Function at 0x6d1f20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x124]
cmp eax, dword [ecx + 8]
jbe 0x6d2b9e
sub esp, 0x1a4
mov eax, 0
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x1e8]
test eax, eax
jne 0x6d2049
mov eax, dword [esp + 0x1a8]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
cmp ecx, 2
je 0x6d1fa7
mov eax, dword [0xb80cd0]
mov ecx, dword [0xb80ccc]
mov edx, dword [0xb80cc8]
mov dword [esp + 0x1ec], edx
mov dword [esp + 0x1f0], ecx
mov dword [esp + 0x1f4], eax
add esp, 0x1a4
ret
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
lea eax, [0x7b48a0]
mov dword [esp], eax
lea eax, [esp + 0xec]
mov dword [esp + 4], eax
call fcn.004074b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea eax, [0x842847]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1d
lea eax, [esp + 0xf4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.006ce450
jmp 0x6d1f79
mov ecx, dword [esp + 0x1e0]
mov dword [esp], ecx
mov edx, dword [esp + 0x1e4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004a7b40
mov eax, dword [esp + 0x10]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x1e0]
mov dword [esp], edx
mov edx, dword [esp + 0x1e4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1e8]
mov dword [esp + 8], edx
call fcn.006d5af0
movzx eax, byte [esp + 0x18]
mov byte [esp + 0x52], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x84], ebx
mov ebp, edx
and edx, 0x1f
mov dword [esp + 0x64], edx
cmp edx, 0x14
je 0x6d20e2
cmp edx, 0x16
je 0x6d20e2
test ebp, 0x100
jne 0x6d2aac
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0x10], ecx
call fcn.004a5eb0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
test ecx, ecx
jne 0x6d29da
mov eax, dword [esp + 0x1cc]
cmp eax, 1
jle 0x6d298d
mov eax, 1
mov byte [esp + 0x53], al
mov ecx, dword [esp + 0x64]
cmp ecx, 0x15
jne 0x6d25e9
movzx ecx, byte [esp + 0x52]
test cl, cl
je 0x6d2223
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x1bc]
mov dword [esp + 0xc8], edx
mov ebx, dword [esp + 0x54]
test ebx, ebx
je 0x6d25e2
mov ebp, dword [ebx + 4]
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov dword [esp + 0x10c], ebp
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x110], eax
lea ecx, [0x7b48a0]
mov dword [esp], ecx
lea edx, [esp + 0xc4]
mov dword [esp + 4], edx
call fcn.004074b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea ecx, [0x842052]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
lea ecx, [esp + 0x10c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.006ce450
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0xc0], ecx
lea edx, [0x7b48a0]
mov dword [esp], edx
lea ebx, [esp + 0xbc]
mov dword [esp + 4], ebx
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x6d25d7
movzx edx, byte [0xb80c38]
test dl, dl
je 0x6d228d
mov dword [0xb80c3c], eax
mov edx, dword [0xb92b90]
test edx, edx
jne 0x6d25c1
mov dword [0xb80c40], ecx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], ecx
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x6d25b6
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x6d22be
or edx, 0x80
mov dword [esp + 0x58], edx
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004a7b40
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x84]
mov dword [esp], edx
mov ebx, dword [esp + 0x88]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x68]
mov dword [esp + 8], ebp
call fcn.004a7b40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x4c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x60]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 0xc]
test al, al
je 0x6d2586
movzx eax, byte [esp + 0x53]
test al, al
jne 0x6d24e4
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x14], ebx
call fcn.004a5780
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test eax, eax
je 0x6d23b2
mov dword [esp + 0x1ec], edx
mov dword [esp + 0x1f0], ecx
mov dword [esp + 0x1f4], eax
add esp, 0x1a4
ret
mov ebx, dword [esp + 0x1a8]
mov ebp, dword [ebx]
mov ebp, dword [ebp + 0xc]
mov ebp, dword [ebp + 4]
test ebp, ebp
je 0x6d2396
cmp ebp, 1
je 0x6d248d
cmp ebp, 2
jne 0x6d2396
mov dword [esp + 0x5c], eax
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], edx
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
lea eax, [0x7b48a0]
mov dword [esp], eax
lea eax, [esp + 0x9c]
mov dword [esp + 4], eax
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], ecx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea eax, [0x84165f]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1b
lea eax, [esp + 0xa4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.006ce450
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x78]
jmp 0x6d2396
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
call fcn.004a7b40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004a8bc0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 8]
jmp 0x6d2396
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
lea edx, [0x7b48a0]
mov dword [esp], edx
lea ebx, [esp + 0xac]
mov dword [esp + 4], ebx
call fcn.004074b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea ecx, [0x8460ef]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x24
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.006ce450
jmp 0x6d234c
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x54]
test eax, eax
je 0x6d2acd
mov eax, dword [eax + 4]
jmp 0x6d2acd
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x6d22be
lea edi, [0xb80c40]
mov edx, eax
mov eax, ecx
call fcn.0044c990
mov eax, edx
jmp 0x6d228d
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x6d22be
mov ebp, ebx
jmp 0x6d217a
cmp ecx, 0x19
jne 0x6d2586
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
call fcn.004a7b40
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x60], ecx
lea edi, [esp + 0x170]
mov edx, eax
xor eax, eax
call fcn.0044ca83
mov eax, dword [esp + 0x60]
mov eax, dword [eax + 0x38]
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x1bc]
mov dword [esp + 8], ebx
mov dword [esp], edx
call eax
lea esi, [esp + 0xc]
lea edi, [esp + 0x170]
call fcn.0044cf1e
movzx eax, byte [esp + 0x40]
lea edi, [esp + 0x13c]
lea esi, [esp + 0x170]
call fcn.0044cf1e
test al, al
je 0x6d2586
movzx eax, byte [esp + 0x52]
test al, al
je 0x6d275f
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0xe8], ecx
mov edx, dword [esp + 0x54]
test edx, edx
je 0x6d2986
mov ebx, dword [edx + 4]
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
mov dword [esp + 0x12c], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x130], eax
lea ecx, [0x7b48a0]
mov dword [esp], ecx
lea edx, [esp + 0xe4]
mov dword [esp + 4], edx
call fcn.004074b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea ecx, [0x842052]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
lea ecx, [esp + 0x12c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.006ce450
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x160]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
call fcn.004a49a0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0x148]
test ebx, ebx
je 0x6d28ad
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0xdc], ebx
mov ebp, dword [esp + 0x1bc]
mov dword [esp + 0xe0], ebp
mov esi, dword [esp + 0x54]
test esi, esi
je 0x6d27f6
mov esi, dword [esi + 4]
mov dword [esp + 0x80], esi
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
lea eax, [0x7b48a0]
mov dword [esp], eax
lea ecx, [esp + 0xdc]
mov dword [esp + 4], ecx
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea ecx, [0x84970f]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x2b
lea ecx, [esp + 0x11c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.006ce450
movzx eax, byte [esp + 0x53]
test al, al
jne 0x6d28e4
mov eax, dword [esp + 0x84]
mov dword [esp + 0x1ec], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1f0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x1f4], eax
add esp, 0x1a4
ret
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea eax, [0x7b48a0]
mov dword [esp], eax
lea eax, [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], ecx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea eax, [0x84c2cf]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x32
lea eax, [esp + 0xd4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.006ce450
jmp 0x6d28b6
mov ebx, edx
jmp 0x6d26b6
mov eax, dword [0xb80cb8]
mov ecx, dword [esp + 0x1d4]
cmp ecx, eax
je 0x6d29a8
mov eax, 1
jmp 0x6d2131
mov eax, dword [0xb80cbc]
mov ecx, dword [esp + 0x1d8]
cmp ecx, eax
je 0x6d29c3
mov eax, 1
jmp 0x6d2131
mov ecx, dword [0xb80cc0]
mov edx, dword [esp + 0x1dc]
cmp edx, ecx
setne al
jmp 0x6d2131
mov ebx, dword [esp + 0x1a8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1ac]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x1b4]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c4]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1c8]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1cc]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1d0]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x1d4]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x1d8]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x1dc]
mov dword [esp + 0x40], eax
call fcn.006d2bb0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x1ec], edx
mov dword [esp + 0x1f0], ecx
mov dword [esp + 0x1f4], eax
add esp, 0x1a4
ret
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004a27c0
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
jmp 0x6d20e2
mov dword [esp + 0x80], eax
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
lea ecx, [0x7b48a0]
mov dword [esp], ecx
lea edx, [esp + 0x94]
mov dword [esp + 4], edx
call fcn.004074b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
lea eax, [0x8452e8]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x22
lea eax, [esp + 0xfc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.006ce450
lea eax, [0x7b48a0]
mov dword [esp], eax
lea eax, [0x8b1c18]
mov dword [esp + 4], eax
call fcn.004273c0
ud2
call fcn.0044b230
jmp fcn.006d1f20