Function at 0x6fd580b0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x80]
cmp eax, dword [ecx + 8]
jbe 0x6fd58c14
sub esp, 0x100
mov eax, dword [esp + 0x104]
mov ecx, dword [eax]
mov dword [esp + 0x38], ecx
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov esi, dword [eax + 0x10]
mov edi, dword [eax + 0x14]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x30], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x34], ecx
mov ecx, dword [eax + 0x20]
mov dword [esp + 0x4c], ecx
mov ecx, dword [eax + 0x24]
mov dword [esp + 0x50], ecx
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0xfc], eax
mov dword [esp + 0xdc], ecx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 0xcc], edx
mov edx, dword [esp + 0xd4]
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xdc]
jmp 0x6fd584d8
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], esi
mov eax, dword [esp + 0xb8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x18], eax
call fcn.6fd57ff0
mov eax, dword [esp + 0x20]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc4]
add ecx, eax
mov dword [esp + 0xb4], ecx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0xb0], ebx
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0xac], ebp
mov esi, dword [esp + 0x28]
mov dword [esp + 0x94], esi
mov edi, dword [esp + 0xa8]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x98]
mov dword [esp], edi
mov edi, dword [esp + 0x9c]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0xa4]
mov dword [esp + 8], edi
mov edi, dword [esp + 0x84]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x18], edi
call fcn.6fd57ff0
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x94]
mov eax, ecx
add ecx, esi
mov edx, dword [esp + 0xc4]
mov ebx, dword [esp + 0xb8]
add edx, ebx
mov ebp, dword [esp + 0xc8]
mov edx, dword [esp + 0xb0]
mov ebx, ebp
adc ebp, edx
mov dword [esp + 0xa0], ebp
xchg ebp, ebx
not ebx
xchg ebp, ebx
or ebx, edx
and ebx, ebp
mov ebp, dword [esp + 0xc8]
and ebp, edx
or ebp, ebx
shr ebp, 0x1f
mov edx, ebp
add ebp, ecx
mov dword [esp + 0x48], ebp
mov ebx, dword [esp + 0x28]
mov dword [esp + 0xc8], ebx
mov edi, dword [esp + 0x70]
add edi, ebx
mov ebx, dword [esp + 0x24]
add eax, esi
mov eax, dword [esp + 0xac]
mov esi, ebx
adc ebx, eax
add edx, ecx
adc ebx, 0
mov dword [esp + 0x6c], ebx
mov edx, ebx
not edx
mov ecx, esi
or esi, eax
and edx, esi
and ecx, eax
or edx, ecx
shr edx, 0x1f
mov eax, edx
add edx, edi
mov dword [esp + 0x44], edx
mov ecx, ebp
and ecx, 0xfffffffc
mov dword [esp + 0x40], ecx
mov esi, dword [esp + 0xbc]
add ecx, esi
mov dword [esp + 0xc4], ecx
mov ecx, dword [esp + 0xb4]
add ecx, edx
mov dword [esp + 0xbc], ecx
mov ebp, dword [esp + 0x40]
add esi, ebp
mov esi, dword [esp + 0xc0]
adc ebx, esi
mov dword [esp + 0x68], ebx
not ebx
mov ebp, dword [esp + 0x6c]
or ebp, esi
and ebx, ebp
mov ebp, dword [esp + 0x6c]
and esi, ebp
or ebx, esi
shr ebx, 0x1f
mov esi, ebx
add ebx, ecx
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x70]
mov ecx, dword [esp + 0xc8]
add ebp, ecx
mov ebp, dword [esp + 0x74]
adc ebp, ebx
add eax, edi
adc ebp, 0
mov dword [esp + 0x64], ebp
mov eax, dword [esp + 0xb4]
add eax, edx
mov eax, dword [esp + 0xa0]
mov ebx, ebp
adc ebp, eax
mov ecx, dword [esp + 0xbc]
add esi, ecx
adc ebp, 0
mov esi, dword [esp + 0x48]
and esi, 3
mov dword [esp + 0x54], esi
mov ecx, ebp
xchg ebp, ebx
not ebx
xchg ebp, ebx
mov edi, ebx
or ebx, eax
and ebx, ebp
and eax, edi
or eax, ebx
shr eax, 0x1f
mov dword [esp + 0xc8], eax
add esi, eax
mov ebp, dword [esp + 0x40]
shr ebp, 2
mov eax, dword [esp + 0x6c]
shl eax, 0x1e
or eax, ebp
mov dword [esp + 0xc0], eax
mov ebp, dword [esp + 0xc4]
add eax, ebp
mov dword [esp + 0xc4], eax
shr edx, 2
shl edi, 0x1e
or edi, edx
mov dword [esp + 0xbc], edi
mov edx, dword [esp + 0x5c]
add edi, edx
mov eax, dword [esp + 0x6c]
shr eax, 2
mov ebx, dword [esp + 0x44]
and ebx, 3
shl ebx, 0x1e
or ebx, eax
mov eax, dword [esp + 0xc0]
add eax, ebp
mov eax, dword [esp + 0x68]
mov ebp, eax
adc eax, ebx
mov dword [esp + 0xa0], eax
or ebp, ebx
not eax
and ebp, eax
mov eax, dword [esp + 0x68]
and ebx, eax
or ebx, ebp
shr ebx, 0x1f
mov eax, ebx
add ebx, edi
mov dword [esp + 0x5c], ebx
mov ebp, dword [esp + 0x64]
shr ebp, 2
mov ebx, dword [esp + 0xbc]
add ebx, edx
mov edx, ecx
adc ecx, ebp
add eax, edi
adc ecx, 0
mov eax, ecx
not ecx
mov ebx, edx
or edx, ebp
and edx, ecx
and ebx, ebp
or ebx, edx
shr ebx, 0x1f
mov ecx, ebx
add ebx, esi
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xc8]
add edx, ebp
mov edi, 0
adc edi, 0
add ecx, esi
adc edi, 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0xa0]
mov ebp, dword [esp + 0xc4]
mov dword [esp + 0x38], ebp
mov ebp, eax
mov esi, ebx
mov eax, dword [esp + 0x104]
mov ebx, dword [esp + 0x5c]
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x50]
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6fd58bc7
mov dword [esp + 0x3c], edx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebp
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], edi
cmp ecx, 0x10
jl 0x6fd58703
mov eax, dword [esp + 0xfc]
movzx ecx, byte [eax + 3]
mov dword [esp + 0xc8], ecx
shl ecx, 0x18
movzx edi, byte [eax + 2]
mov dword [esp + 0xc4], edi
shl edi, 0x10
movzx esi, byte [eax + 1]
mov dword [esp + 0xc0], esi
shl esi, 8
movzx ebp, byte [eax]
or ebp, esi
or edi, ebp
or ecx, edi
mov dword [esp + 0xbc], ecx
mov ebp, dword [esp + 0x38]
add ecx, ebp
mov dword [esp + 0xb8], ecx
movzx edi, byte [eax + 0xb]
mov dword [esp + 0xb4], edi
shl edi, 0x18
movzx ecx, byte [eax + 0xa]
mov dword [esp + 0xb0], ecx
shl ecx, 0x10
movzx edx, byte [eax + 9]
mov dword [esp + 0xac], edx
shl edx, 8
movzx ebp, byte [eax + 8]
or ebp, edx
or ecx, ebp
or edi, ecx
mov dword [esp + 0xa8], edi
add edi, ebx
mov dword [esp + 0xa4], edi
movzx edx, byte [eax + 6]
shl edx, 0x10
movzx ebp, byte [eax + 5]
shl ebp, 8
movzx ecx, byte [eax + 4]
mov ebx, dword [esp + 0xc8]
shr ebx, 8
mov edi, dword [esp + 0xc4]
shr edi, 0x10
mov esi, dword [esp + 0xc0]
shr esi, 0x18
or edi, esi
or ebx, edi
or ecx, ebx
or ebp, ecx
or edx, ebp
movzx ecx, byte [eax + 7]
shl ecx, 0x18
or ecx, edx
mov edx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x38]
add edx, ebx
mov edx, dword [esp + 0x3c]
mov ebx, edx
adc edx, ecx
mov dword [esp + 0xa0], edx
mov ebp, ebx
or ebx, ecx
not edx
and edx, ebx
and ebp, ecx
or ebp, edx
shr ebp, 0x1f
mov dword [esp + 0xc8], ebp
mov ecx, dword [esp + 0xa4]
add ecx, ebp
mov dword [esp + 0xc4], ecx
movzx ebx, byte [eax + 0xe]
shl ebx, 0x10
movzx edi, byte [eax + 0xd]
shl edi, 8
movzx ecx, byte [eax + 0xc]
mov esi, dword [esp + 0xb4]
shr esi, 8
mov edx, dword [esp + 0xb0]
shr edx, 0x10
mov ebp, dword [esp + 0xac]
shr ebp, 0x18
or edx, ebp
or esi, edx
or ecx, esi
or edi, ecx
or ebx, edi
movzx ecx, byte [eax + 0xf]
shl ecx, 0x18
or ecx, ebx
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x5c]
add edx, ebx
mov edx, dword [esp + 0x60]
mov ebx, edx
adc edx, ecx
mov ebp, dword [esp + 0xa4]
mov esi, dword [esp + 0xc8]
add ebp, esi
adc edx, 0
mov ebp, ebx
or ebx, ecx
mov esi, edx
not edx
and edx, ebx
and ebp, ecx
or ebp, edx
shr ebp, 0x1f
mov ecx, dword [esp + 0x54]
mov edx, ebp
add ebp, ecx
mov ebx, ebp
add ebp, 1
add edx, ecx
mov ecx, dword [esp + 0x58]
adc ecx, 0
add ebx, 1
adc ecx, 0
nop
nop
nop
nop
mov edx, dword [esp + 0xcc]
add edx, 0xfffffff0
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 0x10
add eax, edx
mov edx, dword [esp + 0xd0]
add edx, 0xfffffff0
nop
nop
mov edi, dword [esp + 0xa0]
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0xc4]
mov dword [esp + 0x5c], edi
mov edi, esi
mov esi, eax
mov eax, ebx
mov ebx, ecx
mov ecx, dword [esp + 0xb8]
jmp 0x6fd589b4
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov eax, dword [esp + 0xfc]
lea edi, [esp + 0xec]
cmp eax, edi
je 0x6fd58768
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.6fc62890
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0x54]
mov byte [esp + ecx + 0xec], 1
movzx ecx, byte [esp + 0xef]
mov dword [esp + 0xc8], ecx
shl ecx, 0x18
mov eax, esi
movzx esi, byte [esp + 0xee]
mov dword [esp + 0xc4], esi
shl esi, 0x10
movzx edi, byte [esp + 0xed]
mov dword [esp + 0xc0], edi
shl edi, 8
movzx ebx, byte [esp + 0xec]
or ebx, edi
or esi, ebx
or ecx, esi
mov dword [esp + 0xbc], ecx
mov ebx, dword [esp + 0x38]
add ecx, ebx
movzx edi, byte [esp + 0xf7]
mov dword [esp + 0xb8], edi
shl edi, 0x18
mov dword [esp + 0xb4], edi
movzx ebx, byte [esp + 0xf6]
mov dword [esp + 0xb0], ebx
shl ebx, 0x10
movzx esi, byte [esp + 0xf5]
mov dword [esp + 0xac], esi
shl esi, 8
movzx edi, byte [esp + 0xf4]
or edi, esi
or ebx, edi
mov esi, dword [esp + 0xb4]
or esi, ebx
mov dword [esp + 0xb4], esi
mov ebx, dword [esp + 0x5c]
add esi, ebx
mov dword [esp + 0xa8], esi
movzx ebx, byte [esp + 0xf2]
shl ebx, 0x10
mov dword [esp + 0xa4], ebx
movzx edi, byte [esp + 0xf1]
shl edi, 8
mov dword [esp + 0x9c], edi
movzx esi, byte [esp + 0xf0]
mov dword [esp + 0x98], esi
mov ebx, dword [esp + 0xc8]
shr ebx, 8
mov edi, dword [esp + 0xc4]
shr edi, 0x10
mov esi, dword [esp + 0xc0]
shr esi, 0x18
or edi, esi
or ebx, edi
mov esi, dword [esp + 0x98]
or esi, ebx
mov ebx, dword [esp + 0x9c]
or ebx, esi
mov esi, dword [esp + 0xa4]
or esi, ebx
movzx ebx, byte [esp + 0xf3]
shl ebx, 0x18
or ebx, esi
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0x38]
add esi, edi
mov esi, ebx
adc ebx, edx
mov dword [esp + 0xa0], ebx
mov edi, esi
or esi, edx
not ebx
and ebx, esi
and edi, edx
or edi, ebx
shr edi, 0x1f
mov dword [esp + 0xc8], edi
mov ebx, dword [esp + 0xa8]
add ebx, edi
mov dword [esp + 0xc4], ebx
movzx edx, byte [esp + 0xfa]
shl edx, 0x10
movzx ebx, byte [esp + 0xf9]
shl ebx, 8
mov dword [esp + 0xc0], ebx
movzx esi, byte [esp + 0xf8]
mov dword [esp + 0xbc], esi
mov edi, dword [esp + 0xb8]
shr edi, 8
mov ebx, dword [esp + 0xb0]
shr ebx, 0x10
mov esi, dword [esp + 0xac]
shr esi, 0x18
or ebx, esi
or edi, ebx
mov ebx, dword [esp + 0xbc]
or ebx, edi
mov esi, dword [esp + 0xc0]
or esi, ebx
or edx, esi
movzx ebx, byte [esp + 0xfb]
shl ebx, 0x18
or edx, ebx
mov ebx, dword [esp + 0xb4]
mov esi, dword [esp + 0x5c]
add ebx, esi
mov ebx, edx
adc edx, ebp
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0xc8]
add esi, edi
adc edx, 0
mov esi, ebx
or ebx, ebp
mov edi, edx
not edx
and edx, ebx
and ebp, esi
or ebp, edx
shr ebp, 0x1f
add ebp, eax
mov ebx, dword [esp + 0x58]
adc ebx, 0
nop
nop
nop
xor eax, eax
xor edx, edx
xor esi, esi
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x5c], edx
xor eax, eax
xor edx, edx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xcc], edx
mov dword [esp + 0xfc], esi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], ebx
mov dword [esp + 0x60], edi
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 0xc], edx
mov esi, dword [esp + 0x30]
mov dword [esp + 8], esi
call fcn.6fd57f80
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xc0], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xbc], ebx
mov ebp, dword [esp + 0x60]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x5c]
mov dword [esp], esi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
call fcn.6fd57f80
mov eax, dword [esp + 0x14]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb4], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0xb0], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0xac], ebx
mov ebp, dword [esp + 0x58]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x54]
mov dword [esp], esi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x30]
mov dword [esp + 8], edi
call fcn.6fd57f80
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa4], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x9c], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x98], ebx
mov ebp, dword [esp + 0x3c]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x38]
mov dword [esp], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0xc], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
call fcn.6fd57f80
mov eax, dword [esp + 0x14]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x8c], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x88], ebx
mov ebp, dword [esp + 0x60]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x5c]
mov dword [esp], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0xc], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
call fcn.6fd57f80
mov eax, dword [esp + 0x14]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x78], ebx
mov ebp, dword [esp + 0x58]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x54]
mov dword [esp], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0xc], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
call fcn.6fd57f80
mov eax, dword [esp + 0xa4]
test eax, eax
setne cl
mov edx, dword [esp + 0x9c]
test edx, edx
setne bl
or ebx, ecx
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
test bl, bl
jne 0x6fd58bfb
test ebp, ebp
setne bl
test ecx, ecx
setne cl
or ecx, ebx
test cl, cl
je 0x6fd58161
jmp 0x6fd58be3
mov ecx, dword [esp + 0x38]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebp
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], edi
add esp, 0x100
ret
lea eax, [0x6fe514c0]
mov dword [esp], eax
lea eax, [0x6fedeac0]
mov dword [esp + 4], eax
call fcn.6fc36660
lea eax, [0x6fe514c0]
mov dword [esp], eax
lea eax, [0x6fedeac0]
mov dword [esp + 4], eax
call fcn.6fc36660
nop
call fcn.6fc60ad0
jmp fcn.6fd580b0