Function at 0x60db44
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xd0
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xe8]
call 0x60db5e
pop eax
mov ebx, edx
mov dword [esp + 0x90], eax
call fcn.0059c336
mov ebp, dword [ebx + 0x10]
mov edi, dword [ebx]
mov ecx, dword [ebx + 8]
mov esi, dword [ebx + 4]
mov dword [esp + 0x6c], eax
mov dword [esp + 4], eax
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], 0
mov eax, dword [esp + 0xe8]
mov ebx, dword [ebx + 0xc]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x78], ebp
mov dword [esp + 0x7c], edi
mov edi, dword [esp + 0xe4]
mov dword [esp + 0x80], esi
mov dword [esp + 0x84], ecx
mov dword [esp + 0xc], ecx
xor ecx, ecx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x44], ebx
mov byte [esp + 0x8c], 0
add eax, edi
mov dword [esp + 8], eax
mov ebx, ecx
cmp edi, eax
je 0x60dc72
mov cl, byte [edi]
mov ebp, edi
movzx esi, cl
test cl, cl
js 0x60dbf4
lea edi, [ebp + 1]
jmp 0x60dc55
movzx edx, byte [ebp + 1]
and esi, 0x1f
and edx, 0x3f
cmp cl, 0xdf
jbe 0x60dc3f
movzx eax, byte [ebp + 2]
shl edx, 6
and eax, 0x3f
or eax, edx
cmp cl, 0xf0
jb 0x60dc49
movzx edx, byte [ebp + 3]
shl eax, 6
and esi, 7
mov cl, 1
lea edi, [ebp + 4]
shl esi, 0x12
mov dword [esp + 0x10], ecx
and edx, 0x3f
or edx, eax
mov eax, dword [esp + 8]
or esi, edx
cmp esi, 0x110000
jne 0x60dc55
jmp 0x60dc7a
shl esi, 6
lea edi, [ebp + 2]
or esi, edx
jmp 0x60dc55
shl esi, 0xc
lea edi, [ebp + 3]
or esi, eax
mov eax, dword [esp + 8]
mov ecx, edi
sub ecx, ebp
add ecx, ebx
cmp esi, 0x21
jb 0x60dbda
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], ecx
jmp 0x60dc7c
mov cl, 1
mov edi, eax
mov dword [esp + 0x10], ecx
mov ecx, ebx
mov dword [esp + 0x94], ebx
cmp edi, eax
je 0x60dd1a
mov dl, byte [eax - 1]
mov ebp, eax
test dl, dl
js 0x60dc9c
lea eax, [ebp - 1]
movzx edx, dl
jmp 0x60dd09
movzx eax, byte [ebp - 2]
cmp al, 0xc0
jge 0x60dcd1
movzx ebx, byte [ebp - 3]
cmp bl, 0xc0
mov dword [esp], ebx
jge 0x60dcdd
lea esi, [ebp - 4]
mov dword [esp + 8], esi
movzx esi, byte [ebp - 4]
and esi, 7
shl esi, 6
mov dword [esp + 0x18], esi
mov esi, dword [esp]
and esi, 0x3f
add esi, dword [esp + 0x18]
jmp 0x60dcea
lea esi, [ebp - 2]
and eax, 0x1f
mov dword [esp + 8], esi
jmp 0x60dcf2
lea esi, [ebp - 3]
mov dword [esp + 8], esi
mov esi, dword [esp]
and esi, 0xf
shl esi, 6
and eax, 0x3f
or eax, esi
and dl, 0x3f
shl eax, 6
movzx edx, dl
or edx, eax
mov eax, dword [esp + 8]
cmp edx, 0x110000
je 0x60dd1a
cmp edx, 0x21
jb 0x60dc83
sub ecx, edi
add ecx, ebp
mov ebx, ecx
jmp 0x60dd1e
mov ebx, dword [esp + 0x1c]
xor eax, eax
cmp byte [esp + 0x10], 0
mov ecx, dword [esp + 0x94]
cmovne ecx, eax
mov eax, dword [esp + 0xe4]
cmp dword [esp + 0xc], 0
lea eax, [eax + ecx]
mov dword [esp + 8], eax
je 0x60de0e
mov eax, ebx
sub eax, ecx
cmp eax, dword [esp + 0xe8]
jae 0x60dd65
push 1
push dword [esp + 0x10]
mov eax, dword [esp + 0x4c]
call dword [eax + 0x14]
add esp, 8
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 8]
mov ebp, 0x2600
add eax, ebx
cmp edx, eax
je 0x60de0e
mov cl, byte [edx]
movzx esi, cl
test cl, cl
js 0x60dd8b
inc edx
jmp 0x60dddd
movzx edi, byte [edx + 1]
and esi, 0x1f
and edi, 0x3f
cmp cl, 0xdf
jbe 0x60ddd5
mov ebp, ebx
movzx ebx, byte [edx + 2]
shl edi, 6
and ebx, 0x3f
or ebx, edi
cmp cl, 0xf0
jb 0x60ddeb
movzx edi, byte [edx + 3]
and esi, 7
shl ebx, 6
shl esi, 0x12
and edi, 0x3f
or edi, ebx
mov ebx, ebp
mov ebp, 0x2600
or edi, esi
cmp edi, 0x110000
je 0x60de0e
add edx, 4
jmp 0x60dddf
shl esi, 6
add edx, 2
or esi, edi
mov edi, esi
cmp edi, 0xd
ja 0x60dd77
bt ebp, edi
jae 0x60dd77
jmp 0x60ddfe
shl esi, 0xc
add edx, 3
or ebx, esi
mov edi, ebx
mov ebx, ebp
mov ebp, 0x2600
jmp 0x60dddf
push 9
push dword [esp + 0x10]
mov eax, dword [esp + 0x4c]
call dword [eax + 0x14]
add esp, 8
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 8]
lea ecx, [esp + 0x20]
add ebp, ebx
mov dword [esp + 0x48], esi
mov dword [ecx], esi
mov dword [esp + 0x4c], ebp
mov dword [ecx + 4], ebp
call fcn.0060cccf
cmp eax, 0x110000
jne 0x60de82
mov ebx, dword [esp + 0x78]
test ebx, ebx
je 0x60df25
lea ecx, [esp + 0x20]
mov dword [ecx], esi
mov dword [ecx + 4], ebp
call fcn.0060cccf
cmp eax, 0x23
jne 0x60df2c
lea edx, [esp + 0x20]
mov eax, esi
lea esi, [esp + 0x6c]
mov ecx, 9
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x14]
push ebp
push eax
push ebx
call fcn.0061176f
add esp, 0xc
jmp 0x60e623
lea ecx, [esp + 0x20]
mov dword [ecx], esi
mov dword [ecx + 4], ebp
call fcn.0060cccf
cmp eax, 0x110000
je 0x60de38
and eax, 0x1fffdf
add eax, 0xffffffbf
cmp eax, 0x19
ja 0x60de38
mov dword [esp], ebp
xor ebp, ebp
lea edi, [esp + 0x48]
lea esi, [esp + 0x6c]
mov ecx, edi
call fcn.0060cccf
cmp eax, 0x110000
je 0x60df57
lea edx, [eax - 0x61]
lea ecx, [eax - 0x41]
cmp edx, 0x1a
jb 0x60deec
cmp ecx, 0x1a
jb 0x60deec
lea edx, [eax - 0x30]
cmp edx, 0xa
jb 0x60deec
lea edx, [eax - 0x2d]
cmp edx, 2
jb 0x60deec
cmp eax, 0x2b
jne 0x60e010
mov edx, eax
xor dl, 0x20
cmp ecx, 0x1a
movzx ebx, dl
cmovae ebx, eax
cmp ebp, dword [esp + 0x70]
jne 0x60df13
mov ecx, esi
mov edx, ebp
call fcn.004b743a
mov eax, dword [esp + 0x6c]
mov ebp, dword [esp + 0x74]
jmp 0x60df17
mov eax, dword [esp + 4]
mov byte [eax + ebp], bl
inc ebp
mov dword [esp + 4], eax
mov dword [esp + 0x74], ebp
jmp 0x60deb1
mov al, 6
jmp 0x60dfe1
mov dword [esp], ebp
mov ebp, dword [ebx + 0x20]
mov edx, dword [ebx + 0x1c]
mov ecx, dword [ebx + 0x14]
mov esi, ebp
mov edi, edx
inc esi
je 0x60dfbc
mov edi, edx
sub edi, esi
jbe 0x60dfba
cmp byte [ecx + esi], 0xbf
jg 0x60dfbc
push 0x7f514c
push edx
push esi
jmp 0x60e4f2
cmp byte [esp + 0x8c], 1
jne 0x60e019
mov eax, dword [esp + 0x4c]
lea esi, [esp + 0x6c]
mov ecx, 9
mov edx, dword [esp + 0x48]
mov dword [esp + 4], eax
lea eax, [esp + 0x98]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov esi, dword [eax + 8]
mov ebp, dword [eax]
lea eax, [esi - 2]
cmp eax, 3
ja 0x60e0e4
mov ecx, dword [esp + 0x90]
add ecx, dword [eax*4 + 0x60e6d8]
jmp ecx
jne 0x60df4b
mov al, 7
test edi, edi
je 0x60dfe1
cmp byte [ecx + esi], 0x2f
jne 0x60dfe1
test ebp, ebp
je 0x60e02f
cmp edx, ebp
jbe 0x60e02d
cmp byte [ecx + ebp], 0xbf
jg 0x60e02f
push 0x7f513c
push ebp
jmp 0x60e4f0
mov ecx, dword [esp + 0x14]
cmp dword [esp + 0x70], 0
mov byte [ecx + 4], al
mov dword [ecx], 2
je 0x60e623
push dword [esp + 0x6c]
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x60e623
cmp eax, 0x3a
je 0x60df65
mov ebp, dword [esp]
mov esi, dword [esp + 8]
mov dword [esp + 0x74], 0
jmp 0x60de38
jne 0x60dfd6
mov edx, ebp
call fcn.006118c4
lea edx, [esp + 0x20]
lea esi, [esp + 0x6c]
mov ecx, 9
test al, al
mov edi, edx
je 0x60e066
rep movsd dword es:[edi], dword [esi]
movzx eax, al
mov ecx, dword [esp + 0x14]
push ebx
push eax
push dword [esp + 8]
push dword [esp + 0x14]
call fcn.006110a9
jmp 0x60e620
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x14]
push ebx
push 0
push dword [esp + 8]
push dword [esp + 0x14]
jmp 0x60e4c2
mov bl, 2
jmp 0x60e0ea
cmp esi, dword [esp + 0x9c]
mov edi, esi
mov dword [esp], edx
jne 0x60e110
lea edi, [esp + 0x98]
mov edx, esi
mov ecx, edi
call fcn.004b743a
mov ebp, dword [edi]
mov edx, dword [esp]
mov edi, dword [edi + 8]
mov byte [ebp + edi], 0x3a
inc edi
mov dword [esp + 0xc], ebp
movzx ebp, bl
cmp bl, 2
mov dword [esp + 0xa0], edi
je 0x60e170
cmp ebp, 1
jne 0x60e1dc
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 4]
mov dword [esp + 0x10], esi
xor esi, esi
lea ebx, [esp + 0x20]
mov ecx, ebx
mov dword [esp + 0x20], edx
mov dword [esp + 8], edx
mov dword [esp + 0x24], ebp
call fcn.0060cccf
cmp eax, 0x5c
je 0x60e165
cmp eax, 0x2f
jne 0x60e25d
mov edx, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
inc esi
jmp 0x60e144
mov dword [esp + 0x10], esi
lea edi, [esp + 0x48]
lea esi, [esp + 0x98]
mov ecx, 9
mov ebx, edx
lea eax, [esp + 0x20]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x20], edx
mov ecx, 0x7f37dc
mov edx, 2
mov edi, dword [esp + 4]
mov dword [esp + 0x24], edi
push eax
call fcn.0060e82c
add esp, 4
test al, al
je 0x60e2a7
lea edx, [esp + 0x20]
lea esi, [esp + 0x98]
mov ecx, 9
mov edi, edx
mov eax, dword [edx]
mov ebx, dword [edx + 4]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x10]
push ebp
push ebx
push eax
jmp 0x60e61b
mov esi, dword [esp + 0xb0]
test esi, esi
je 0x60e21e
mov eax, dword [esp + 4]
mov edi, dword [esp + 0xb4]
mov dword [esp + 0x20], edx
mov ecx, 0x7f37dc
mov edx, 2
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
push eax
call fcn.0060e82c
add esp, 4
test al, al
jne 0x60e21e
push 4
push esi
call dword [edi + 0x14]
add esp, 8
mov esi, dword [esp + 0xa4]
xor eax, eax
test esi, esi
je 0x60e499
mov edi, dword [esi + 0x20]
test edi, edi
je 0x60e499
mov edx, dword [esi + 0x1c]
mov ecx, dword [esi + 0x14]
cmp edx, edi
jbe 0x60e483
cmp byte [ecx + edi], 0xbf
jg 0x60e489
push 0x7f513c
push edi
jmp 0x60e4f0
cmp esi, 1
ja 0x60e51b
mov ebx, dword [esp + 0xa4]
test ebx, ebx
je 0x60e51b
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x14]
mov esi, dword [esp + 0x10]
test eax, eax
je 0x60e4d2
mov edx, dword [ebx + 0x1c]
cmp edx, eax
jbe 0x60e4cc
cmp byte [ecx + eax], 0xbf
jg 0x60e4d2
push 0x7f513c
push eax
jmp 0x60e4f0
mov eax, dword [esp + 0x50]
lea esi, [esp + 0x20]
mov dword [esp + 0x18], ebp
mov byte [esp + 0xbf], 0
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], edi
mov dword [esp + 8], eax
call fcn.0060cccf
cmp eax, 0x110000
je 0x60e32b
cmp eax, 0x2f
jne 0x60e32b
mov edi, dword [esp + 8]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
cmp edi, dword [esp + 0x4c]
mov eax, edi
jne 0x60e2fd
lea ecx, [esp + 0x48]
mov edx, edi
call fcn.004b743a
lea eax, [esp + 0x48]
mov eax, dword [eax + 8]
lea ecx, [esp + 0x48]
mov edx, dword [ecx]
mov byte [edx + eax], 0x2f
mov edx, dword [esp + 0x18]
inc eax
mov byte [esp + 0x20], 0
mov dword [ecx + 8], eax
push ebp
push ebx
push edi
push esi
call fcn.006101b4
add esp, 0x10
mov dword [esp + 4], edx
mov ebx, edi
jmp 0x60e665
mov ecx, dword [esp]
mov eax, edi
cmp ecx, edi
je 0x60e661
mov edi, dword [esp + 4]
mov esi, 0x2600
mov eax, ecx
mov ebp, ecx
mov dl, byte [ebp]
movzx ebx, dl
test dl, dl
js 0x60e354
lea edx, [ebp + 1]
jmp 0x60e3a5
movzx edi, byte [ebp + 1]
and ebx, 0x1f
and edi, 0x3f
cmp dl, 0xdf
jbe 0x60e38f
movzx ecx, byte [ebp + 2]
shl edi, 6
and ecx, 0x3f
or ecx, edi
cmp dl, 0xf0
jb 0x60e399
movzx edx, byte [ebp + 3]
and ebx, 7
shl ecx, 6
lea edi, [ebp + 4]
shl ebx, 0x12
and edx, 0x3f
or edx, ecx
or ebx, edx
mov edx, edi
jmp 0x60e3a1
shl ebx, 6
lea edx, [ebp + 2]
or ebx, edi
jmp 0x60e3a1
shl ebx, 0xc
lea edx, [ebp + 3]
or ebx, ecx
mov edi, dword [esp + 4]
cmp ebx, 0xd
ja 0x60e3ba
bt esi, ebx
jae 0x60e3ba
cmp edx, edi
mov ebp, edx
jne 0x60e345
jmp 0x60e47c
cmp ebx, 0x110000
je 0x60e65f
cmp ebx, 0x80
mov edi, 1
mov dword [esp], edx
jb 0x60e3f1
mov edi, 2
cmp ebx, 0x800
jb 0x60e3f1
cmp ebx, 0x10000
mov edi, 4
sbb edi, 0
mov edx, dword [esp + 4]
sub edx, ebp
cmp edi, edx
jae 0x60e407
cmp byte [ebp + edi], 0xbf
jg 0x60e40d
jmp 0x60e6cc
jne 0x60e6cc
cmp ebx, 0x23
mov dword [esp + 0xc], edi
je 0x60e42b
mov ecx, dword [esp]
cmp ebx, 0x3f
je 0x60e42b
cmp ebx, 0x110000
jne 0x60e436
jmp 0x60e6c8
cmp byte [esp + 0x68], 0
je 0x60e661
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 4]
mov edx, dword [esp + 0x64]
push edi
push dword [esp + 4]
push ebx
call fcn.00611a97
add esp, 0xc
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x48]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0x7f3698
call fcn.004e4ace
mov ecx, dword [esp]
cmp ecx, edi
jne 0x60e341
mov eax, edi
jmp 0x60e661
jne 0x60e252
cmp edi, 4
jne 0x60e499
xor eax, eax
cmp dword [ecx], 0x656c6966
cmove eax, esi
lea esi, [esp + 0x98]
lea edx, [esp + 0x20]
mov ecx, 9
mov dword [esi + 8], 0
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x14]
push eax
push ebp
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.0060e8de
jmp 0x60e620
jne 0x60e29c
test esi, esi
je 0x60e4fe
cmp edi, esi
jbe 0x60e4fc
mov edx, dword [esp + 0xc]
cmp byte [edx + esi], 0xbf
jg 0x60e4fe
mov ecx, dword [esp + 0xc]
mov edx, edi
push 0x7f37cc
push esi
push 0
call fcn.00652800
add esp, 0xc
ud2
jne 0x60e4e4
cmp eax, esi
jne 0x60e51b
push dword [esp + 0x10]
push dword [esp + 0x10]
push ecx
call fcn.0064aeea
add esp, 0xc
test eax, eax
je 0x60e62e
mov eax, dword [esp + 0xb0]
test eax, eax
je 0x60e5f6
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp]
lea ecx, [esp + 0x48]
xor esi, esi
xor edi, edi
mov dword [esp + 0xc], eax
mov dword [ecx], 1
mov dword [ecx + 4], esi
mov dword [ecx + 8], esi
lea ecx, [esp + 0x20]
inc edi
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 4]
mov dword [ecx], ebx
mov dword [ecx + 4], edx
mov byte [ecx + 8], 0
lea ecx, [esp + 0x20]
call fcn.0060cccf
mov ebx, eax
cmp eax, 0x2f
je 0x60e586
cmp ebx, 0x5c
je 0x60e586
cmp ebx, 0x110000
je 0x60e5b1
mov byte [esp + 0x28], 1
jmp 0x60e5a7
cmp esi, dword [esp + 0x4c]
jne 0x60e59f
lea ecx, [esp + 0x48]
mov edx, esi
call fcn.004b743a
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x50]
mov byte [edi + esi], bl
inc esi
mov dword [esp + 0x50], esi
cmp ebx, 0x2f
je 0x60e562
cmp ebx, 0x5c
je 0x60e562
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
cmp esi, 2
jne 0x60e5cc
movzx edx, word [eax]
cmp edx, 0x2f2f
sete bl
jmp 0x60e5ce
xor ebx, ebx
test ecx, ecx
je 0x60e5e1
push eax
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0xc]
test bl, bl
jne 0x60e5f6
push 3
push eax
mov eax, dword [esp + 0x24]
call dword [eax + 0x14]
add esp, 8
lea edx, [esp + 0x20]
lea esi, [esp + 0x98]
mov ecx, 9
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x10]
push dword [esp + 0x1c]
push ebp
push dword [esp + 0x14]
call fcn.0060f3e8
add esp, 0x10
add esp, 0xd0
pop esi
pop edi
pop ebx
pop ebp
ret
lea esi, [esp + 0x98]
lea edx, [esp + 0x20]
mov ecx, 9
mov dword [esi + 8], 0
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x14]
push ebx
push dword [esp + 0x1c]
push dword [esp + 0xc]
push dword [esp + 0xc]
jmp 0x60e05c
mov eax, edx
mov ebx, dword [esp + 8]
lea edx, [esp + 0x20]
lea esi, [esp + 0x48]
mov ecx, 9
mov edi, edx
rep movsd dword es:[edi], dword [esi]
sub esp, 0x2c
mov ecx, dword [esp + 0x30]
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0xeb]
mov dword [esp + 4], esi
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp], ecx
mov ecx, dword [esp + 0x40]
call fcn.00610ae4
add esp, 0x2c
jmp 0x60e623
mov eax, ecx
jmp 0x60e661
mov ecx, ebp
push 0x7f37bc
jmp 0x60e257