Function at 0x6bf250
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x6bf6f1
sub esp, 0xa8
lea eax, [0x7ce860]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0x28], eax
call fcn.0040aa60
mov eax, dword [esp + 0x28]
lea ecx, [eax + 8]
mov edx, dword [esp]
mov dword [esp], ecx
lea ecx, [0x7afd40]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00455220
lea eax, [0x7ce800]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0x2c], eax
call fcn.0040aa60
mov eax, dword [esp + 0x2c]
lea ecx, [eax + 8]
mov edx, dword [esp]
mov dword [esp], ecx
lea ecx, [0x7af980]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00455220
mov eax, dword [0xb7c8b4]
test eax, eax
je 0x6bf6ea
mov eax, dword [eax]
lea ecx, [0x7b0640]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040aae0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x44], eax
mov ecx, dword [0xb7c8b8]
test ecx, ecx
je 0x6bf6e3
mov ecx, dword [ecx]
lea eax, [0x7b0340]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
call fcn.0040aae0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
lea ecx, [0x7fb940]
mov dword [esp], ecx
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [esp + 0x24], edi
mov dword [edi + 4], 8
mov eax, dword [0xb91180]
test eax, eax
jne 0x6bf69d
lea ecx, [0x81585e]
mov dword [edi], ecx
mov ecx, dword [esp + 0x44]
mov dword [edi + 0x1c], ecx
mov ecx, dword [esp + 0x40]
mov dword [edi + 0x20], ecx
mov ecx, dword [esp + 0x28]
mov dword [edi + 0x28], ecx
mov ecx, dword [esp + 0x2c]
mov dword [edi + 0x2c], ecx
mov ecx, dword [0xb7c8b4]
mov dword [esp + 0x3c], ecx
lea edi, [esp + 0x78]
xor eax, eax
call fcn.0044f1c4
lea ecx, [0x7b0640]
mov dword [esp], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x78]
mov dword [esp + 8], ecx
call fcn.0040bd90
jmp 0x6bf404
mov eax, dword [esp + 0x7c]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov ebx, dword [ecx]
mov ecx, dword [ecx + 4]
mov ebp, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.006bfad0
lea eax, [esp + 0x78]
mov dword [esp], eax
call fcn.0040c010
mov ecx, dword [esp + 0x78]
test ecx, ecx
jne 0x6bf3ce
mov ecx, dword [0xb7c8b8]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0x48]
xor eax, eax
call fcn.0044f1c4
lea ecx, [0x7b02c0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x48]
mov dword [esp + 8], ecx
call fcn.0040bd90
jmp 0x6bf44d
lea eax, [esp + 0x48]
mov dword [esp], eax
call fcn.0040c010
mov eax, dword [esp + 0x48]
test eax, eax
je 0x6bf618
mov ecx, dword [esp + 0x4c]
mov ecx, dword [ecx]
mov dword [esp + 0x20], ecx
mov edx, dword [eax]
mov dword [esp + 0x30], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x1c], eax
cmp eax, 0x10
jge 0x6bf55b
cmp eax, 0xd
je 0x6bf528
cmp eax, 0x10
je 0x6bf4bc
mov dword [esp], ecx
call fcn.006a6a00
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x24]
mov dword [esp], ecx
mov edx, dword [esp + 0x30]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov word [esp + 0x10], 1
call fcn.006bf880
jmp 0x6bf441
mov dword [esp], edx
lea ecx, [0x818e56]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00402010
movzx eax, byte [esp + 0xc]
test al, al
je 0x6bf517
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.006a6a00
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x24]
mov dword [esp], ecx
mov edx, dword [esp + 0x30]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov word [esp + 0x10], 0x101
call fcn.006bf880
jmp 0x6bf441
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
jmp 0x6bf487
mov dword [esp], edx
lea ecx, str.required_withresponse_codesocks_connectsrmount_errorstill_in_listtimer_expiredtrailing_datatriggerRatiounexpected__sunimplementedunknown_timerunsupported:_user_canceleduuid3_rfc4122uuid4_rfc4122uuid5_rfc4122value_method_xadd64_failedxchg64_failedyaml_NO_TOKEN_n_tschedpc:_but_progSize__nmidlelocked_on_zero_Value_out_of_range__procedure_in__t.npagesKey__to_finalizer__untyped_args__thread_limit_n.in_addr.arpa._api_grpm_mini01_0215:04:05127.0.0.1:80901907348632812595367431640625:_extra_text:___SameSiteLaxAGENT_IDP_NAMEAGENT_LOCATIONAccept_CharsetCertCloseStoreContent_LengthControlServiceCreateEventExWCreateMutexExWCreateProcessWCreateServiceWCryptGenRandomDecryptMessageDefenseEvasionDkim_SignatureEncryptMessageFindFirstFileWFormatMessageWGC_assist_waitGC_worker_initGetConsoleModeGetProcAddressGetTickCount64GetUserNameExWINTERNAL_ERRORInstEmptyWidthIsWellKnownSidIsWow64ProcessLoadLibraryExWMAX_FRAME_SIZEMB__allocated_MakeAbsoluteSDNetUserGetInfoNot_AcceptableOpenSCManagerWOther_ID_StartPROTOCOL_ERRORPattern_SyntaxProcess32NextWQuotation_MarkREFUSED_STREAMREQUEST_METHODRegSetValueExWRequest_is_nilSetConsoleModeSetFilePointerSetThreadTokenTranslateNameWVirtualProtectWaitNamedPipeWWeeklyCalendar.______e__dm_se_0m_s_0_9a_fA_F___a_zA_Z0_9__accept_charsetallocfreetracebad_allocCountbad_record_MACbad_span_statebad_stack_sizecontent_lengthdata_truncateddocument_startfile_too_largefinalizer_waitgcstoptheworldgetprotobynamehttp_error:__sinternal_errorinvalid_methodinvalid_syntaxis_a_directorykey_is_invalidkey_size_wronglen_of_type__slevel_2_haltedlevel_3_haltedmemprofilerateneed_more_datanegroni_parsernil_elem_type_no_module_datano_such_deviceparentPolicyIDpolicyExitCodepolicy_managerprotocol_errorrsax:_sign:__vruntime:_fulls.allocCount_semaRoot_queuesequence_startstack_overflowstopm_spinningstore64_failedsync.Cond.Waittext_file_busytimeEndPeriod
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00402010
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6bf4db
mov eax, dword [esp + 0x1c]
cmp eax, 0x10
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
jmp 0x6bf485
je 0x6bf5d0
cmp eax, 0x11
je 0x6bf59f
cmp eax, 0x14
jne 0x6bf487
mov dword [esp], edx
lea ecx, [0x81b365]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00402010
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6bf4db
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
jmp 0x6bf487
mov dword [esp], edx
lea ecx, [0x8195af]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00402010
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6bf4db
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
jmp 0x6bf562
mov dword [esp], edx
mov dword [esp + 4], eax
lea ecx, [0x818e56]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x10
call fcn.00401ec0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x6bf607
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
jmp 0x6bf479
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
jmp 0x6bf55d
lea eax, [0x7e3880]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0x34], eax
lea ecx, [0x7c0ae0]
mov dword [esp], ecx
call fcn.00409f80
mov eax, dword [esp + 4]
lea ecx, [0x6c2a90]
mov dword [eax], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x6bf671
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x34]
mov dword [edx + 8], eax
mov dword [ecx + 8], edx
mov dword [esp + 0xac], ecx
add esp, 0xa8
ret
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x24]
call fcn.0044f0d0
mov edx, dword [esp + 0x34]
lea edi, [edx + 8]
mov ebx, eax
mov eax, ecx
call fcn.0044f0d0
lea edi, [ebx + 8]
mov eax, edx
call fcn.0044f0d0
mov ecx, ebx
jmp 0x6bf663
lea eax, [0x81585e]
call fcn.0044f0d0
lea ecx, [edi + 0x1c]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x44]
call fcn.0044f0d0
lea edi, [edx + 0x20]
mov eax, dword [esp + 0x40]
call fcn.0044f0d0
lea edi, [edx + 0x28]
mov eax, dword [esp + 0x28]
call fcn.0044f0d0
lea edi, [edx + 0x2c]
mov eax, dword [esp + 0x2c]
call fcn.0044f0d0
jmp 0x6bf399
xor ecx, ecx
jmp 0x6bf328
xor eax, eax
jmp 0x6bf2f6
call fcn.0044d880
jmp fcn.006bf250