Function at 0x100060b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test edi, edi
je 0x1000180b
mov ecx, edi
call fcn.1000651c
jmp 0x1000180b
mov eax, dword [0x10029080]
cmp dword [ebp - 0x10], 0
je 0x10001831
mov eax, dword [esi + 8]
push dword [ebp - 0x18]
push dword [ebp - 0x10]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x10029090]
call esi
mov eax, dword [0x10029080]
mov ecx, dword [ebp - 0xc]
test ecx, ecx
je 0x10001845
mov edx, dword [ebp - 0x14]
call fcn.10005088
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10001866
test byte [eax + 0x1c], 0x10
je 0x10001866
push ebx
push dword [eax + 0x14]
mov edx, 0x10002d7f
push dword [eax + 0x10]
push 0x20
pop ecx
call fcn.10002924
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10003f24
mov esp, ebp
pop ebp
ret 8
mov edi, dword [ebp - 8]
mov ecx, 0x10003cb9
mov edx, dword [ebx + 0x14]
push edi
call fcn.10004f64
mov esi, eax
test esi, esi
jne 0x10001fc4
mov dword [ebp - 4], 1
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10001dac
test byte [eax + 0x1c], 0x10
je 0x10001dac
push dword [ebx + 0x18]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x16
pop ecx
call fcn.100019a8
mov edx, dword [ebx + 0x18]
lea eax, [edi + 4]
push eax
mov ecx, 0x10002d0a
call fcn.10004f64
mov esi, eax
test esi, esi
jne 0x10001fc4
mov dword [ebp - 4], 2
mov ecx, dword [0x10029080]
cmp ecx, 0x10029080
je 0x10001df9
test byte [ecx + 0x1c], 0x10
je 0x10001df9
lea eax, [ebx + 4]
mov edx, 0x10003da0
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x17
pop ecx
call fcn.100067f4
sub esp, 0x10
lea esi, [ebx + 4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 8]
lea edx, [edi + 8]
call fcn.100031b7
mov esi, eax
test esi, esi
jne 0x10001fc4
mov dword [ebp - 4], 3
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10001e67
test byte [eax + 0x1c], 0x10
je 0x10001e67
mov edx, dword [ebx + 0x2c]
test edx, edx
jne 0x10001e41
mov ecx, 0x10001a4c
jmp 0x10001e52
xor ecx, ecx
cmp word [edx], cx
mov ecx, fcn.10003ff8
je 0x10001e52
mov ecx, 0x10001750
push ecx
push edx
push dword [eax + 0x14]
mov edx, 0x10003da0
push dword [eax + 0x10]
push 0x18
pop ecx
call fcn.100062a6
mov edx, dword [ebx + 0x2c]
lea eax, [edi + 0xc]
push eax
mov ecx, 0x1000543c
call fcn.10004f64
mov esi, eax
test esi, esi
jne 0x10001fc4
mov dword [ebp - 4], 4
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10001eb1
test byte [eax + 0x1c], 0x10
je 0x10001eb1
push dword [ebx + 0x20]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x19
pop ecx
call fcn.100019a8
mov edx, dword [ebx + 0x20]
lea eax, [edi + 0x10]
push eax
mov ecx, 0x10001808
call fcn.10004f64
mov esi, eax
test esi, esi
jne 0x10001fc4
mov dword [ebp - 4], 5
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10001efb
test byte [eax + 0x1c], 0x10
je 0x10001efb
push dword [ebx + 0x24]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x1a
pop ecx
call fcn.100019a8
mov edx, dword [ebx + 0x24]
lea eax, [edi + 0x14]
push eax
mov ecx, 0x10003d50
call fcn.10004f64
mov esi, eax
test esi, esi
jne 0x10001fc4
mov dword [ebp - 4], 6
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10001f45
test byte [eax + 0x1c], 0x10
je 0x10001f45
push dword [ebx + 0x28]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x1b
pop ecx
call fcn.10002924
mov edx, dword [ebx + 0x28]
lea eax, [edi + 0x18]
push eax
mov ecx, 0x1000691c
call fcn.1000231c
mov esi, eax
test esi, esi
jne 0x10001fc4
lea eax, [ebp - 0x10]
mov dword [ebp - 4], 7
push eax
call dword [fcn.1000efa0]
pop ecx
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10001f96
test byte [eax + 0x1c], 0x10
je 0x10001f96
push dword [ebp - 0x10]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x1c
pop ecx
call fcn.10002924
mov edx, dword [ebp - 0x10]
lea eax, [edi + 0x1c]
push eax
mov ecx, 0x10003c25
call fcn.1000231c
mov esi, eax
test esi, esi
jne 0x10001fc4
mov eax, dword [ebp + 0xc]
mov dword [eax], edi
mov eax, dword [ebp + 0x10]
mov dword [eax], 8
jmp 0x10001fd1
mov edi, dword [ebp - 4]
mov ecx, dword [ebp - 8]
mov edx, edi
call fcn.10005c9c
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10001ff7
test byte [eax + 0x1c], 0x10
je 0x10001ff7
push esi
push dword [eax + 0x14]
mov edx, 0x10003da0
push dword [eax + 0x10]
push 0x1d
pop ecx
call fcn.10002924
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, 0x200f
ret
push ecx
lea ecx, [esp + 4]
sub ecx, eax
sbb eax, eax
not eax
and ecx, eax
mov eax, esp
and eax, 0xfffff000
cmp ecx, eax
jb 0x1000570c
mov eax, ecx
pop ecx
xchg esp, eax
mov eax, dword [eax]
mov dword [esp], eax
ret
mov eax, dword [ebp + 0xc]
mov dword [eax], edx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov dword [ebx + 0x68], edi
test edi, edi
je 0x100027d0
push dword [esi + 0x6c]
push dword [esi + 0x68]
push edi
call fcn.100018e8
add esp, 0xc
xor edx, edx
mov eax, dword [esi + 0x70]
mov dword [ebx + 0x70], eax
mov eax, dword [esi + 0x74]
mov dword [ebx + 0x74], eax
mov eax, dword [esi + 0x78]
mov dword [ebx + 0x78], eax
mov eax, dword [esi + 0x7c]
mov dword [ebx + 0x7c], eax
mov eax, dword [esi + 0x80]
mov dword [ebx + 0x80], eax
mov eax, dword [esi + 0x84]
mov dword [ebx + 0x84], eax
mov eax, dword [esi + 0x88]
mov dword [ebx + 0x88], eax
mov eax, dword [esi + 0x90]
mov dword [ebx + 0x90], eax
mov ecx, dword [esi + 0x94]
test ecx, ecx
je 0x10002563
cmp word [ecx], dx
je 0x10002563
call fcn.10001884
mov dword [ebx + 0x94], eax
test eax, eax
je 0x100027d0
mov eax, dword [esi + 0x98]
mov dword [ebx + 0x98], eax
mov eax, dword [esi + 0x9c]
mov dword [ebx + 0x9c], eax
mov eax, dword [esi + 0xa0]
mov dword [ebx + 0xa0], eax
mov eax, dword [esi + 0xa4]
mov dword [ebx + 0xa4], eax
mov eax, dword [esi + 0xa8]
mov dword [ebx + 0xa8], eax
mov eax, dword [esi + 0xac]
mov dword [ebx + 0xac], eax
mov eax, dword [esi + 0xb0]
mov dword [ebx + 0xb0], eax
mov eax, dword [esi + 0xb4]
mov dword [ebx + 0xb4], eax
mov eax, dword [esi + 0xb8]
mov dword [ebx + 0xb8], eax
mov eax, dword [esi + 0xbc]
mov dword [ebx + 0xbc], eax
mov eax, dword [esi + 0xc0]
mov dword [ebx + 0xc0], eax
mov eax, dword [ebp - 8]
mov dword [eax], ebx
xor eax, eax
jmp 0x100027da
mov ecx, ebx
call fcn.100067b4
push 0xe
pop eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 4]
xor eax, eax
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x100036a9
cmp word [ecx], ax
je 0x100036a9
call fcn.10001884
mov dword [edi + 0x34], eax
test eax, eax
jne 0x100036a7
push 0xe
jmp fcn.100062a6
xor eax, eax
mov dword [edi + 0x38], eax
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x100036c4
cmp word [ecx], ax
je 0x100036c4
call fcn.10001884
mov dword [edi + 0x3c], eax
test eax, eax
je 0x100036a0
mov ecx, dword [esi + 0xc]
lea edx, [edi + 4]
call fcn.1000653f
mov eax, dword [esi + 0x1c]
mov dword [edi + 0x2c], eax
lea eax, [ebp - 8]
mov edx, dword [esi + 0x18]
mov ecx, dword [esi + 0x14]
push eax
push edi
call fcn.1000ce30
mov esi, eax
test esi, esi
jne 0x1000373d
cmp dword [ebp - 8], eax
jne fcn.1000a540
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push edi
mov edx, dword [eax + 0x18]
mov ecx, dword [eax + 0x14]
call fcn.10002bb8
mov esi, eax
test esi, esi
jne 0x1000373d
cmp dword [ebp - 0xc], eax
jne fcn.1000a540
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
push edi
mov edx, dword [eax + 0x18]
mov ecx, dword [eax + 0x14]
call fcn.100020e2
mov esi, eax
test esi, esi
jne 0x1000373d
cmp dword [ebp - 0x10], eax
jne fcn.1000a540
mov esi, 0x490
mov ecx, edi
call fcn.10002648
mov eax, dword [ebp + 8]
and dword [eax], 0
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, 0x200a
ret
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
cmp ecx, 0x54
jg 0x10002311
je 0x100024dd
cmp ecx, 0x45
jg 0x10006504
je 0x1000227c
sub ecx, 0x35
je 0x10005d4e
dec ecx
je 0x100017fb
sub ecx, 0xa
je 0x1000230a
dec ecx
je 0x10003fee
dec ecx
je 0x10005990
dec ecx
je fcn.100018f0
dec ecx
jne 0x10005c78
mov eax, 0x1392
ret
mov ecx, dword [esi]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x20], eax
cmp ecx, eax
jae 0x10004c1c
mov ebx, ecx
push dword [ebp + 8]
push ebx
call dword [fcn.1000f50f]
mov edx, eax
mov dword [ebp - 0x1c], edx
pop ecx
pop ecx
test edx, edx
je 0x10004bfd
mov edi, dword [ebp - 8]
mov ecx, edx
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 0x10]
sar ecx, 1
add esi, esi
sub edi, ecx
sub edi, eax
lea eax, [edx + eax*2]
lea ebx, [esi + edx]
lea ecx, [edi + edi]
push ecx
push eax
push ecx
push ebx
call dword [sym.imp.RPCRT4.dll_NdrNonEncapsulatedUnionFree]
add esp, 0x10
push eax
call fcn.100044ca
push esi
push dword [ebp + 0xc]
push esi
mov esi, dword [ebp - 0x1c]
push esi
call dword [sym.imp.RPCRT4.dll_NdrDllCanUnloadNow]
add esp, 0x10
push eax
call fcn.100044ca
mov ecx, dword [ebp - 0x10]
xor edx, edx
lea eax, [edi + ecx]
mov word [esi + eax*2], dx
mov eax, ecx
sub eax, dword [ebp - 4]
add dword [ebp - 8], eax
jmp 0x10004b88
mov ecx, ebx
call fcn.10006818
lea ebx, [ebx + eax*2]
add ebx, 2
cmp ebx, dword [ebp - 0x20]
jb 0x10004b88
mov ebx, dword [ebp - 0x24]
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0xc]
push ebx
mov ecx, esi
call fcn.10003ce4
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp ecx, 0x22
jg fcn.1000e6d0
je 0x10003683
sub ecx, 0x11
je 0x10004b70
dec ecx
je 0x1000649c
dec ecx
je fcn.1000a790
dec ecx
je 0x10001d62
dec ecx
je 0x10006980
sub ecx, 0xb
je fcn.1000a270
dec ecx
jne 0x10005c78
mov eax, 0x2031
ret
sub eax, 0x1000
test dword [eax], eax
jmp 0x10002290
mov ebx, dword [edi + ebx*4]
test ebx, ebx
je 0x100059e3
mov edi, dword [ebx + 4]
test edi, edi
je 0x100059e0
push 0x10003cb9
push dword [ebx]
call dword [fcn.1000efdc]
pop ecx
pop ecx
test eax, eax
jne 0x10005786
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10005771
test byte [eax + 0x1c], 0x10
je 0x10005771
push dword [edi + 8]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0xb
pop ecx
call fcn.100019a8
mov edx, dword [ebp - 4]
lea edx, [edx + 0x14]
mov ecx, dword [edi + 8]
call fcn.10003758
mov esi, eax
jmp 0x100059dc
push 0x10002d0a
push dword [ebx]
call dword [fcn.1000efdc]
pop ecx
pop ecx
test eax, eax
jne 0x100057c9
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x100057c1
test byte [eax + 0x1c], 0x10
je 0x100057c1
push dword [edi + 8]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0xc
pop ecx
call fcn.100019a8
mov edx, dword [ebp - 4]
lea edx, [edx + 0x18]
jmp 0x10005777
push 0x10001808
push dword [ebx]
call dword [fcn.1000efdc]
pop ecx
pop ecx
test eax, eax
jne 0x1000580f
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10005804
test byte [eax + 0x1c], 0x10
je 0x10005804
push dword [edi + 8]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0xd
pop ecx
call fcn.100019a8
mov edx, dword [ebp - 4]
lea edx, [edx + 0x20]
jmp 0x10005777
push 0x10003d50
push dword [ebx]
call dword [fcn.1000efdc]
pop ecx
pop ecx
test eax, eax
jne 0x10005855
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x1000584a
test byte [eax + 0x1c], 0x10
je 0x1000584a
push dword [edi + 8]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0xe
pop ecx
call fcn.100019a8
mov edx, dword [ebp - 4]
lea edx, [edx + 0x24]
jmp 0x10005777
push 0x1000691c
push dword [ebx]
call dword [fcn.1000efdc]
pop ecx
pop ecx
test eax, eax
jne 0x100058a3
mov ecx, dword [0x10029080]
cmp ecx, 0x10029080
je 0x10005894
test byte [ecx + 0x1c], 0x10
je 0x10005894
movzx eax, word [edi + 8]
mov edx, 0x10003da0
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0xf
pop ecx
call fcn.10002924
mov ecx, dword [ebp - 4]
movzx eax, word [edi + 8]
mov dword [ecx + 0x28], eax
jmp 0x100059e0
push 0x10003c25
push dword [ebx]
call dword [fcn.1000efdc]
pop ecx
pop ecx
test eax, eax
jne 0x100058f1
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x100058de
test byte [eax + 0x1c], 0x10
je 0x100058de
push dword [edi + 8]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x10
pop ecx
call fcn.10002924
mov edx, dword [ebp - 4]
mov ecx, dword [edi + 8]
lea edx, [edx + 0x1c]
call fcn.10001bf1
jmp 0x1000577f
push 0x1000543c
push dword [ebx]
call dword [fcn.1000efdc]
pop ecx
pop ecx
test eax, eax
jne 0x10005955
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x1000594a
test byte [eax + 0x1c], 0x10
je 0x1000594a
mov edx, dword [edi + 8]
test edx, edx
jne 0x10005924
mov ecx, 0x10001a4c
jmp 0x10005935
xor ecx, ecx
cmp word [edx], cx
mov ecx, fcn.10003ff8
je 0x10005935
mov ecx, 0x10001750
push ecx
push edx
push dword [eax + 0x14]
mov edx, 0x10003da0
push dword [eax + 0x10]
push 0x11
pop ecx
call fcn.100062a6
mov edx, dword [ebp - 4]
lea edx, [edx + 0x2c]
jmp 0x10005777
push 0x10001c72
push dword [ebx]
call dword [fcn.1000efdc]
pop ecx
pop ecx
test eax, eax
jne 0x100059e0
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10005990
test byte [eax + 0x1c], 0x10
je 0x10005990
push dword [edi + 8]
mov edx, 0x10003da0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x12
pop ecx
call fcn.100019a8
mov ecx, dword [edi + 8]
lea edx, [ebp - 8]
add ecx, 2
call fcn.10003758
mov esi, eax
test esi, esi
jne 0x10005a01
mov edx, dword [ebp - 8]
xor ebx, ebx
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x100059ae
sub ecx, esi
xor eax, eax
sar ecx, 1
mov word [edx + ecx*2 - 2], ax
mov eax, dword [ebp - 4]
add eax, 4
push eax
push edx
call dword [0x10029074]
lea ecx, [ebp - 8]
mov esi, eax
call fcn.100018f0
test esi, esi
jne 0x10005a01
mov edi, dword [ebp + 8]
mov ebx, dword [ebp - 0xc]
inc ebx
mov dword [ebp - 0xc], ebx
cmp ebx, dword [ebp + 0xc]
jb 0x10005720
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
test esi, esi
je 0x10005a4f
jmp 0x10005a04
mov eax, dword [ebp - 4]
test eax, eax
je 0x10005a4f
lea ecx, [eax + 0x14]
call fcn.100018f0
mov ecx, dword [ebp - 4]
lea ecx, [ecx + 0x18]
call fcn.100018f0
mov ecx, dword [ebp - 4]
lea ecx, [ecx + 0x1c]
call fcn.100018f0
mov ecx, dword [ebp - 4]
lea ecx, [ecx + 0x20]
call fcn.100018f0
mov ecx, dword [ebp - 4]
lea ecx, [ecx + 0x24]
call fcn.100018f0
mov ecx, dword [ebp - 4]
lea ecx, [ecx + 0x2c]
call fcn.100018f0
lea ecx, [ebp - 4]
call fcn.100018f0
mov eax, dword [0x10029080]
jmp 0x10005a59
cmp eax, 0x10029080
je 0x10005a7a
test byte [eax + 0x1c], 0x10
je 0x10005a7a
push esi
push dword [eax + 0x14]
mov edx, 0x10003da0
push dword [eax + 0x10]
push 0x13
pop ecx
call fcn.10002924
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, 0x200e
ret
cmp ecx, 0x34
jg 0x1000469c
je 0x10002194
cmp ecx, 0x10
jg 0x1000513c
je 0x10003d54
cmp ecx, 0xd
ja 0x10005c78
jmp dword [ecx*4 + 0x10006836]
mov eax, dword [ecx + edi*4]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x100064d0
mov ecx, dword [eax]
test ecx, ecx
je 0x100064b4
call fcn.1000651c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x100064c6
push ecx
call dword [0x1002f818]
mov eax, dword [ebp - 0x10]
pop ecx
mov ecx, eax
call fcn.1000651c
mov ecx, dword [ebp - 0xc]
mov eax, dword [esi + 8]
inc edi
cmp edi, dword [eax + 0x1c]
jb 0x1000649c
call fcn.1000651c
mov eax, dword [0x10029080]
cmp eax, 0x10029080
je 0x10006504
test byte [eax + 0x1c], 0x10
je 0x10006504
push ebx
push dword [eax + 0x14]
mov edx, 0x10002d7f
push dword [eax + 0x10]
push 0x2a
pop ecx
call fcn.10002924
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10003f24
mov esp, ebp
pop ebp
ret 8
mov eax, 0x200b
ret