Function at 0x6c377036
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov dword [ebp - 8], 1
cmp esi, ebx
jne 0x6c37705b
push 0xc0000bbd
jmp 0x6c37746a
mov eax, dword [esi + 8]
mov dword [ebp + 8], eax
mov eax, dword [esi + 0x94]
cmp eax, ebx
je 0x6c37709b
mov ecx, dword [esi + 0x98]
cmp ecx, ebx
je 0x6c377089
cmp eax, ecx
je 0x6c377089
push ecx
push 0x714
push 0x6c372738
call fcn.6c3750c2
mov eax, dword [esi + 0x94]
mov dword [esi + 0x98], eax
mov dword [esi + 0x94], ebx
mov eax, dword [esi + 0x24]
mov ecx, 0xc0000000
test ecx, eax
jne 0x6c37744f
mov eax, dword [esi + 0x28]
test dword [eax + 0xc], ecx
jne 0x6c377371
push dword [esi + 0xa8]
mov edi, dword [esi + 0x78]
push dword [eax + 8]
mov dword [ebp - 4], edi
call fcn.6c3779f9
cmp edi, ebx
jne 0x6c3771dd
cmp eax, ebx
jne 0x6c3770e2
mov eax, dword [esi + 0xa8]
jmp 0x6c3771ca
cmp dword [ebp + 8], ebx
je 0x6c3771c7
mov ecx, dword [eax + 0x28]
cmp ecx, ebx
je 0x6c3771c7
cmp ecx, 0xffffffff
je 0x6c3771c7
cmp eax, ebx
je 0x6c3771d7
cmp edi, ebx
jne 0x6c377116
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x68], ecx
mov dword [esi + 0x6c], ebx
jmp 0x6c377157
cmp edi, 1
jne 0x6c377131
mov edi, dword [esi + 0x68]
mov edx, dword [eax + 0xc]
xor ecx, ecx
xor ebx, ebx
or ecx, edi
or edx, ebx
mov dword [esi + 0x68], ecx
mov dword [esi + 0x6c], edx
jmp 0x6c377155
cmp edi, 2
jne 0x6c377141
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x70], ecx
mov dword [esi + 0x74], ebx
jmp 0x6c377157
mov edi, dword [esi + 0x70]
mov edx, dword [eax + 0xc]
xor ecx, ecx
xor ebx, ebx
or ecx, edi
or edx, ebx
mov dword [esi + 0x70], ecx
mov dword [esi + 0x74], edx
xor ebx, ebx
inc dword [ebp - 4]
push eax
call fcn.6c375141
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x6c3771b8
push eax
mov eax, dword [esi + 0x28]
push dword [eax + 8]
call fcn.6c3779f9
cmp eax, ebx
je 0x6c3771b8
mov ecx, dword [eax + 0x28]
cmp ecx, ebx
je 0x6c3771ba
cmp ecx, 0xffffffff
je 0x6c3771ba
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov ecx, edx
mov dword [ebp - 0xc], 1
cmp ecx, ebx
je 0x6c3771ba
mov ecx, dword [ecx + 0x10]
test byte [ecx + 0x24], 0x10
je 0x6c3771ad
mov edi, dword [ecx + 0xa8]
cmp edi, dword [eax + 0xc]
jne 0x6c3771ad
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], ebx
je 0x6c3771ba
cmp ecx, edx
je 0x6c3771ba
jmp 0x6c377196
xor eax, eax
mov edi, dword [ebp - 4]
cmp edi, 4
jae 0x6c3771d7
jmp 0x6c3770ff
mov eax, dword [eax + 0xc]
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x68], eax
mov dword [ebp - 4], 1
mov eax, dword [ebp - 4]
mov dword [esi + 0x78], eax
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 8]
mov edi, dword [eax + 0x18]
mov dword [ebp + 8], ebx
cmp dword [ebp - 4], ebx
jbe 0x6c37723b
cmp dword [ebp + 8], ebx
jne 0x6c3771f8
mov eax, dword [esi + 0x68]
jmp 0x6c377219
cmp dword [ebp + 8], 1
jne 0x6c377206
mov eax, dword [esi + 0x68]
mov edx, dword [esi + 0x6c]
jmp 0x6c377212
cmp dword [ebp + 8], 2
mov eax, dword [esi + 0x70]
je 0x6c377219
mov edx, dword [esi + 0x74]
mov cl, 0x20
call fcn.6c371cd2
push eax
mov eax, dword [esi + 0x28]
push dword [eax + 8]
call fcn.6c3779f9
cmp eax, ebx
jne 0x6c37722e
add edi, 0x40
jmp 0x6c377230
add edi, dword [eax]
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 4]
jb 0x6c3771ee
push edi
push 0x77d
push 0x6c372738
call fcn.6c375051
mov dword [esi + 0x94], eax
cmp eax, ebx
je 0x6c37736a
mov ecx, dword [esi + 0x28]
mov ecx, dword [ecx + 8]
push dword [ecx + 0x18]
push ecx
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [esi + 0x94]
mov ecx, dword [ebp - 4]
mov dword [eax + 0x14], edi
mov eax, dword [esi + 0x94]
mov dword [eax + 0x1c], ecx
mov eax, dword [esi + 0x94]
mov ecx, dword [esi + 0xa8]
mov dword [eax + 0x20], ecx
add esp, 0xc
lea eax, [ebp - 0x14]
push eax
mov eax, dword [esi + 0x94]
add eax, 0x24
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov eax, dword [esi + 0x94]
add eax, 0x24
push eax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 8]
mov edi, dword [eax + 0x18]
add edi, dword [esi + 0x94]
mov dword [ebp + 8], ebx
cmp dword [ebp - 4], ebx
jbe 0x6c377473
cmp dword [ebp + 8], ebx
jne 0x6c3772eb
mov eax, dword [esi + 0x68]
jmp 0x6c37730c
cmp dword [ebp + 8], 1
jne 0x6c3772f9
mov eax, dword [esi + 0x68]
mov edx, dword [esi + 0x6c]
jmp 0x6c377305
cmp dword [ebp + 8], 2
mov eax, dword [esi + 0x70]
je 0x6c37730c
mov edx, dword [esi + 0x74]
mov cl, 0x20
call fcn.6c371cd2
push eax
mov eax, dword [esi + 0x28]
push dword [eax + 8]
call fcn.6c3779f9
cmp eax, ebx
jne 0x6c377348
push 0x40
push ebx
push edi
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x40
pop eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov eax, dword [esi + 0xa8]
mov dword [edi + 0xc], eax
mov eax, dword [esi + 0xa8]
inc eax
mov dword [edi + 0x14], eax
jmp 0x6c377354
push dword [eax]
push eax
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
add edi, dword [edi]
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 4]
jae 0x6c377473
jmp 0x6c3772e1
push 0xe
jmp 0x6c37746a
push 0x58
pop edi
push edi
push 0x7b0
push 0x6c372738
call fcn.6c375051
mov dword [esi + 0x94], eax
cmp eax, ebx
je 0x6c377459
push 0x50
pop ecx
mov word [eax], cx
mov eax, dword [esi + 0x94]
push 0x45
pop ecx
mov word [eax + 2], cx
mov eax, dword [esi + 0x94]
push 0x52
pop ecx
mov word [eax + 4], cx
mov eax, dword [esi + 0x94]
push 0x46
pop ecx
mov word [eax + 6], cx
mov ecx, dword [esi + 0x94]
xor eax, eax
inc eax
mov dword [ecx + 8], eax
mov ecx, dword [esi + 0x94]
mov dword [ecx + 0xc], eax
mov ecx, dword [esi + 0x94]
mov dword [ecx + 0x10], eax
mov ecx, dword [esi + 0x94]
mov dword [ecx + 0x14], edi
mov ecx, dword [esi + 0x94]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x94]
mov ecx, dword [esi + 0xa8]
mov dword [eax + 0x20], ecx
mov eax, dword [esi + 0x94]
mov dword [eax + 0x50], ebx
mov eax, dword [esi + 0x94]
mov dword [eax + 0x54], ebx
mov eax, dword [esi + 0x94]
mov dword [eax + 0x18], edi
mov eax, dword [esi + 0x94]
mov dword [eax + 0x38], ebx
mov dword [eax + 0x3c], ebx
mov eax, dword [esi + 0x94]
mov dword [eax + 0x40], ebx
mov dword [eax + 0x44], ebx
mov eax, dword [esi + 0x94]
mov dword [eax + 0x48], ebx
mov dword [eax + 0x4c], ebx
mov eax, dword [esi + 0x94]
add eax, 0x24
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
jmp 0x6c377465
test eax, eax
jns 0x6c377459
push esi
call fcn.6c3768b0
mov eax, dword [esi + 0x98]
mov dword [esi + 0x94], eax
push 0xc0000bba
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [ebp - 8], ebx
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
leave
ret 4