Function at 0x101601a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x270
mov eax, dword [0x112e6e00]
xor eax, esp
mov dword [esp + 0x26c], eax
push ebx
push ebp
mov ebp, dword [esp + 0x280]
push esi
mov esi, dword [esp + 0x280]
push edi
push esi
mov dword [esp + 0x1c], esi
mov edi, dword [esi + 8]
mov dword [esp + 0x14], edi
mov ebx, dword [edi + 0x1c]
call fcn.10144200
add esp, 4
mov dword [esp + 0x24], eax
cmp dword [ebx], 0
mov eax, dword [edi + 4]
mov dword [esp + 0x14], eax
je 0x101604e6
cmp dword [ebx + 4], 0
je 0x101604e6
cmp dword [ebx + 0x30], 0
jne 0x10160228
push 0x1000
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x20], 0x1000
call dword [0x112e6e50]
add esp, 4
mov dword [ebx + 0x30], eax
test eax, eax
je 0x101607a7
mov ecx, dword [ebx + 0x2c]
test ecx, ecx
jne 0x10160257
push 0x1000
mov byte [ebx + 0x34], cl
mov dword [ebx + 0x24], ecx
mov dword [ebx + 0x1c], 0x1000
call dword [0x112e6e50]
mov ecx, eax
add esp, 4
mov dword [ebx + 0x2c], ecx
test ecx, ecx
je 0x101607a7
mov eax, dword [ebx + 0x1c]
mov edi, dword [ebx + 0x24]
sub eax, edi
cmp eax, 0x400
jae 0x101602a0
add edi, 0x400
push edi
push ecx
call dword [0x112e6e58]
add esp, 8
test eax, eax
jne 0x10160293
push 0x11175ac0
push ebp
call fcn.1014b4f0
add esp, 8
mov eax, 0x1b
jmp 0x101604eb
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x1c], edi
nop dword [eax]
cmp dword [esp + 0x14], 3
je 0x101602f0
lea eax, [esp + 0x1c]
push eax
mov eax, dword [ebx + 0x1c]
sub eax, dword [ebx + 0x24]
push eax
mov eax, dword [ebx + 0x2c]
add eax, dword [ebx + 0x24]
push eax
push ebp
push dword [esi + 4]
call fcn.1014ab30
mov ecx, dword [esp + 0x30]
add esp, 0x14
cmp ecx, 0x51
je 0x10160504
test ecx, ecx
jne 0x101604d8
test eax, eax
je 0x101604d8
add dword [ebx + 0x24], eax
mov byte [ebx + 0x34], cl
nop dword [eax]
push dword [ebx + 0x24]
call fcn.10137720
push dword [ebx + 0x24]
mov esi, eax
call dword [0x112e6e50]
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], esi
mov dword [esp + 0x5c], ecx
add esp, 8
mov dword [esp + 0x2c], 2
lea ecx, [esp + 0x58]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 2
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 2
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0x11
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], 3
test eax, eax
je 0x101607a7
push dword [ebx + 0x24]
push dword [ebx + 0x2c]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebx + 4]
add esp, 0xc
mov ecx, dword [ebx]
lea eax, [edx + 8]
push eax
lea eax, [ebx + 0x3c]
push eax
lea eax, [esp + 0x48]
push eax
push 0
push 0
lea eax, [esp + 0x60]
push eax
mov eax, dword [0x113281d4]
push 0
push 0
push dword [ebx + 0x38]
mov eax, dword [eax + 0x18]
push dword [ecx + 0x10]
push edx
push ecx
call eax
push dword [esp + 0x30]
mov esi, eax
mov dword [esp + 0x18], esi
call dword [0x112e6e54]
add esp, 4
mov dword [esp + 0x30], 0
cmp esi, 0x80090318
je 0x10160791
cmp esi, 0x90320
je 0x101606e5
cmp esi, 0x90312
je 0x10160431
test esi, esi
jne 0x101606f0
xor edi, edi
lea esi, [esp + 0x58]
cmp dword [esi + 4], 2
jne 0x10160471
mov eax, dword [esi]
test eax, eax
je 0x10160471
lea ecx, [esp + 0x1c]
push ecx
push eax
push dword [esi + 8]
mov eax, dword [esp + 0x24]
push ebp
push dword [eax + 4]
call fcn.1014ab60
add esp, 0x14
mov ecx, eax
cmp dword [esp + 0x1c], 0
jne 0x10160519
cmp dword [esi], ecx
jne 0x10160519
mov eax, dword [esi + 8]
test eax, eax
je 0x10160483
push eax
mov eax, dword [0x113281d4]
mov eax, dword [eax + 0x40]
call eax
inc edi
add esi, 0xc
cmp edi, 3
jl 0x10160437
cmp dword [esp + 0x38], 5
jne 0x10160531
mov edx, dword [esp + 0x34]
test edx, edx
je 0x10160531
mov ecx, dword [ebx + 0x24]
cmp ecx, edx
jbe 0x10160538
mov eax, dword [ebx + 0x2c]
sub ecx, edx
push edx
add ecx, eax
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [esp + 0x40]
add esp, 0xc
mov dword [ebx + 0x24], eax
mov eax, dword [esp + 0x14]
cmp eax, 0x90312
je 0x101602f0
jmp 0x10160547
push 0x11175ae8
push ebp
call fcn.1014b4f0
add esp, 8
mov eax, 0x23
mov ecx, dword [esp + 0x27c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10132a53
add esp, 0x270
ret
mov eax, dword [esp + 0x10]
cmp dword [eax + 4], 3
je 0x10160515
mov dword [eax + 4], 2
xor eax, eax
jmp 0x101604eb
lea eax, [edi + edi*2]
push dword [esp + eax*4 + 0x58]
push ecx
push 0x11175b30
push ebp
call fcn.1014b4f0
add esp, 0x10
jmp 0x101604e6
mov dword [ebx + 0x24], 0
mov eax, dword [esp + 0x14]
cmp eax, 0x90312
je 0x10160795
test eax, eax
jne 0x10160556
mov eax, dword [esp + 0x10]
mov dword [eax + 4], 4
mov esi, dword [esp + 0x18]
push esi
call fcn.10144220
add esp, 4
test al, al
je 0x1016056f
mov eax, dword [ebp + 0x550]
jmp 0x10160575
mov eax, dword [ebp + 0x54c]
mov dword [esp + 0x14], eax
test eax, eax
je 0x101606a9
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 0x53
mov edi, 0x5a
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x18], 0
push dword [eax + 4]
mov eax, dword [0x113281d4]
mov eax, dword [eax + 0x2c]
call eax
test eax, eax
jne 0x10160659
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x10160659
test byte [ecx], 1
je 0x1016067f
mov eax, dword [ecx + 8]
mov dword [esp + 0x20], eax
test eax, eax
je 0x1016067f
mov esi, dword [ecx + 4]
lea eax, [esp + 0x7c]
push 0xf0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esp + 0x2c]
add eax, esi
push eax
lea eax, [esp + 0x8c]
push esi
push eax
call fcn.10184cd0
add esp, 0x18
test eax, eax
jne 0x1016063f
mov eax, dword [esp + 0x10c]
test eax, eax
je 0x10160645
mov ecx, dword [esp + 0x114]
cmp ecx, eax
jbe 0x10160645
sub ecx, eax
push ecx
push eax
push dword [esp + 0x1c]
push ebp
call fcn.10143ac0
mov edi, eax
add esp, 0x10
test edi, edi
je 0x1016063f
push 0x11175bb8
push ebp
call fcn.1014b4f0
add esp, 8
mov esi, dword [esp + 0x18]
jmp 0x1016067b
push 0x111761c4
push ebp
call fcn.1014b4f0
mov esi, dword [esp + 0x20]
add esp, 8
jmp 0x1016067b
push 0x100
lea ecx, [esp + 0x180]
push ecx
push eax
call fcn.10133260
push eax
push 0x1117618c
push ebp
call fcn.1014b4f0
add esp, 0x18
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x1016068a
push ecx
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov dword [esp + 0x1c], edi
test edi, edi
je 0x101606a9
push 0x11175bb8
push ebp
call fcn.1014b4f0
mov eax, dword [esp + 0x24]
add esp, 8
jmp 0x101604eb
mov eax, dword [esp + 0x24]
cmp byte [eax + 0x39], 0
je 0x101606cc
cmp byte [ebx + 0x48], 0
je 0x10160515
push ebp
push esi
call fcn.10182800
add esp, 8
jmp 0x101604eb
cmp byte [eax + 0x3a], 0
je 0x10160515
push ebp
push esi
call fcn.10182bd0
add esp, 8
jmp 0x101604eb
mov eax, dword [ebx + 0x38]
test al, al
jns 0x10160777
push 0x100
lea eax, [esp + 0x80]
push eax
push esi
call fcn.10133260
push eax
cmp esi, 0x80090300
je 0x1016075f
cmp esi, 0x80090322
je 0x10160747
cmp esi, 0x80090325
je 0x1016072f
push 0x11175b74
push ebp
call fcn.1014b4f0
add esp, 0x18
jmp 0x101604e6
push 0x11175ba8
push ebp
call fcn.1014b4f0
add esp, 0x18
mov eax, 0x3c
jmp 0x101604eb
push 0x11175a44
push ebp
call fcn.1014b4f0
add esp, 0x18
mov eax, 0x3c
jmp 0x101604eb
push 0x11175b74
push ebp
call fcn.1014b4f0
add esp, 0x18
mov eax, 0x1b
jmp 0x101604eb
or eax, 0x80
mov dword [ebx + 0x38], eax
mov eax, dword [esp + 0x10]
mov dword [eax + 4], 3
xor eax, eax
jmp 0x101604eb
mov byte [ebx + 0x34], 1
mov eax, dword [esp + 0x10]
mov dword [eax + 4], 2
xor eax, eax
jmp 0x101604eb
push 0x11175570
push ebp
call fcn.1014b4f0
add esp, 8
mov eax, 0x1b
jmp 0x101604eb