Function at 0x6d0de0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xa8]
cmp eax, dword [ecx + 8]
jbe 0x6d19c7
sub esp, 0x128
mov eax, dword [esp + 0x134]
test eax, eax
je 0x6d1988
mov ecx, dword [esp + 0x12c]
mov edx, dword [ecx + 0x20]
mov ebx, dword [ecx + 0x24]
lea ebp, [ecx + 0x20]
mov dword [esp + 0xb4], ebp
test ebx, ebx
jle 0x6d0e58
mov edx, dword [edx + ebx*4 - 4]
mov esi, dword [edx + 0x10]
mov edi, dword [edx + 0xc]
test esi, esi
jbe 0x6d19c0
mov esi, dword [edi + 4]
mov edi, dword [edi]
lea ebp, [0x926b80]
cmp edi, ebp
jne 0x6d197e
je 0x6d1389
mov dword [esp + 0x48], ebx
lea ecx, [0x865160]
mov dword [esp], ecx
mov dword [esp + 4], ebx
lea edx, [ebx + eax]
mov dword [esp + 8], edx
call fcn.00438ab0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x84], edx
lea edi, [esp + 0xb8]
xor eax, eax
call fcn.0044c959
lea edi, [esp + 0xd4]
call fcn.0044c94b
lea eax, [esp + 0xd4]
mov dword [esp + 0xc4], eax
call fcn.0043cee0
mov eax, dword [esp]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x12c]
xor ebp, ebp
jmp 0x6d0eed
inc ebp
mov esi, dword [esp + 0x84]
mov edx, esi
mov ebx, edi
cmp ebp, eax
jge 0x6d1002
mov esi, dword [ebx + 0x24]
mov edi, ebx
mov ebx, dword [ebx + 0x20]
cmp ebp, esi
jae 0x6d19a4
mov ebx, dword [ebx + ebp*4]
cmp ebp, ecx
jae 0x6d199d
lea esi, [edx + ebp*4]
mov dword [esp + 0xb0], esi
mov esi, dword [0xc6f140]
test esi, esi
jne 0x6d0fe7
mov dword [edx + ebp*4], ebx
mov esi, dword [ebx + 0x10]
mov ebx, dword [ebx + 0xc]
test esi, esi
jbe 0x6d1996
mov esi, dword [ebx + 4]
mov ebx, dword [ebx]
lea edx, [0x926b80]
cmp ebx, edx
jne 0x6d0fdd
jne 0x6d0ee1
mov dword [esp + 0x58], ebp
mov eax, dword [esi + 0x10]
mov dword [esp + 0x38], eax
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x64], ecx
lea edx, [0x80f920]
mov dword [esp], edx
mov ebx, dword [0xc5bbd8]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040e700
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
je 0x6d0fd3
lea edx, [0x80f2a0]
mov dword [esp], edx
lea ebx, [esp + 0xb8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0040ede0
mov eax, dword [esp + 0x10]
mov byte [eax], 1
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
lea edx, [0x926b80]
mov ebp, dword [esp + 0x58]
mov edi, dword [esp + 0x12c]
jmp 0x6d0ee1
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x38]
jmp 0x6d0f8d
mov esi, 0
jmp 0x6d0f4c
mov esi, edi
mov edi, dword [esp + 0xb0]
mov eax, ebx
call fcn.0044c860
mov eax, dword [esp + 0x48]
mov edi, esi
jmp 0x6d0f2b
xor eax, eax
mov ebp, dword [esp + 0x50]
jmp 0x6d101e
mov esi, dword [esp + 0x60]
inc esi
mov ebx, dword [esp + 0x12c]
mov ebp, edx
mov edx, ecx
mov ecx, eax
mov eax, esi
mov esi, dword [esp + 0x134]
cmp eax, esi
jge 0x6d135f
mov dword [esp + 0x60], eax
mov dword [esp + 0xac], edx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], ebp
mov ecx, dword [esp + 0x130]
lea edx, [ecx + eax*8]
mov ebx, dword [edx]
mov dword [esp + 0x90], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x54], edx
lea ebp, [0x80f920]
mov dword [esp], ebp
mov esi, dword [0xc5bbd8]
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.0040e700
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test eax, eax
je 0x6d134f
lea edx, [0x80f2a0]
mov dword [esp], edx
lea ebx, [esp + 0xb8]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040e700
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
test al, al
je 0x6d10cb
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x2c]
jmp 0x6d100a
mov eax, dword [esp + 0x12c]
mov ecx, dword [eax + 4]
mov dword [esp + 0x44], ecx
lea edx, [0x863a60]
mov dword [esp], edx
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [eax], 9
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x10], ecx
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6d132d
mov ecx, dword [esp + 0x90]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], 0
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
lea ecx, [0x863920]
mov dword [esp], ecx
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [esp + 0x98], eax
mov dword [eax], 4
lea ecx, [0x7f6be0]
mov dword [esp], ecx
call fcn.00409d90
mov eax, dword [esp + 4]
lea ecx, [0x926b80]
mov dword [eax], ecx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6d1318
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x98]
mov dword [edx + 0x10], 1
mov dword [edx + 0x14], 1
mov ebx, dword [0xc6f140]
test ebx, ebx
jne 0x6d130b
mov dword [edx + 0xc], eax
mov ebx, dword [esp + 0x28]
test ebx, ebx
je 0x6d12ff
mov ebp, dword [esp + 0xac]
mov esi, dword [ebp + ebx*4 - 4]
mov eax, ebp
mov ebp, dword [esi + 0x10]
mov esi, dword [esi + 0xc]
test ebp, ebp
jbe 0x6d198f
mov ebp, dword [esi + 4]
mov esi, dword [esi]
cmp esi, ecx
jne 0x6d12f8
mov edi, ebp
mov ebp, dword [edx + 0xc]
mov edx, dword [ebp]
mov ebp, dword [ebp + 4]
cmp edx, ecx
jne 0x6d12ec
cmp esi, ecx
jne 0x6d11e5
cmp edx, ecx
je 0x6d125d
lea edx, [ebx + 1]
mov ebp, dword [esp + 0x2c]
cmp edx, ebp
jg 0x6d1224
mov esi, dword [0xc6f140]
lea edi, [eax + ebx*4]
test esi, esi
jne 0x6d1212
mov esi, dword [esp + 0x98]
mov dword [eax + ebx*4], esi
mov ecx, eax
mov eax, edx
mov edx, ebp
jmp 0x6d100a
mov ebx, eax
mov eax, dword [esp + 0x98]
call fcn.0044c860
mov eax, ebx
jmp 0x6d1207
lea ecx, [0x865160]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea edx, [ecx + 1]
lea ecx, [0x926b80]
mov ebx, dword [esp + 0x28]
jmp 0x6d11f0
mov dword [esp + 0x7c], ebp
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
lea eax, [0x80f6e0]
mov dword [esp], eax
mov ecx, dword [0xc5bbe4]
mov dword [esp + 4], ecx
call fcn.0040e700
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [esp + 0x7c]
mov edx, dword [ecx + 0x10]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
lea ecx, [0x80f2a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040e700
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
test al, al
je 0x6d12d6
lea ecx, [0x926b80]
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
jmp 0x6d1207
mov eax, dword [esp + 0xac]
lea ecx, [0x926b80]
mov ebx, dword [esp + 0x28]
jmp 0x6d11e5
cmp esi, ecx
mov ebp, 0
jmp 0x6d11df
xor ebp, ebp
jmp 0x6d11ca
mov eax, dword [esp + 0xac]
jmp 0x6d11e5
lea edi, [edx + 0xc]
call fcn.0044c860
jmp 0x6d1196
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0x70]
call fcn.0044c860
mov eax, edx
jmp 0x6d1170
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x90]
call fcn.0044c860
lea edi, [ecx + 8]
xor eax, eax
call fcn.0044c860
mov eax, ecx
jmp 0x6d1117
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x90]
jmp 0x6d108b
mov dword [ebx + 0x24], ecx
mov dword [ebx + 0x28], ebp
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6d1379
mov dword [ebx + 0x20], edx
add esp, 0x128
ret
mov edi, dword [esp + 0xb4]
mov eax, edx
call fcn.0044c860
jmp 0x6d1372
mov dword [esp + 0x88], edx
mov dword [esp + 0x94], esi
mov dword [esp + 0x60], ebx
mov eax, dword [esi + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x68], ecx
lea edx, [0x80f2a0]
mov dword [esp], edx
mov ebx, dword [0xc5bbe0]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040e700
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
test al, al
je 0x6d1967
mov eax, dword [esp + 0x12c]
mov ecx, dword [eax + 0x24]
cmp ecx, 1
jne 0x6d13fa
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + 0x10]
cmp edx, 1
jg 0x6d15b4
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x48], ecx
xor edx, edx
xor ebx, ebx
jmp 0x6d1418
lea edx, [ebx + 1]
mov ecx, dword [esp + 0x48]
mov ebx, eax
mov eax, dword [esp + 0x12c]
mov ebp, dword [esp + 0x134]
cmp edx, ebp
jge 0x6d1599
mov dword [esp + 0x5c], edx
mov byte [esp + 0x23], bl
mov eax, dword [esp + 0x130]
lea ecx, [eax + edx*8]
mov dword [esp + 0xa8], ecx
mov ebx, dword [ecx + 4]
mov dword [esp + 0x34], ebx
mov ebp, dword [ecx]
mov dword [esp + 0x6c], ebp
lea esi, [0x80f920]
mov dword [esp], esi
mov edi, dword [0xc5bbd8]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x68]
mov dword [esp + 8], edi
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xc], ecx
call fcn.0040e700
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x130]
lea edx, [ecx + eax*8 + 4]
mov dword [esp + 0xa4], edx
mov ebx, dword [esp + 0x10]
mov ebp, dword [ebx + 4]
mov ebx, dword [ebx]
test ebp, ebp
je 0x6d158c
mov dword [esp + 0xac], ebx
mov dword [esp + 0x60], ebp
lea eax, [0x80f920]
mov dword [esp], eax
mov ecx, dword [0xc5bbd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 0xc], edx
call fcn.0040e700
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
je 0x6d157f
mov edx, dword [esp + 0x60]
cmp edx, ecx
je 0x6d155e
xor eax, eax
test al, al
je 0x6d1542
mov ecx, dword [esp + 0x94]
mov edx, dword [ecx + 0x10]
mov eax, dword [ecx + 0xc]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x134]
cmp ebx, ebp
jae 0x6d19ab
mov esi, dword [esp + 0xa4]
mov dword [esi], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6d1534
mov edx, dword [esp + 0xa8]
mov dword [edx], eax
mov eax, 1
jmp 0x6d1408
mov edi, dword [esp + 0xa8]
call fcn.0044c860
jmp 0x6d152a
mov ecx, dword [esp + 0x94]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x134]
movzx eax, byte [esp + 0x23]
jmp 0x6d1408
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004021f0
movzx eax, byte [esp + 0xc]
jmp 0x6d14ea
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x34]
jmp 0x6d14e0
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x3c]
jmp 0x6d149c
test bl, bl
je 0x6d159e
dec ecx
mov eax, ebp
lea ebp, [0x926b80]
mov ebx, ecx
mov ecx, dword [esp + 0x12c]
jmp 0x6d0e58
lea eax, [0x863a60]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [eax], 9
mov dword [eax + 0x10], 0xb
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6d1946
lea ecx, [0x89bfbb]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], 0
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
test edx, edx
jbe 0x6d19b9
mov dword [esp + 0x74], eax
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x14]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x74]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x88]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0xc]
test edx, edx
jbe 0x6d19b9
lea edx, [0x926b80]
mov dword [eax], edx
mov ebx, dword [0xc6f140]
test ebx, ebx
jne 0x6d1937
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x12c]
mov ecx, dword [eax + 4]
mov dword [esp + 0x40], ecx
lea edx, [0x863a60]
mov dword [esp], edx
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [eax], 9
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0x10], ecx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6d1918
mov edx, dword [esp + 0x68]
mov dword [eax + 0xc], edx
mov dword [eax + 8], 0
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x40]
mov dword [eax + 4], ecx
lea ecx, [0x863920]
mov dword [esp], ecx
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [esp + 0x9c], eax
mov dword [eax], 4
lea ecx, [0x7f6be0]
mov dword [esp], ecx
call fcn.00409d90
mov eax, dword [esp + 4]
lea ecx, [0x926b80]
mov dword [eax], ecx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x6d1903
mov edx, dword [esp + 0x78]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [edx + 0x10], 1
mov dword [edx + 0x14], 1
mov ebx, dword [0xc6f140]
test ebx, ebx
jne 0x6d18f6
mov dword [edx + 0xc], eax
mov ebx, dword [esp + 0x12c]
mov ebp, dword [ebx + 0x28]
mov dword [esp + 0x30], ebp
mov esi, dword [ebx + 0x24]
mov dword [esp + 0x24], esi
mov eax, ebx
mov ebx, dword [ebx + 0x20]
test esi, esi
je 0x6d18ef
mov edi, ebx
mov ebx, dword [ebx + esi*4 - 4]
mov ebp, dword [ebx + 0x10]
mov ebx, dword [ebx + 0xc]
test ebp, ebp
jbe 0x6d19b2
mov ebp, dword [ebx + 4]
mov ebx, dword [ebx]
cmp ebx, ecx
jne 0x6d18e8
mov dword [esp + 0x8c], ebp
mov ebp, dword [edx + 0xc]
mov edx, dword [ebp + 4]
mov ebp, dword [ebp]
cmp ebp, ecx
jne 0x6d18dc
cmp ebx, ecx
jne 0x6d177f
cmp ebp, ecx
je 0x6d1831
lea edx, [esi + 1]
mov ebx, dword [esp + 0x30]
cmp edx, ebx
jg 0x6d17ee
lea ebp, [edi + esi*4]
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6d17d6
mov ecx, dword [esp + 0x9c]
mov dword [edi + esi*4], ecx
mov dword [eax + 0x24], edx
mov dword [eax + 0x28], ebx
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x6d17c0
mov dword [eax + 0x20], edi
mov edx, dword [esp + 0x60]
lea ecx, [edx + 1]
jmp 0x6d13fe
mov ecx, edi
mov edi, dword [esp + 0xb4]
mov edx, eax
mov eax, ecx
call fcn.0044c860
mov eax, edx
jmp 0x6d17b4
mov ecx, edi
mov edi, ebp
mov esi, eax
mov eax, dword [esp + 0x9c]
call fcn.0044c860
mov eax, esi
mov edi, ecx
jmp 0x6d17a1
lea eax, [0x865160]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438c30
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x12c]
lea ecx, [0x926b80]
mov esi, dword [esp + 0x24]
jmp 0x6d178a
mov dword [esp + 0x80], edx
mov dword [esp + 0xa0], edi
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0xc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
lea eax, [0x80f6e0]
mov dword [esp], eax
mov ecx, dword [0xc5bbe4]
mov dword [esp + 4], ecx
call fcn.0040e700
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [esp + 0x80]
mov edx, dword [ecx + 0x10]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
lea ecx, [0x80f2a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040e700
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
test al, al
je 0x6d18bf
mov eax, dword [esp + 0x12c]
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0xa0]
jmp 0x6d17a1
mov eax, dword [esp + 0x12c]
lea ecx, [0x926b80]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0xa0]
jmp 0x6d177f
cmp ebx, ecx
mov edx, 0
jmp 0x6d1775
xor ebp, ebp
jmp 0x6d175b
mov edi, ebx
jmp 0x6d177f
lea edi, [edx + 0xc]
call fcn.0044c860
jmp 0x6d1718
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0x78]
call fcn.0044c860
mov eax, edx
jmp 0x6d16f2
lea edi, [eax + 0xc]
mov edx, eax
mov eax, dword [esp + 0x68]
call fcn.0044c860
lea edi, [edx + 8]
xor eax, eax
call fcn.0044c860
mov eax, edx
jmp 0x6d1699
lea edi, [eax + 4]
mov eax, ecx
call fcn.0044c860
jmp 0x6d1650
lea edi, [eax + 0xc]
mov ecx, eax
lea eax, [0x89bfbb]
call fcn.0044c860
lea edi, [ecx + 8]
xor eax, eax
call fcn.0044c860
mov eax, ecx
jmp 0x6d15f1
mov eax, dword [esp + 0x12c]
mov ebp, dword [esp + 0x134]
mov ecx, dword [esp + 0x60]
jmp 0x6d159e
mov esi, 0
jmp 0x6d0e52
add esp, 0x128
ret
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.0044b100
jmp fcn.006d0de0