Function at 0x75dbb310
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xfc
mov eax, dword [0x75e50140]
xor eax, esp
mov dword [esp + 0xf8], eax
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0x4c]
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 0x50]
push edi
mov dword [esp + 0x68], eax
lea edi, [esp + 0xb0]
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x94], eax
mov eax, dword [ebp + 0x1c]
push 6
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x34]
pop ecx
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x54]
push 0x190
mov dword [esp + 0x20], eax
xor eax, eax
push edx
rep stosd dword es:[edi], eax
push esi
mov dword [esp + 0x80], ebx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x78], edx
mov byte [esp + 0x1e], dl
mov byte [esp + 0x1f], dl
mov byte [esp + 0x1d], dl
mov dword [esp + 0x64], edx
mov dword [esp + 0x68], edx
mov dword [esp + 0x7c], edx
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], edx
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], edx
call fcn.75dc7439
mov ecx, dword [esp + 0x28]
add esp, 0xc
xor edi, edi
push 0x40
push edi
push ecx
call fcn.75dc7439
add esp, 0xc
mov dword [esi + 0x6c], edi
push 0x20
pop eax
push edi
push eax
mov dword [esp + 0xd4], eax
lea eax, [esp + 0xd4]
push eax
push edi
push dword [esp + 0x78]
call dword [0x75e21eb4]
test eax, eax
js 0x75dbb41a
test byte [esp + 0xe8], 1
jne 0x75dcaad8
mov ecx, dword [esp + 0x20]
test ecx, ecx
jne 0x75dcaae2
lea ecx, [esp + 0x60]
call fcn.75dbb64f
mov edi, eax
test edi, edi
js 0x75dbb560
mov eax, dword [ebp + 0x48]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], eax
add ecx, 0x30
mov eax, dword [ebp + 0x44]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x40]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x38], ecx
cmp dword [ebp + 0x30], 0
jne 0x75dbb5c5
cmp byte [esp + 0x13], 0
jne 0x75dbb49e
cmp dword [esp + 0x60], 0
jne 0x75dcacf4
cmp dword [ebp + 0x20], 0
jne 0x75dcacf4
mov ecx, eax
call fcn.75dbb5da
test eax, eax
jne 0x75dcacf4
cmp byte [0x7ffe02ec], al
jne 0x75dcacf4
mov eax, dword [ebp + 0x28]
test eax, eax
jne 0x75dcaeec
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], ecx
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x4c]
mov dword [esi + 0x40], eax
mov eax, dword [esp + 0x50]
mov dword [esi + 0x44], eax
mov eax, dword [esp + 0x54]
mov dword [esi + 0x48], eax
mov eax, dword [esi]
or eax, 0x40
mov dword [esi + 0x10], ecx
cmp byte [esp + 0x12], 0
mov dword [esi], eax
jne 0x75dcaefe
cmp dword [esp + 0x20], 0
jne 0x75dcaf0a
lea ecx, [esp + 0x8c]
call fcn.75dbb193
mov edi, eax
test edi, edi
js 0x75dbb560
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 0x8c]
cmp dword [ebp + 0x20], 0
mov dword [esi + 0x60], eax
mov dword [esi + 0x64], ecx
jne 0x75dcaf25
mov eax, dword [esi]
test al, 1
jne 0x75dcaf30
test byte [ebp + 0x24], 1
jne 0x75dcaf3d
test al, 0x41
jne 0x75dbb590
cmp dword [ebp + 0x20], 0
jne 0x75dcaf47
test byte [esi], 0x41
je 0x75dcaf53
mov eax, dword [ebx]
mov dword [esi + 4], eax
lea eax, [esp + 0x58]
push eax
call dword [0x75e21e9c]
mov eax, dword [esp + 0x70]
test eax, eax
jne 0x75dcaf9f
mov ecx, dword [esp + reloc.ntdll.dll_NtClose]
mov eax, edi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.75dbdd75
mov esp, ebp
pop ebp
ret 0x50
push str.___________________________________________________________
lea eax, [esi + 0x78]
push eax
call dword [0x75e21ed4]
movzx eax, word [esi + 0x7a]
push eax
mov eax, dword fs:[0x30]
push 0
push dword [eax + 0x18]
call dword [0x75e221e0]
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 0x34], eax
test eax, eax
je 0x75dbb5cd
mov dword [esi + 0x7c], eax
jmp 0x75dbb548
or dword [esi], 0x20
jmp 0x75dbb548
mov edi, 0xc0000017
jmp 0x75dbb560
mov byte [esp + 0x13], 1
jmp 0x75dbb41a
lea eax, [esp + 0x3c]
mov ebx, ecx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x44]
mov dword [esp + 0x28], eax
lea edx, [ebx + 2]
mov ax, word [ebx]
add ebx, 2
cmp ax, di
jne 0x75dcaaf7
sub ebx, edx
sar ebx, 1
cmp word [ecx + ebx*2 - 2], 0x5c
jne 0x75dcab18
mov edi, 0xc000000d
jmp 0x75dbb560
mov ecx, dword [esp + 0x38]
lea edx, [esp + 0x11]
or dword [esi], reloc.ntdll.dll_NtClose
call fcn.75dd7e59
mov edi, eax
test edi, edi
js 0x75dbb560
cmp byte [esp + 0x11], 0
je 0x75dcab42
or dword [esi], reloc.ntdll.dll_NtClose
xor eax, eax
push eax
push eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x60]
push eax
push dword [esp + 0x2c]
call dword [0x75e21d3c]
mov edi, eax
test edi, edi
js 0x75dbb560
mov ecx, dword [esp + 0x1c]
xor eax, eax
and dword [esp + 0x40], 0
add ecx, 0x30
and dword [esp + 0x48], 0
mov word [esp + 0x14], ax
lea eax, [ebx*2 + 0x1a]
mov word [esp + 0x16], ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x3c], eax
xor eax, eax
mov word [esp + 0x14], ax
mov eax, dword [esp + 0x58]
add eax, 0x1a
mov dword [esp + 0x38], ecx
mov word [esp + 0x16], ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x44], eax
lea eax, [esp + 0x24]
push eax
push 2
pop edx
call fcn.75dd79fc
mov edi, eax
test edi, edi
js 0x75dbb560
mov ecx, dword [str.Application]
lea eax, [ebx + ebx]
mov word [esp + 0x7e], ax
mov word [esp + 0x7c], ax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x80], eax
mov eax, dword [0x75e20bdc]
mov dword [esp + 0x84], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x88], ecx
lea ecx, [esp + 0x3c]
push eax
call fcn.75dd7f65
mov edi, eax
test edi, edi
js 0x75dbb560
movzx ecx, word [esp + 0x3c]
xor edx, edx
mov eax, dword [esp + 0x40]
shr ecx, 1
mov word [eax + ecx*2], dx
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x80], ecx
lea ecx, [esp + 0x44]
push eax
call fcn.75dd7f65
mov edi, eax
test edi, edi
js 0x75dbb560
movzx ecx, word [esp + 0x44]
xor edx, edx
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x1c]
shr ecx, 1
add ebx, 0x38
push 0x21
push 5
mov word [eax + ecx*2], dx
lea eax, [esp + 0x44]
mov dword [esp + 0x34], eax
xor ecx, ecx
lea eax, [esp + 0x4c]
mov dword [esp + 0xf4], 0x18
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x60]
mov dword [esp + 0xfc], eax
lea eax, [esp + 0xa8]
push eax
lea eax, [esp + 0xf8]
mov dword [esp + 0xfc], ecx
push eax
push 0x120089
push ebx
mov dword [esp + reloc.ntdll.dll_NtClose], 0x40
mov dword [esp + reloc.ntdll.dll_NtClose], ecx
mov dword [esp + reloc.ntdll.dll_NtClose], ecx
call dword [0x75e21e6c]
mov edi, eax
test edi, edi
js 0x75dbb560
cmp dword [ebp + 0x20], 0
mov eax, dword [ebx]
mov ebx, dword [esp + 0x74]
sete byte [esp + 0x12]
mov dword [esp + 0x30], eax
jmp 0x75dbb45d
mov edx, dword [esp + 0x2c]
xor eax, eax
mov word [esp + 0x14], ax
xor edi, edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x64], edi
movzx ecx, word [edx]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x34]
and dword [esp + 0x9c], 0
lea eax, [ecx + 0x14]
and dword [esp + 0x28], 0
mov word [esp + 0x16], ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x74], eax
xor eax, eax
mov word [esp + 0x14], ax
lea eax, [ecx + 0x10]
mov word [esp + 0x16], ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x60], eax
xor eax, eax
mov word [esp + 0x14], ax
lea eax, [ecx + 2]
movzx ecx, word [edi]
mov word [esp + 0x16], ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x14], eax
xor eax, eax
mov word [esp + 0x24], ax
lea eax, [ecx + 0x14]
mov word [esp + 0x26], ax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x98], eax
xor eax, eax
mov word [esp + 0x24], ax
lea eax, [ecx + 0x10]
mov word [esp + 0x26], ax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x74]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0x98]
mov dword [esp + 0xa4], eax
lea eax, [esp + 0x60]
mov dword [esp + 0xa8], eax
lea eax, [esp + 0x24]
mov dword [esp + 0xac], eax
lea eax, [esp + 0x14]
mov dword [esp + 0xec], eax
lea eax, [esp + 0x74]
mov dword [esp + 0xf0], eax
lea eax, [esp + 0x60]
mov dword [esp + 0xf4], eax
lea eax, [esp + 0x98]
mov dword [esp + 0xf8], eax
lea eax, [esp + 0x24]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x7c], edx
mov dword [esp + 0x80], edi
mov ecx, dword [eax]
test ecx, ecx
je 0x75dcae18
and dword [eax], 0
mov dword [esp + 0x70], ecx
lea ecx, [esp + 0xec]
push ecx
push 5
pop edx
mov ecx, eax
call fcn.75dd79fc
mov edi, eax
test edi, edi
js 0x75dbb560
mov eax, dword [esp + 0x68]
mov edx, dword [ebp + 0x28]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0xb8], eax
test edx, edx
je 0x75dcae87
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xf4], edx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0xec], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf8], eax
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x14]
push esi
push dword [ebp + 0x3c]
neg edx
push dword [ebp + 0x38]
sbb edx, edx
push eax
lea eax, [ecx + 0x18]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x98]
push eax
push ecx
lea eax, [esp + 0xc4]
push eax
mov eax, dword [esp + 0x7c]
lea ecx, reloc.ntdll.dll_NtClose
push eax
mov eax, dword [esp + 0x7c]
and ecx, edx
push eax
mov eax, dword [esp + 0x7c]
push eax
call fcn.75dd7c1d
mov edi, eax
test edi, edi
jns 0x75dbb4f5
jmp 0x75dbb560
and dword [esi + 0x24], 0
mov dword [esi + 0x20], eax
mov eax, dword [ebp + 0x2c]
mov dword [esi + 0x28], eax
jmp 0x75dbb4a9
or eax, 0x200
mov dword [esi], eax
jmp 0x75dbb4f5
cmp byte [esp + 0x11], 0
jne 0x75dbb500
mov eax, dword [0x75e20300]
mov ecx, dword [0x75e20304]
jmp 0x75dbb520
or dword [esi], 0x80
jmp 0x75dbb530
or dword [ebx], reloc.ntdll.dll_NtClose
mov eax, dword [esi]
jmp 0x75dbb53a
or eax, 0x10
mov dword [esi], eax
jmp 0x75dbb544
or dword [ebx], reloc.ntdll.dll_NtClose
mov eax, dword [esp + 0x20]
jmp 0x75dcaf5f
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x75dbb55b
cmp byte [esp + 0x12], 0
jne 0x75dbb55b
xor edx, edx
lea ecx, [esp + 0x6c]
test eax, eax
push ecx
mov ecx, dword [esp + 0x38]
setne dl
call fcn.75e0d036
mov edi, eax
test edi, edi
js 0x75dbb560
cmp dword [esp + 0x6c], 0
je 0x75dbb55b
or dword [ebx], reloc.ntdll.dll_NtClose
jmp 0x75dbb55b
push eax
mov eax, dword fs:[0x30]
push 0
push dword [eax + 0x18]
call dword [0x75e221d0]
jmp 0x75dbb577