Function at 0x6b573510
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x64
mov ebx, edx
mov edi, ecx
mov dword [esp], 0
lea eax, [esp + 0x14]
push 0x50
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x6b573559
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x6b573761
mov ecx, dword [ecx + 0x60]
test ecx, ecx
je 0x6b573552
push eax
call ecx
add esp, 4
mov dword [edi + 0x1c], 0
mov eax, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
mov esi, dword [edi + 0x14]
test esi, esi
je 0x6b5736f3
mov dword [esp + 8], ebx
push esi
call fcn.6b57a7b0
add esp, 4
test ebp, ebp
jne 0x6b573586
mov ebp, dword [esi + 8]
mov ebx, dword [esp + 0x78]
call fcn.6b561e80
mov eax, dword [esi + 0x10]
test eax, eax
je 0x6b573643
mov dword [esp], eax
mov eax, esp
push dword [esi + 8]
push eax
push dword [esi + 4]
push dword [esi + 0x48]
call fcn.6b576090
add esp, 0x10
test eax, eax
je 0x6b57371d
mov ebx, eax
push dword [esp]
call fcn.6b572a30
add esp, 4
test eax, eax
je 0x6b57371d
mov dword [esp + 0xc], ebx
push dword [esi + 0x10]
call fcn.6b572a40
add esp, 4
mov eax, dword [esp]
mov dword [esi + 0x10], eax
mov eax, dword [eax + 0x50]
test eax, eax
je 0x6b5735f5
push 0xc
call eax
add esp, 4
test eax, eax
jne 0x6b5735f8
mov eax, dword [esi + 0xc]
push dword [esi + 8]
push eax
push dword [esi + 4]
call fcn.6b57d100
add esp, 0xc
mov ebx, eax
test eax, eax
je 0x6b573636
push dword [esi + 0x10]
call fcn.6b572ad0
add esp, 4
mov dword [esp + 4], ebx
mov ebx, eax
push dword [esp + 4]
call fcn.6b57d0f0
add esp, 4
cmp ebx, eax
mov ebx, dword [esp + 4]
je 0x6b573823
push ebx
call fcn.6b57d080
add esp, 4
mov ebx, dword [esp + 0x78]
call fcn.6b561eb0
test ebx, ebx
jne 0x6b573662
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x6b573662
push eax
push dword [esi + 4]
call fcn.6b5753f0
add esp, 8
mov ebx, eax
mov eax, dword [edi + 0x14]
mov ecx, dword [eax + 0x40]
test ecx, ecx
je 0x6b573783
test ebx, ebx
jne 0x6b5736bd
mov edx, dword [ecx + 4]
and edx, 4
jne 0x6b5736bd
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x90]
call fcn.6b577fa0
add esp, 8
test eax, eax
jle 0x6b5737cb
push dword [esp + 0x10]
call fcn.6b596cd0
add esp, 4
push eax
call fcn.6b575380
add esp, 4
test eax, eax
je 0x6b5737cb
mov ebx, eax
mov eax, dword [edi + 0x14]
mov ecx, dword [eax + 0x40]
cmp dword [esp + 0x90], 0
je 0x6b5737ff
mov edx, dword [ecx + 0x44]
test edx, edx
je 0x6b5738dc
push edi
push eax
call edx
add esp, 8
test eax, eax
jle 0x6b5737f5
mov eax, dword [edi + 0x14]
mov dword [eax], 0x100
jmp 0x6b57396f
test eax, eax
je 0x6b5737a5
push eax
push dword [esp + 0x90]
call fcn.6b57a9f0
add esp, 8
mov esi, eax
mov dword [edi + 0x14], eax
test eax, eax
jne 0x6b573572
jmp 0x6b5737f5
call fcn.6b561fe0
mov ebx, 0x86
call fcn.6b5620e0
push str.do_sigver_init
push 0
push 0x6b772510
call fcn.6b5621e0
add esp, 0xc
push 0
push ebx
push 6
call fcn.6b562290
add esp, 0xc
push esi
call fcn.6b57a7b0
add esp, 4
mov dword [esi], 0
jmp 0x6b5737f5
call fcn.6b5620e0
push str.do_sigver_init
push 0
push 0x6b772510
call fcn.6b5621e0
add esp, 0xc
push 0
push 0x86
jmp 0x6b5737eb
call fcn.6b5620e0
push str.do_sigver_init
push 0
push 0x6b772510
call fcn.6b5621e0
add esp, 0xc
push 0
push 0x96
jmp 0x6b5737eb
push ebp
push dword [esp + 0x90]
push dword [esp + 0x88]
call fcn.6b57a790
add esp, 0xc
mov esi, eax
mov dword [edi + 0x14], eax
test eax, eax
jne 0x6b573572
jmp 0x6b5737f5
call fcn.6b5620e0
push str.do_sigver_init
push 0
push 0x6b772510
call fcn.6b5621e0
add esp, 0xc
push 0
push 0x9e
push 6
call fcn.6b562290
add esp, 0xc
xor eax, eax
add esp, 0x64
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [ecx + 0x3c]
test edx, edx
je 0x6b5738f1
push edi
push eax
call edx
add esp, 8
test eax, eax
jle 0x6b5737f5
mov eax, dword [edi + 0x14]
mov dword [eax], pe_nt_image_headers32
jmp 0x6b57396f
call fcn.6b561eb0
mov eax, dword [esp + 8]
test eax, eax
je 0x6b573832
mov dword [eax], esi
mov dword [esi + 0x14], ebx
xor eax, eax
cmp dword [esp + 0x90], 0
setne al
shl eax, 7
sub eax, 0xffffff80
mov dword [esi], eax
mov eax, ebx
mov ebx, dword [ebx + 0x18]
push dword [eax + 0xc]
call fcn.6b58d400
add esp, 4
push ebp
push eax
call ebx
add esp, 8
mov dword [esi + 0x18], eax
mov ebx, 0x86
test eax, eax
je 0x6b573727
mov eax, dword [esp + 0x78]
test eax, eax
je 0x6b573918
mov dword [edi], eax
mov edx, dword [esp + 0x7c]
test edx, edx
jne 0x6b573a43
push dword [esp + 0x78]
call fcn.6b56ebd0
add esp, 4
mov edx, eax
test eax, eax
je 0x6b573a43
push 0x6b772576
mov edi, edx
push edx
call sub.msvcrt.dll_strcmp
add esp, 8
test eax, eax
je 0x6b573ab2
mov edx, edi
mov eax, dword [esp + 0x94]
cmp dword [esp + 0x90], 0
jne 0x6b573a58
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 0x34]
jmp 0x6b573a5f
cmp dword [ecx + 0x70], 0
je 0x6b573906
mov dword [eax], 0x20
mov dword [edi + 0x18], 0x6b574200
jmp 0x6b57396f
cmp dword [ecx + 0x6c], 0
je 0x6b57395e
mov dword [eax], 0x10
mov dword [edi + 0x18], 0x6b574200
jmp 0x6b57396f
push eax
call fcn.6b57db30
add esp, 4
test eax, eax
jg 0x6b57396f
jmp 0x6b5737f5
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x6b5739ea
mov dword [esp + 8], eax
push 1
push edi
call fcn.6b563dd0
add esp, 8
call fcn.6b561e80
push ebp
mov ebp, dword [esp + 0xc]
push ebp
push dword [esi + 4]
call fcn.6b564fe0
add esp, 0xc
mov dword [edi + 0x20], eax
test eax, eax
je 0x6b573a26
mov dword [edi], eax
mov dword [edi + 4], eax
jmp 0x6b573a3c
push eax
call fcn.6b57d6f0
add esp, 4
test eax, eax
jle 0x6b5737f5
push ebx
push dword [edi + 0x14]
call fcn.6b57b6f0
add esp, 8
mov ecx, eax
xor eax, eax
test ecx, ecx
jle 0x6b5737f7
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x6b573994
mov eax, dword [edi + 0x14]
mov dword [ecx], eax
mov eax, dword [edi + 0x14]
mov ecx, dword [eax + 0x40]
mov eax, 1
test byte [ecx + 4], 4
jne 0x6b5737f7
push dword [esp + 0x88]
push ebx
push edi
call fcn.6b564600
add esp, 0xc
test eax, eax
mov eax, 0
je 0x6b5737f7
mov eax, dword [edi + 0x14]
and dword [eax + 0x54], 0xfffffffe
mov eax, dword [edi + 0x14]
mov ecx, dword [eax + 0x40]
cmp dword [ecx + 0x80], 0
je 0x6b573a9b
or byte [eax + 0x54], 1
jmp 0x6b573a9b
push 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
push dword [esp + 0xc]
call fcn.6b572470
add esp, 0x10
xor edx, edx
test eax, eax
jle 0x6b573a43
mov eax, 0x45444e55
xor eax, dword [esp + 0x14]
movzx ecx, word [esp + 0x18]
xor ecx, 0x46
or ecx, eax
lea eax, [esp + 0x14]
jne 0x6b573924
jmp 0x6b573a43
push ebp
call fcn.6b575380
add esp, 4
mov dword [edi + 4], eax
mov dword [edi], eax
test eax, eax
je 0x6b573aca
call fcn.6b561eb0
mov edx, ebp
mov eax, dword [esp + 0x94]
cmp dword [esp + 0x90], 0
je 0x6b5738d0
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
je 0x6b573727
push eax
push dword [esp + 0x10]
push edx
push dword [esi + 0x18]
mov edi, edx
call ecx
add esp, 0x10
mov ecx, eax
test edi, edi
mov eax, dword [esp + 0x78]
jne 0x6b573a97
test ecx, ecx
jg 0x6b573a97
test eax, eax
jne 0x6b57374d
mov ebx, 0x9e
jmp 0x6b573727
test ecx, ecx
jle 0x6b573aa6
push esi
call fcn.6b57c8c0
add esp, 4
mov ecx, eax
xor eax, eax
test ecx, ecx
setg al
jmp 0x6b5737f7
xor edx, edx
mov eax, dword [esp + 0x94]
cmp dword [esp + 0x90], 0
jne 0x6b573a58
jmp 0x6b5738d0
call fcn.6b561fe0
jmp 0x6b573727