Function at 0x561bb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
cmp dword [ecx], 2
je 0x561d48
mov eax, dword [ecx + 0x70]
mov esi, ecx
test eax, eax
je 0x561bdf
cmp dword [esi + 0x74], 0
je 0x561bdf
push eax
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
movzx eax, byte [esi + 0x40]
cmp eax, 6
je 0x561c3e
cmp eax, 3
jb 0x561c3e
je 0x561c28
cmp eax, 4
jne 0x561c88
mov ebx, dword [esi + 0x4c]
mov eax, dword [esi + 0x48]
test ebx, ebx
mov dword [ebp - 0x10], eax
je 0x561c1d
mov edi, dword [ebp - 0x10]
nop dword [eax + eax]
mov ecx, edi
call fcn.004e63d0
add edi, 0x18
dec ebx
jne 0x561c10
cmp dword [esi + 0x44], 0
je 0x561c3e
push dword [ebp - 0x10]
jmp 0x561c31
cmp dword [esi + 0x44], 0
je 0x561c3e
push dword [esi + 0x48]
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
movzx eax, byte [esi + 0x58]
cmp eax, 6
je 0x561cd3
cmp eax, 3
jb 0x561cd3
je 0x561cbd
cmp eax, 4
jne 0x561d50
mov ebx, dword [esi + 0x64]
mov eax, dword [esi + 0x60]
test ebx, ebx
mov dword [ebp - 0x10], eax
je 0x561c7d
mov edi, dword [ebp - 0x10]
nop
mov ecx, edi
call fcn.004e63d0
add edi, 0x18
dec ebx
jne 0x561c70
cmp dword [esi + 0x5c], 0
je 0x561cd3
push dword [ebp - 0x10]
jmp 0x561cc6
mov ecx, dword [esi + 0x44]
test ecx, ecx
je 0x561d7e
mov edx, dword [esi + 0x48]
mov eax, dword [esi + 0x4c]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], ecx
mov ecx, 1
mov dword [ebp - 0x18], edx
jmp 0x561d82
cmp dword [esi + 0x5c], 0
je 0x561cd3
push dword [esi + 0x60]
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esi + 0x78]
cmp eax, 0x80000000
je 0x561cf1
test eax, eax
je 0x561cf1
push dword [esi + 0x7c]
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
cmp byte [esi + 0x3c], 2
je 0x561d48
mov eax, dword [esi + 0x28]
test eax, eax
je 0x561d12
cmp dword [esi + 0x2c], 0
je 0x561d12
push eax
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x561d2d
cmp dword [esi + 0x20], 0
je 0x561d2d
push eax
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esi + 8]
test eax, eax
je 0x561d48
cmp dword [esi + 0xc], 0
je 0x561d48
push eax
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [esi + 0x5c]
test ecx, ecx
je 0x561dbc
mov edx, dword [esi + 0x60]
mov eax, dword [esi + 0x64]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], ecx
mov ecx, 1
mov dword [ebp - 0x18], edx
jmp 0x561dc0
xor ecx, ecx
xor eax, eax
lea edi, [ebp - 0x40]
lea ebx, [ebp - 0x34]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], eax
nop word cs:[eax + eax]
nop dword [eax + eax]
mov ecx, edi
mov edx, ebx
call fcn.0052f1f0
cmp dword [ebp - 0x40], 0
je 0x561c3e
mov ecx, edi
call fcn.0052f3a0
jmp 0x561da0
xor ecx, ecx
xor eax, eax
lea edi, [ebp - 0x40]
lea ebx, [ebp - 0x34]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], eax
nop
mov ecx, edi
mov edx, ebx
call fcn.0052f1f0
cmp dword [ebp - 0x40], 0
je 0x561cd3
mov ecx, edi
call fcn.0052f3a0
jmp 0x561dd0