Function at 0x6d5c70
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x24]
cmp eax, dword [ecx + 8]
jbe 0x6d64bd
sub esp, 0xa4
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0x20]
mov ebx, dword [ecx + 0x24]
lea edi, [ecx + 0x24]
mov dword [esp + 0x50], edi
movzx ebp, byte [esp + 0xac]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6d5cba
test edx, edx
jne 0x6d641f
mov dword [ecx + 0x20], 0
mov ebp, dword [0xa8f2d0]
test ebp, ebp
jne 0x6d6413
mov dword [ecx + 0x24], 0
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x2c], edx
lea eax, [0x75cde0]
mov dword [esp], eax
call fcn.00409d00
mov eax, dword [esp + 4]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0x68]
mov ebx, dword [ecx + 0x64]
test edx, edx
je 0x6d63f0
mov ebp, dword [ecx + 4]
mov esi, dword [ecx]
test ebp, ebp
je 0x6d63e0
mov dword [esp + 0x7c], esi
mov dword [esp + 0x80], ebp
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], edx
lea edi, [esp + 0x84]
xor eax, eax
call fcn.0044cad8
lea ecx, [0x730dc0]
mov dword [esp], ecx
lea edx, [esp + 0x7c]
mov dword [esp + 4], edx
call fcn.00407570
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
lea ecx, [0x730dc0]
mov dword [esp], ecx
lea edx, [esp + 0x74]
mov dword [esp + 4], edx
call fcn.00407570
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edx
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0x14]
mov dword [esp + 4], edx
lea edx, [0x730440]
mov dword [esp], edx
call fcn.00407490
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], edx
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0x18]
mov dword [esp + 4], edx
lea edx, [0x730440]
mov dword [esp], edx
call fcn.00407490
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], ecx
lea ecx, [0x7fe040]
mov dword [esp], ecx
mov edx, dword [esp + 0x48]
mov dword [esp + 4], edx
lea ebx, [0x798517]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x12
lea ebx, [esp + 0x84]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 4
call fcn.004b4e80
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0x68]
mov ebx, dword [ecx + 0x64]
cmp edx, 7
jge 0x6d63b5
xor eax, eax
test al, al
je 0x6d6378
mov eax, 1
test al, al
je 0x6d62cf
mov eax, dword [ecx + 0x3c]
mov edx, dword [ecx + 0x38]
mov ebx, dword [ecx + 0x34]
test edx, edx
jle 0x6d62c5
mov ebp, dword [ebx + 4]
mov esi, dword [ebx]
cmp ebp, 7
jne 0x6d62b9
mov ebp, dword [esi]
cmp ebp, 0x6e756863
jne 0x6d62ad
movzx ebp, word [esi + 4]
cmp bp, 0x656b
jne 0x6d62a1
movzx ebp, byte [esi + 6]
xchg ebp, eax
cmp al, 0x64
xchg ebp, eax
xchg ebp, ebx
sete bl
xchg ebp, ebx
test edx, edx
xchg ebp, eax
mov byte [esp + 0x2b], al
xchg ebp, eax
jg 0x6d61e8
movzx eax, byte [ecx + 0x40]
test al, al
jne 0x6d619c
mov eax, dword [ecx + 0x1c]
mov dword [esp], eax
lea eax, [0x7fe040]
mov dword [esp + 4], eax
mov edx, dword [esp + 0x48]
mov dword [esp + 8], edx
mov ebx, dword [0xa7ca8c]
mov dword [esp + 0xc], ebx
call fcn.0060e790
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test eax, eax
jne 0x6d6166
mov dword [esp + 0x30], eax
mov dword [esp + 0x40], ecx
lea eax, [0x7fe040]
mov dword [esp], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
lea edx, [0x78f7e9]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
call fcn.0045f820
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x6d6159
movzx ecx, byte [esp + 0x2b]
test cl, cl
jne 0x6d60ec
mov edx, dword [esp + 0x48]
lea ebx, [0x7fe040]
mov dword [esp + 0x44], edx
mov dword [esp + 0x34], ebx
mov ecx, dword [eax + 0x20]
mov ebp, dword [eax + 0x24]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
lea ecx, [0x73f740]
mov dword [esp], ecx
call fcn.00407960
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
call fcn.0045fc40
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
movzx edx, byte [esp + 0x2b]
test dl, dl
jne 0x6d6081
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xa8]
mov dword [ebx + 0x20], edx
mov edx, dword [0xa8f2d0]
test edx, edx
jne 0x6d606b
mov edx, dword [esp + 0x3c]
mov dword [ebx + 0x24], edx
test eax, eax
jne 0x6d6035
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax]
mov ebx, dword [eax + 4]
mov eax, dword [eax + 8]
cmp ecx, ebx
ja 0x6d64b6
sub eax, ecx
mov ebp, eax
neg eax
sar eax, 0x1f
and eax, ecx
add eax, edx
mov dword [esp + 0xb0], eax
sub ebx, ecx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebp
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
add esp, 0xa4
ret
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ecx
add esp, 0xa4
ret
mov edi, dword [esp + 0x50]
mov edx, eax
mov eax, dword [esp + 0x3c]
call fcn.0044c9e0
mov eax, edx
jmp 0x6d5fd9
mov dword [esp + 0x38], eax
mov dword [esp + 0x4c], ecx
lea eax, [0x73f6e0]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.004079e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
lea eax, [0x7fe040]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
lea ecx, [0x78f7e9]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 2
call fcn.0045f820
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x4c]
jmp 0x6d5fb6
lea eax, [0x7442e0]
mov dword [esp], eax
call fcn.00409d00
mov eax, dword [esp + 4]
lea ecx, [0x7fe040]
mov dword [eax], ecx
mov edx, dword [0xa8f2d0]
test edx, edx
jne 0x6d6147
mov edx, dword [esp + 0x48]
mov dword [eax + 4], edx
lea ecx, [0x73f8c0]
mov dword [esp], ecx
lea ecx, [0x7fffc0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00407960
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xa8]
jmp 0x6d5f59
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0x48]
call fcn.0044c9e0
mov eax, edx
jmp 0x6d6117
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x30]
jmp 0x6d5fb6
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ecx
add esp, 0xa4
ret
lea eax, [0x7fe040]
mov dword [esp], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
lea edx, [0x798f10]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x13
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004b4e80
mov ecx, dword [esp + 0xa8]
jmp 0x6d5ec9
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
lea eax, [0x78f66e]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
call fcn.004c7c70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
lea eax, [0x730dc0]
mov dword [esp], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00407570
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
lea eax, [0x7fe040]
mov dword [esp], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
lea edx, [0x79b6e0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x17
lea edx, [esp + 0x5c]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004b4e80
mov ecx, dword [esp + 0xa8]
movzx ebp, byte [esp + 0x2b]
jmp 0x6d5ebd
test edx, edx
mov ebp, 0
jmp 0x6d5eb1
test edx, edx
mov ebp, 0
jmp 0x6d5eb1
test edx, edx
mov ebp, 0
jmp 0x6d5eb1
mov ebp, 0
jmp 0x6d5eb1
mov eax, dword [ecx + 0x44]
mov edx, dword [ecx + 0x48]
test edx, edx
jne 0x6d62e6
mov ebx, dword [ecx + 8]
test ebx, ebx
je 0x6d62e6
mov eax, dword [ebx + 0x14]
mov edx, dword [ebx + 0x18]
test edx, edx
je 0x6d5e63
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
lea eax, [0x730dc0]
mov dword [esp], eax
lea ecx, [esp + 0x64]
mov dword [esp + 4], ecx
call fcn.00407570
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
lea eax, [0x7fe040]
mov dword [esp], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
lea edx, [0x79437e]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
lea edx, [esp + 0x6c]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004b4e80
mov ecx, dword [esp + 0xa8]
jmp 0x6d5e63
mov eax, dword [ecx + 0x64]
mov edx, dword [ecx + 0x68]
cmp edx, 8
jge 0x6d638a
xor eax, eax
jmp 0x6d5e5b
mov dword [esp], eax
lea eax, [0x7933e5]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004021c0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xa8]
jmp 0x6d5e5b
mov dword [esp], ebx
lea eax, [0x792619]
mov dword [esp + 4], eax
mov dword [esp + 8], 7
call fcn.004021c0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xa8]
jmp 0x6d5e4e
mov ebp, 3
lea esi, [0x78f97e]
jmp 0x6d5d16
mov eax, dword [ecx + 8]
mov dword [esp], eax
call fcn.0055e120
mov ebx, dword [esp + 4]
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xa8]
jmp 0x6d5d09
xor eax, eax
call fcn.0044c9e0
jmp 0x6d5cd6
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.006d59e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0xa8]
mov dword [edi + 0x20], edx
mov edx, dword [0xa8f2d0]
test edx, edx
jne 0x6d649d
mov dword [edi + 0x24], ebx
test esi, esi
jne 0x6d6467
mov ebx, ecx
mov edx, eax
jmp 0x6d5cd6
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], esi
mov dword [esp + 0xc0], ebp
add esp, 0xa4
ret
mov dword [esp + 0x2c], eax
mov edx, edi
mov edi, dword [esp + 0x50]
mov eax, ebx
call fcn.0044c9e0
mov eax, dword [esp + 0x2c]
mov edi, edx
jmp 0x6d645a
call fcn.004267e0
ud2
call fcn.0044b280
jmp fcn.006d5c70