNuONOUOnPcPdPePfPiPoPsR8R9STScSkSmSoTeV1V2V3V5V6XiYiZlZpZs_____:__n____._09_DESW____acd_f_n_r_s_tw_n__n_t_t_
mov dword [esp + 4], eax
mov dword [esp + 8], 1
call fcn.0044ec00
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
jmp 0x6069d0
movzx ecx, byte [esp + 0x27]
test cl, cl
je 0x60688c
mov edx, edi
lea edi, [esp + 0x58]
call fcn.00464624
mov ecx, dword [esi + 0x78]
mov ebx, dword [esi + 0x7c]
lea ebp, [0x7a9ca0]
cmp ecx, ebp
jne 0x606d7f
lea edi, [esp + 0x58]
mov esi, ebx
call fcn.00464918
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x148]
mov ebp, dword [ebx + ecx*4]
mov eax, dword [ebx + ecx*4 + 4]
mov esi, edx
mov edx, dword [esp + 0x70]
mov edi, ecx
mov ecx, dword [esp + 0x74]
sub ebp, edx
sbb eax, ecx
mov dword [ebx + edi*4], ebp
mov dword [ebx + edi*4 + 4], eax
jmp 0x606899
mov ebx, dword [esp + 0x148]
mov esi, edi
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jae 0x6068d4
mov edx, dword [esp + 0x154]
mov ebp, dword [edx + edi*4]
mov ecx, dword [edx + edi*4 + 4]
mov dword [esp + 0x178], ebp
and ecx, 0x7fffffff
mov dword [esp + 0x17c], ecx
mov ecx, dword [edx + edi*4 + 8]
mov dword [esp + 0x18c], ecx
jmp 0x6068db
mov edx, dword [esp + 0x154]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
jae 0x606909
mov ebp, dword [esi + edi*4]
mov ecx, dword [esi + edi*4 + 4]
mov dword [esp + 0x180], ebp
and ecx, 0x7fffffff
mov dword [esp + 0x184], ecx
mov ecx, dword [esi + edi*4 + 8]
mov dword [esp + 0x188], ecx
mov eax, dword [ebx + edi*4]
mov ecx, dword [esp + 0x194]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00602c20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x194]
mov edx, dword [ecx + 0x28c]
mov ebx, dword [ecx + 0x288]
mov ebp, dword [ecx + 0x290]
cmp edx, eax
jb 0x606d78
sub edx, eax
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and eax, ebp
cmp edx, 1
jbe 0x606d6c
movzx eax, word [ebx + eax]
mov word [esp + 0x170], ax
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x148]
mov eax, dword [edx + eax*4]
add eax, 2
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x200
call fcn.00603050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00602700
movzx eax, byte [esp + 8]
test al, al
jne 0x6069d0
lea ecx, [0x7b7ca4]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], 9
xor eax, eax
mov esi, dword [esp + 0x194]
mov edi, dword [esp + 0x158]
mov ecx, dword [esp + 0x16c]
mov edx, dword [esp + 0x174]
test edx, edx
jne 0x606a31
test ecx, ecx
jne 0x606a31
mov ecx, dword [0xa7b188]
mov dword [esp + 0x15c], ecx
mov edx, dword [0xa7b18c]
mov dword [esp + 0x48], edx
mov ebx, dword [esi + 0x274]
mov dword [esp + 0x30], ebx
mov ebp, dword [esi + 0x270]
mov dword [esp + 0x14c], ebp
xor eax, eax
mov dword [esp + 0x54], eax
xor eax, eax
jmp 0x606c28
mov ecx, dword [esp + 0x168]
cmp dword [esp + 0x16c], 9
jne 0x606aa7
mov dword [esp], ecx
lea eax, [0x7b7ca4]
mov dword [esp + 4], eax
mov dword [esp + 8], 9
call fcn.00402a70
movzx eax, byte [esp + 0xc]
test al, al
je 0x606a97
mov ecx, dword [esp + 0x2c]
cmp ecx, 0x3e8
jbe 0x606a7e
mov edx, dword [esp + 0x40]
cmp ecx, edx
jne 0x606a82
jmp 0x606bb4
mov edx, dword [esp + 0x40]
inc ecx
mov eax, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x150]
jmp 0x6066b3
xor eax, eax
mov esi, dword [esp + 0x194]
mov edi, dword [esp + 0x158]
mov ecx, dword [esp + 0x34]
inc ecx
mov edx, dword [esp + 0x38]
cmp edx, ecx
jb 0x606abd
mov ebx, dword [esp + 0x150]
jmp 0x606b04
mov eax, dword [esp + 0x150]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x797300]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x194]
mov edi, dword [esp + 0x158]
mov ebx, eax
xor eax, eax
mov dword [esp + 0x34], ecx
lea ebp, [ecx + ecx*4]
lea ebp, [ebx + ebp*8 - 0x28]
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x606b29
mov edi, ebp
lea esi, [esp + 0x168]
call fcn.00464b0c
jmp 0x606b5e
mov dword [esp + 0x164], ebx
mov dword [esp + 0x50], edx
lea eax, [0x797300]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [esp + 0x168]
mov dword [esp + 8], eax
call fcn.00411480
xor eax, eax
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x164]
mov ecx, dword [esp + 0x2c]
mov eax, edx
mov ebp, ebx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x34]
jmp 0x6066b3
mov eax, dword [esp + 0x150]
mov dword [esp + 0x1a4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1a8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x1b0], 0
mov dword [esp + 0x1b4], 0
add esp, 0x190
ret
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x28
lea ecx, [0x7cfadf]
mov dword [eax], ecx
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
lea ecx, [0x844124]
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1b4], eax
add esp, 0x190
ret
inc ecx
mov ebp, dword [esp + 0x14c]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x15c]
mov ecx, dword [esp + 0x54]
cmp ecx, ebx
jge 0x606c95
lea ebp, [ebp + ecx*8]
mov ebx, dword [ebp + 4]
mov ebp, dword [ebp]
cmp ebx, edx
jne 0x606c11
mov dword [esp], ebp
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00402a70
movzx eax, byte [esp + 0xc]
test al, al
jne 0x606c78
xor eax, eax
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x48]
mov esi, dword [esp + 0x194]
mov edi, dword [esp + 0x158]
jmp 0x606c11
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x30]
cmp ecx, edx
mov eax, 0
mov esi, dword [esp + 0x194]
mov edi, dword [esp + 0x158]
jl 0x606a31
mov ecx, dword [esi + 0x274]
inc ecx
mov edx, dword [esi + 0x270]
mov ebx, dword [esi + 0x278]
cmp ebx, ecx
jae 0x606d17
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x758c80]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x194]
mov dword [ebx + 0x278], edx
mov edx, dword [0xaab020]
test edx, edx
jne 0x606cff
mov dword [ebx + 0x270], eax
jmp 0x606d0a
lea edi, [ebx + 0x270]
call fcn.004643b0
mov esi, ebx
mov edi, dword [esp + 0x158]
mov edx, eax
xor eax, eax
mov dword [esi + 0x274], ecx
mov ebx, dword [0xa7b188]
mov dword [esp + 0x160], ebx
lea ebp, [edx + ecx*8 - 4]
mov ebx, dword [0xa7b18c]
mov dword [ebp], ebx
lea ecx, [edx + ecx*8 - 8]
mov edx, dword [0xaab020]
test edx, edx
jne 0x606d53
mov edx, dword [esp + 0x160]
mov dword [ecx], edx
jmp 0x606a31
mov edx, edi
mov edi, ecx
mov eax, dword [esp + 0x160]
call fcn.004643b0
xor eax, eax
mov edi, edx
jmp 0x606a31
mov eax, 1
mov ecx, edx
call fcn.00464430
mov ecx, edx
call fcn.004644a0
mov dword [esp], ecx
mov dword [esp + 4], ebp
lea eax, [0x758500]
mov dword [esp + 8], eax
call fcn.00409250
nop
call fcn.00462fa0
jmp fcn.00606430