Function at 0x661480
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x124]
cmp eax, dword [ecx + 8]
jbe 0x6620fe
sub esp, 0x1a4
mov eax, 0
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x1e8]
test eax, eax
jne 0x6615a9
mov eax, dword [esp + 0x1a8]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
cmp ecx, 2
je 0x661507
mov eax, dword [0xbb5658]
mov ecx, dword [0xbb5654]
mov edx, dword [0xbb5650]
mov dword [esp + 0x1ec], edx
mov dword [esp + 0x1f0], ecx
mov dword [esp + 0x1f4], eax
add esp, 0x1a4
ret
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
lea eax, [0x771de0]
mov dword [esp], eax
lea eax, [esp + 0xec]
mov dword [esp + 4], eax
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea eax, [0x7e7a60]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1d
lea eax, [esp + 0xf4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0065d9a0
jmp 0x6614d9
mov ecx, dword [esp + 0x1e0]
mov dword [esp], ecx
mov edx, dword [esp + 0x1e4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0047c110
mov eax, dword [esp + 0x10]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x1e0]
mov dword [esp], edx
mov edx, dword [esp + 0x1e4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1e8]
mov dword [esp + 8], edx
call fcn.00665050
movzx eax, byte [esp + 0x18]
mov byte [esp + 0x52], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x84], ebx
mov ebp, edx
and edx, 0x1f
mov dword [esp + 0x64], edx
cmp edx, 0x14
je 0x661642
cmp edx, 0x16
je 0x661642
test ebp, 0x100
jne 0x66200c
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0x10], ecx
call fcn.0047a480
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
test ecx, ecx
jne 0x661f3a
mov eax, dword [esp + 0x1cc]
cmp eax, 1
jle 0x661eed
mov eax, 1
mov byte [esp + 0x53], al
mov ecx, dword [esp + 0x64]
cmp ecx, 0x15
jne 0x661b49
movzx ecx, byte [esp + 0x52]
test cl, cl
je 0x661783
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x1bc]
mov dword [esp + 0xc8], edx
mov ebx, dword [esp + 0x54]
test ebx, ebx
je 0x661b42
mov ebp, dword [ebx + 4]
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov dword [esp + 0x10c], ebp
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x110], eax
lea ecx, [0x771de0]
mov dword [esp], ecx
lea edx, [esp + 0xc4]
mov dword [esp + 4], edx
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea ecx, [0x7e7289]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
lea ecx, [esp + 0x10c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.0065d9a0
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0xc0], ecx
lea edx, [0x771de0]
mov dword [esp], edx
lea ebx, [esp + 0xbc]
mov dword [esp + 4], ebx
call fcn.00407630
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x661b37
movzx edx, byte [0xbb55c0]
test dl, dl
je 0x6617ed
mov dword [0xbb55c4], eax
mov edx, dword [0xbc7270]
test edx, edx
jne 0x661b21
mov dword [0xbb55c8], ecx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], ecx
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x661b16
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x66181e
or edx, 0x80
mov dword [esp + 0x58], edx
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0047c110
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x84]
mov dword [esp], edx
mov ebx, dword [esp + 0x88]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x68]
mov dword [esp + 8], ebp
call fcn.0047c110
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x4c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x60]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 0xc]
test al, al
je 0x661ae6
movzx eax, byte [esp + 0x53]
test al, al
jne 0x661a44
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x14], ebx
call fcn.00479d40
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test eax, eax
je 0x661912
mov dword [esp + 0x1ec], edx
mov dword [esp + 0x1f0], ecx
mov dword [esp + 0x1f4], eax
add esp, 0x1a4
ret
mov ebx, dword [esp + 0x1a8]
mov ebp, dword [ebx]
mov ebp, dword [ebp + 0xc]
mov ebp, dword [ebp + 4]
test ebp, ebp
je 0x6618f6
cmp ebp, 1
je 0x6619ed
cmp ebp, 2
jne 0x6618f6
mov dword [esp + 0x5c], eax
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], edx
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
lea eax, [0x771de0]
mov dword [esp], eax
lea eax, [esp + 0x9c]
mov dword [esp + 4], eax
call fcn.00407630
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], ecx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea eax, [0x7e684b]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1b
lea eax, [esp + 0xa4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0065d9a0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x78]
jmp 0x6618f6
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
call fcn.0047c110
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0047ccd0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 8]
jmp 0x6618f6
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
lea edx, [0x771de0]
mov dword [esp], edx
lea ebx, [esp + 0xac]
mov dword [esp + 4], ebx
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea ecx, [0x7eb1cf]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x24
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0065d9a0
jmp 0x6618ac
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x54]
test eax, eax
je 0x66202d
mov eax, dword [eax + 4]
jmp 0x66202d
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x66181e
lea edi, [0xbb55c8]
mov edx, eax
mov eax, ecx
call fcn.0044cc20
mov eax, edx
jmp 0x6617ed
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x66181e
mov ebp, ebx
jmp 0x6616da
cmp ecx, 0x19
jne 0x661ae6
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
call fcn.0047c110
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x60], ecx
lea edi, [esp + 0x170]
mov edx, eax
xor eax, eax
call fcn.0044cd13
mov eax, dword [esp + 0x60]
mov eax, dword [eax + 0x38]
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x1bc]
mov dword [esp + 8], ebx
mov dword [esp], edx
call eax
lea esi, [esp + 0xc]
lea edi, [esp + 0x170]
call fcn.0044d1ae
movzx eax, byte [esp + 0x40]
lea edi, [esp + 0x13c]
lea esi, [esp + 0x170]
call fcn.0044d1ae
test al, al
je 0x661ae6
movzx eax, byte [esp + 0x52]
test al, al
je 0x661cbf
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0xe8], ecx
mov edx, dword [esp + 0x54]
test edx, edx
je 0x661ee6
mov ebx, dword [edx + 4]
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
mov dword [esp + 0x12c], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x130], eax
lea ecx, [0x771de0]
mov dword [esp], ecx
lea edx, [esp + 0xe4]
mov dword [esp + 4], edx
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea ecx, [0x7e7289]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
lea ecx, [esp + 0x12c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.0065d9a0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x160]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
call fcn.00478f60
mov eax, dword [esp + 0x20]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0x148]
test ebx, ebx
je 0x661e0d
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0xdc], ebx
mov ebp, dword [esp + 0x1bc]
mov dword [esp + 0xe0], ebp
mov esi, dword [esp + 0x54]
test esi, esi
je 0x661d56
mov esi, dword [esi + 4]
mov dword [esp + 0x80], esi
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
lea eax, [0x771de0]
mov dword [esp], eax
lea ecx, [esp + 0xdc]
mov dword [esp + 4], ecx
call fcn.00407630
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea ecx, [0x7ee457]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x2b
lea ecx, [esp + 0x11c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.0065d9a0
movzx eax, byte [esp + 0x53]
test al, al
jne 0x661e44
mov eax, dword [esp + 0x84]
mov dword [esp + 0x1ec], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1f0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x1f4], eax
add esp, 0x1a4
ret
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea eax, [0x771de0]
mov dword [esp], eax
lea eax, [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.00407630
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], ecx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea eax, [0x7f0c51]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x32
lea eax, [esp + 0xd4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0065d9a0
jmp 0x661e16
mov ebx, edx
jmp 0x661c16
mov eax, dword [0xbb5640]
mov ecx, dword [esp + 0x1d4]
cmp ecx, eax
je 0x661f08
mov eax, 1
jmp 0x661691
mov eax, dword [0xbb5644]
mov ecx, dword [esp + 0x1d8]
cmp ecx, eax
je 0x661f23
mov eax, 1
jmp 0x661691
mov ecx, dword [0xbb5648]
mov edx, dword [esp + 0x1dc]
cmp edx, ecx
setne al
jmp 0x661691
mov ebx, dword [esp + 0x1a8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1ac]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x1b4]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c4]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1c8]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1cc]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1d0]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x1d4]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x1d8]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x1dc]
mov dword [esp + 0x40], eax
call fcn.00662110
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x1ec], edx
mov dword [esp + 0x1f0], ecx
mov dword [esp + 0x1f4], eax
add esp, 0x1a4
ret
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00476d50
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
jmp 0x661642
mov dword [esp + 0x80], eax
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
lea ecx, [0x771de0]
mov dword [esp], ecx
lea edx, [esp + 0x94]
mov dword [esp + 4], edx
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea eax, [0x7ea4b9]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x22
lea eax, [esp + 0xfc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.0065d9a0
lea eax, [0x771de0]
mov dword [esp], eax
lea eax, [0x8f7b00]
mov dword [esp + 4], eax
call fcn.00427510
ud2
call fcn.0044b4c0
jmp fcn.00661480