Function at 0x6b3850
Capabilities:
Inspect section memory permissions

Disassembly:
mov ecx, dword [0x9ec7ac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xd4]
cmp eax, dword [ecx + 8]
jbe 0x6b44a8
sub esp, 0x154
mov byte [esp + 0x16c], 0
mov dword [esp + 0x170], 0
mov eax, dword [esp + 0x158]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
call fcn.0047eff0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x6b38aa
xor ecx, ecx
jmp 0x6b38ba
mov edx, dword [esp + 0xc]
test edx, edx
jbe 0x6b449e
mov ecx, dword [esp + 8]
mov dword [esp + 0xb0], ecx
lea edi, [esp + 0x110]
xor eax, eax
call fcn.004686ef
call fcn.006b5710
lea ecx, [0x708840]
mov dword [esp], ecx
call fcn.0040c5b0
mov ecx, dword [esp + 4]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x110], 4
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x14], 0x8000004
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
lea edx, [esp + 0x110]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], ecx
call fcn.004824c0
mov ecx, dword [esp + 0x28]
test ecx, ecx
jne 0x6b408e
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 4]
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
lea edx, [0x6b4500]
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], ecx
lea ecx, [esp + 0x60]
mov dword [esp + 0x98], ecx
lea ecx, [esp + 0x8c]
mov dword [esp], ecx
call fcn.004376a0
test eax, eax
jne 0x6b40b9
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax]
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
lea edx, [0x6b44c0]
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x58]
mov dword [esp + 0x74], ecx
lea ecx, [esp + 0x68]
mov dword [esp], ecx
call fcn.004376a0
test eax, eax
jne 0x6b40ad
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax]
mov dword [esp + 0x54], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x50], edx
nop
lea ebx, [0x700360]
mov dword [esp], ebx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x164]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x168]
mov dword [eax + 8], edx
mov edx, dword [0x9eca70]
test edx, edx
jne 0x6b3a32
mov edx, dword [esp + 0x160]
jmp 0x6b3a40
call fcn.00468450
mov edx, dword [esp + 0x160]
mov dword [edi], edx
mov dword [eax], edx
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xffffffff
lea ecx, [0x7aae8c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004dda60
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0xbc], ecx
call fcn.006b5710
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x6b408e
mov eax, dword [esp + 0xbc]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x20]
lea ebp, [0x6ce200]
cmp ecx, ebp
jne 0x6b4488
mov dword [esp + 0x34], ebx
mov dword [esp + 0xb8], edx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0xc8], ecx
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0x48], edx
lea ebx, [0x727700]
mov dword [esp], ebx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [esp + 0x104], eax
mov dword [eax], 0x100002
mov dword [esp + 0xf8], eax
lea ecx, [0x6de4c0]
mov dword [esp], ecx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov edx, dword [esp + 0xf8]
mov dword [eax + 4], edx
mov edx, dword [0x9a3314]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0047cdf0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x6b408e
mov eax, dword [esp + 0x104]
mov ecx, dword [eax + 0xa4]
mov dword [esp + 0x4c], ecx
lea edx, [0x6e44c0]
mov dword [esp], edx
call fcn.0040c5b0
mov eax, dword [esp + 0x4c]
add eax, 8
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x100], ecx
lea edx, [0x6e4500]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 4
call fcn.0044e0b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xf0], ecx
lea ecx, [0x6de540]
mov dword [esp], ecx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xf4]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], 4
mov ebx, dword [esp + 0xf0]
mov dword [eax + 0x10], ebx
mov ebx, dword [0x9a331c]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0047cdf0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x6b408e
mov eax, dword [esp + 0xc4]
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
nop
mov ecx, dword [esp + 0x48]
cmp eax, ecx
jne 0x6b3c7a
lea eax, [0x6de4c0]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
mov edx, dword [esp + 0x4c]
mov dword [eax + 4], edx
mov ebx, dword [0x9a3320]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0047cdf0
cmp dword [esp + 0x10], 1
je 0x6b406c
lea eax, [0x6e4480]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [esp + 0x108], eax
lea ecx, [0x6de540]
mov dword [esp], ecx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
mov edx, dword [esp + 0x48]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xc8]
mov ebp, dword [ebx + 0x38]
mov dword [eax + 8], ebp
mov dword [eax + 0xc], 0x3000
mov dword [eax + 0x10], 0x40
mov ebp, dword [0x9a3310]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0047cdf0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x6b3d02
mov ecx, dword [esp + 0x108]
mov dword [ecx], eax
jmp 0x6b3d73
lea eax, [0x6de540]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
mov dword [eax + 4], 0
mov edx, dword [esp + 0xc8]
mov ebx, dword [edx + 0x38]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], 0x3000
mov dword [eax + 0x10], 0x40
mov ebx, dword [0x9a3310]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0047cdf0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x6b404a
mov ecx, dword [esp + 0x108]
mov dword [ecx], eax
lea eax, [0x6e4480]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [esp + 0xfc], eax
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x108]
cmp dword [edx], ecx
je 0x6b3e10
mov dword [esp + 0xec], edx
mov dword [esp + 0xe8], eax
lea ecx, [0x6de540]
mov dword [esp], ecx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov edx, dword [esp + 0xec]
mov dword [eax + 8], edx
mov dword [eax + 0xc], 4
mov edx, dword [esp + 0xe8]
mov dword [eax + 0x10], edx
mov edx, dword [0x9a3324]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0047cdf0
cmp dword [esp + 0x10], 1
je 0x6b4028
call fcn.006b5710
mov eax, dword [esp + 0xc8]
mov word [eax + 0x44], 2
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx]
mov ebx, dword [esp + 0x48]
cmp edx, ebx
je 0x6b3e6c
mov ebx, dword [esp + 0xbc]
movzx ebp, word [ebx + 0x12]
test bp, 1
ja 0x6b3e4a
mov dword [eax + 0x1c], edx
jmp 0x6b3e6c
mov byte [esp + 0x16c], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
mov edx, dword [eax + 0x10]
add edx, dword [ecx]
mov ebx, dword [esp + 0x104]
mov dword [ebx + 0xb0], edx
mov dword [esp + 0xe4], ebx
lea edx, [0x6de4c0]
mov dword [esp], edx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov dword [eax], ecx
mov ecx, dword [esp + 0xe4]
mov dword [eax + 4], ecx
mov ecx, dword [0x9a3318]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0047cdf0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x6b408e
mov edx, dword [esp + 0x164]
test edx, edx
jbe 0x6b447f
mov eax, dword [esp + 0x160]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0xdc], eax
lea ecx, [0x6de540]
mov dword [esp], ecx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xe0]
mov dword [eax + 8], ebx
mov ebx, dword [esp + 0xc8]
mov ebp, dword [ebx + 0x3c]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0xdc]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x9a3324]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0047cdf0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x6b408e
lea eax, [0x6e4480]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [esp + 0x10c], eax
mov dword [esp + 0xd8], eax
lea ecx, [0x6de540]
mov dword [esp], ecx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xc8]
mov ebp, dword [ebx + 0x3c]
mov dword [eax + 8], ebp
mov dword [eax + 0xc], 2
mov ebp, dword [esp + 0xd8]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x9a3328]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0047cdf0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x6b4006
xor eax, eax
jmp 0x6b40cc
mov byte [esp + 0x16c], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
mov byte [esp + 0x16c], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
mov byte [esp + 0x16c], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
mov byte [esp + 0x16c], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
mov byte [esp + 0x16c], 0
mov dword [esp + 0x170], 0
call fcn.00437c30
add esp, 0x154
ret
call fcn.00437c30
add esp, 0x154
ret
call fcn.00437c30
add esp, 0x154
ret
mov ecx, dword [esp + 0x3c]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x34]
cmp eax, ecx
jge 0x6b43d9
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xb8]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0xc0], edx
mov ebx, dword [edx + 0x3c]
mov ebp, dword [edx + 0x10]
nop
lea esi, [0x7aaea0]
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebp
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
call fcn.004dd4a0
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x6b43b7
mov edx, dword [esp + 0x1c]
test edx, edx
jbe 0x6b4476
mov eax, dword [esp + 0x18]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0xd0], eax
lea ecx, [0x6de540]
mov dword [esp], ecx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0x108]
add ebx, dword [ebp]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xd4]
mov dword [eax + 8], ebx
mov ebx, dword [edx + 0x10]
mov dword [eax + 0xc], ebx
mov ebx, dword [esp + 0xd0]
mov dword [eax + 0x10], ebx
mov ebx, dword [0x9a3324]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0047cdf0
cmp dword [esp + 0x10], 1
je 0x6b4395
mov edx, dword [esp + 0xbc]
movzx ebx, word [edx + 2]
dec ebx
mov ebp, dword [esp + 0x3c]
cmp ebp, ebx
jne 0x6b4200
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x38]
mov ebx, dword [esp + 0xc0]
sub ecx, dword [ebx + 0xc]
mov eax, dword [esp + 0xb8]
mov ebx, ecx
mov ecx, dword [esp + 0x34]
jmp 0x6b4223
lea eax, [ebp + 1]
mov ecx, dword [esp + 0x34]
cmp ecx, eax
jbe 0x6b4471
mov eax, dword [esp + 0xb8]
mov ebx, dword [eax + ebp*4 + 4]
mov ebx, dword [ebx + 0xc]
mov esi, dword [eax + ebp*4]
sub ebx, dword [esi + 0xc]
mov dword [esp + 0x44], ebx
mov esi, dword [eax + ebp*4]
mov esi, dword [esi + 0x24]
test esi, 0x20000000
jbe 0x6b4293
test esi, 0x40000000
jbe 0x6b4257
test esi, 0x80000000
jbe 0x6b424f
mov edi, 0x40
jmp 0x6b42ed
test esi, 0x20000000
jmp 0x6b425d
test esi, 0x20000000
jbe 0x6b4293
test esi, 0x40000000
jbe 0x6b4275
mov esi, dword [esp + 0xc0]
mov edi, 0x20
jmp 0x6b42ed
test esi, 0x20000000
jbe 0x6b4293
test esi, 0x80000000
jbe 0x6b4293
mov esi, dword [esp + 0xc0]
mov edi, pe_nt_image_headers32
jmp 0x6b42ed
test esi, 0x40000000
jbe 0x6b42b1
test esi, 0x80000000
jbe 0x6b42b1
mov esi, dword [esp + 0xc0]
mov edi, 4
jmp 0x6b42ed
mov esi, dword [esp + 0xc0]
mov edi, dword [esi + 0x24]
test edi, 0x20000000
jbe 0x6b42ca
mov edi, 0x10
jmp 0x6b42ed
test edi, 0x40000000
jbe 0x6b42d9
mov edi, 2
jmp 0x6b42ed
test edi, 0x80000000
jbe 0x6b42e8
mov edi, 8
jmp 0x6b42ed
mov edi, 1
mov dword [esp + 0x40], edi
mov eax, dword [esp + 0x10c]
mov dword [esp + 0xcc], eax
lea ecx, [0x6de540]
mov dword [esp], ecx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [eax], ecx
mov edx, dword [esp + 0xc0]
mov edx, dword [edx + 0xc]
mov ebx, dword [esp + 0x108]
add edx, dword [ebx]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x44]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0xcc]
mov dword [eax + 0x10], edx
mov edx, dword [0x9a3328]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0047cdf0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x6b40c5
mov byte [esp + 0x16c], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
mov byte [esp + 0x16c], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
mov byte [esp + 0x16c], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
call fcn.006b5710
lea eax, [0x6de4c0]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xb4]
mov edx, dword [ecx + 4]
mov dword [eax], edx
mov dword [eax + 4], 0
mov edx, dword [0x9a330c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0047cdf0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x6b444f
mov byte [esp + 0x16c], 1
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
mov byte [esp + 0x16c], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x170], eax
call fcn.00437c30
add esp, 0x154
ret
call fcn.004684c0
xor eax, eax
mov ecx, eax
call fcn.004684c0
xor eax, eax
mov ecx, eax
call fcn.004684c0
mov dword [esp], ecx
mov dword [esp + 4], ebp
lea eax, [0x6e5b40]
mov dword [esp + 8], eax
call fcn.00409a80
xor eax, eax
mov ecx, eax
call fcn.004684c0
nop
call fcn.00467050
jmp fcn.006b3850