Function at 0x6568cc44
Capabilities:
Accept command line arguments
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, 3
sub esp, 0x6c
call fcn.6568fe24
imul eax, dword [0x656a8ea8], 0xf4e84d7
mov dword [0x656a9024], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov eax, dword [0x656a9024]
add eax, 0x546522c6
mov dword [0x656a8ea8], eax
and eax, 0xbe8ecd08
mov dword [0x656a9024], eax
call fcn.65693274
mov eax, str.The_buffer_lengths_do_not_match.
mov cl, byte [eax]
lea edx, [ecx - 0x30]
cmp dl, 9
ja 0x6568cc9c
inc eax
jmp 0x6568cc8f
mov eax, dword [0x656a8ea8]
mov edx, eax
xor edx, 0x9a4328b1
mov dword [0x656a9024], edx
mov dword [esp], eax
call fcn.65690654
dec ebx
jne 0x6568cc8a
mov eax, dword [0x656a8ea8]
mov esi, dword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
mov ebx, 3
mov edx, eax
and eax, 0x8023cda2
or edx, 0xd40f05fb
or eax, 0x800305a2
mov dword [0x656a8ea8], edx
mov dword [0x656a9024], eax
call esi
xor eax, 0x37bcfaeb
mov dword [0x656a9024], eax
cmp byte [str.The_buffer_lengths_do_not_match.], 0
mov eax, dword [0x656a8ea8]
je 0x6568cd0b
or dword [0x656a9024], 0x7976e677
sub eax, 0x3df1d664
mov dword [0x656a8ea8], eax
call esi
sub dword [0x656a9024], 0x426f9302
sub eax, 0x5ecce76a
mov dword [0x656a8ea8], eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
add eax, 0x24d287d0
mov dword [0x656a9024], eax
call fcn.65691554
xor eax, eax
cmp word [eax + str.AVRF:_AVrfDllUnloadNotification_called_for_a_provider___p_], 0
je 0x6568cd6c
add eax, 2
cmp eax, 0x14fe
jne 0x6568cd42
mov dword [esp], str.AVRF:_AVrfDllUnloadNotification_called_for_a_provider___p_
call fcn.65693460
sub dword [0x656a9024], 0x4028332
imul eax, dword [0x656a9024], 0x51cdf474
mov dword [0x656a9024], eax
add eax, 0x491de70f
mov dword [0x656a8ea8], eax
dec ebx
jne 0x6568ccf3
or eax, 0xa1844cc9
mov dword [ebp - 0x4c], 5
mov dword [0x656a8ea8], eax
mov edx, str.The_buffer_lengths_do_not_match.
mov ecx, 0x44a
movzx eax, byte [edx]
inc edx
test al, al
je 0x6568cdf9
add ecx, eax
cmp ecx, 0xc54
jbe 0x6568cda7
mov dword [esp + 0xc], str.originCallerModule
mov eax, dword [0x656a9024]
mov dword [esp + 4], str.AVRF:_AVrfDllUnloadNotification_called_for_a_provider___p_
mov dword [esp + 8], eax
mov dword [esp], str.originCallerModule
call fcn.65693abc
imul eax, dword [0x656a8ea8], 0x52ebd7cd
mov dword [0x656a9024], eax
mov dword [esp], str.AVRF:_AVrfDllUnloadNotification_called_for_a_provider___p_
call fcn.65693460
mov eax, dword [0x656a8ea8]
or eax, 0xb3d9c487
sub eax, 0x1dee9d18
mov dword [0x656a9024], eax
call fcn.65692ca4
dec dword [ebp - 0x4c]
jne 0x6568cd9d
imul edx, dword [0x656a8ea8], 0xb5f834bc
xor eax, eax
mov dword [0x656a8ea8], edx
cmp byte [eax + str.Critical_error_detected__lx], 0
je 0x6568ce46
inc eax
cmp eax, 0x1e8d
jne 0x6568ce29
sub edx, 0x1251494c
mov dword [0x656a8ea8], edx
mov eax, dword [0x656a8ea8]
xor esi, esi
lea edi, [ebp - 0x3a]
add eax, 0x4aa119f7
mov dword [0x656a9024], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
and eax, 0x2f2c7220
sub eax, 0x5b16faf5
mov dword [0x656a8ea8], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x656a8ea8]
sub eax, 0x7d4be6c5
mov dword [0x656a9024], eax
mov dword [esp], eax
mov dword [esp + 4], str.Critical_error_detected__lx
call fcn.65693afc
mov ebx, dword [sym.imp.KERNEL32.dll_GetOEMCP]
call ebx
add eax, 0x236e01c
mov dword [0x656a9024], eax
call ebx
add eax, 0x236e01c
and eax, 0x1c2abbc4
mov dword [0x656a9024], eax
mov dword [esp + 8], str.The_buffer_lengths_do_not_match.
mov eax, dword [0x656a8ea8]
mov dword [esp], str.AVRF:_AVrfDllUnloadNotification_called_for_a_provider___p_
mov dword [esp + 4], eax
call fcn.65690454
xor eax, eax
mov ecx, 6
mov dword [ebp - 0x40], esi
rep stosb byte es:[edi], al
mov ebx, dword [0x656a8ea8]
mov word [ebp - 0x3c], 0
and ebx, 0xebae52c9
add ebx, 0x4003299
mov edx, ebx
or ebx, 0x570f44e
xor edx, 0x46b0f90a
cmp dword [ebp + 8], 0
mov dword [0x656a9024], ebx
mov dword [0x656a8ea8], edx
jne 0x6568cf62
imul edx, edx, 0xf91a4701
or edx, 0xd25edffd
imul edx, edx, 0xad4d4cf5
mov dword [0x656a8ea8], edx
add edx, 0x63811aa6
imul edx, edx, 0xfc1400f
and edx, 0x353caa74
mov dword [0x656a9024], edx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov eax, dword [0x656a9024]
sub eax, 0x10b7b846
mov dword [0x656a8ea8], eax
jmp 0x6568d365
cmp dword [ebp + 0xc], 0
jne 0x6568cfa7
cmp byte [str.Extended_error_information_is_available.], 0
je 0x6568cf83
xor ebx, 0xc0d1d44b
mov dword [0x656a9024], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov eax, dword [0x656a9024]
or eax, 0x72ebe74d
mov dword [0x656a8ea8], eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
or eax, 0xb4a3b973
mov dword [0x656a9024], eax
jmp 0x6568d365
mov eax, dword [ebp + 8]
imul ebx, ebx, 0x25d721c6
mov edi, dword [eax + 0x3c]
mov dword [0x656a8ea8], ebx
add edi, eax
mov esi, dword [edi + 0x78]
add esi, eax
call fcn.65693274
mov eax, dword [edi + 0x7c]
xor edx, edx
mov dword [ebp - 0x50], eax
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x58], eax
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x5c], eax
imul eax, dword [0x656a8ea8], 0xab772ba6
and eax, 0x7e07f65b
mov dword [0x656a8ea8], eax
cmp byte [edx + str.Critical_error_detected__lx], 0
je 0x6568d00f
inc edx
cmp edx, 0x51b
jne 0x6568cff3
xor eax, 0xe3f93e3a
mov dword [0x656a8ea8], eax
imul eax, dword [0x656a8ea8], 0xe7e206aa
mov dword [0x656a8ea8], eax
mov dword [esp], 0x1c84
call dword [sym.imp.USER32.dll_GetParent]
push ebx
mov eax, dword [0x656a9024]
and eax, 0xf50ff50f
mov dword [0x656a9024], eax
mov dword [esp], eax
call fcn.65690654
mov eax, dword [0x656a9024]
mov dword [esp], eax
call fcn.65690654
mov eax, dword [0x656a9024]
lea edx, [eax - 0x33320e98]
add eax, 0x795879f8
mov dword [0x656a8ea8], edx
mov dword [0x656a9024], eax
call fcn.65693274
mov eax, dword [ebp - 0x4c]
cmp eax, dword [esi + 0x18]
jae 0x6568d2f9
mov dword [ebp - 0x34], 0x32
xor ebx, ebx
mov edx, 0x1a
mov dword [ebp - 0x30], 0x2e
mov dword [ebp - 0x2c], 0xffffff86
mov eax, dword [0x656a9024]
mov dword [ebp - 0x60], edx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetParent]
and eax, 0xa2808a1b
push ecx
mov edi, dword [ebp - 0x60]
add edi, dword [ebp + ebx*4 - 0x34]
inc ebx
mov dword [0x656a8ea8], eax
mov edx, edi
cmp ebx, 3
jne 0x6568d098
cmp byte [str.Extended_error_information_is_available.], 0
je 0x6568d0d6
add eax, 0x318d6a9c
mov dword [0x656a8ea8], eax
mov eax, dword [0x656a8ea8]
sub eax, 0x5d1534ee
mov dword [0x656a9024], eax
mov dword [esp + 8], str.Critical_error_detected__lx
mov dword [esp + 4], eax
mov dword [esp], str.AVRF:_AVrfDllUnloadNotification_called_for_a_provider___p_
call fcn.65690454
mov eax, dword [0x656a8ea8]
mov ecx, dword [ebp - 0x4c]
mov ebx, dword [ebp + 8]
add eax, 0x723b33c8
mov dword [0x656a9024], eax
xor eax, 0x3185f771
mov dword [0x656a8ea8], eax
mov eax, dword [ebp - 0x54]
add eax, dword [ebp + 8]
add ebx, dword [eax + ecx*4]
mov dword [esp + 8], 1
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6568ca38
cmp eax, dword [ebp + 0xc]
jne 0x6568d2f1
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x58]
add eax, eax
add eax, dword [ebp + 8]
movzx eax, word [eax + ecx]
mov ecx, dword [ebp + 8]
lea eax, [ecx + eax*4]
mov edx, dword [eax + edi]
add edx, ecx
mov dword [ebp - 0x40], edx
cmp edx, esi
jb 0x6568d2ec
mov eax, dword [ebp - 0x50]
add eax, ecx
add eax, esi
cmp edx, eax
jae 0x6568d2ec
mov dword [esp], ebx
call fcn.6568edc4
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x3c], ax
inc eax
mov word [ebp - 0x3a], ax
mov eax, dword [0x65695064]
cmp dword [eax + 8], 0
je 0x6568d268
mov eax, dword [0x656a8ea8]
lea edi, [ebp - 0x28]
mov esi, 0x6569514c
xor ebx, ebx
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
and eax, 0x4b71a865
mov esi, 0x51
imul eax, eax, 0x69479425
mov dword [0x656a9024], eax
xor eax, 0xda5f5251
mov dword [0x656a8ea8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call fcn.65694280
mov eax, dword [0x656a9024]
sub eax, 0x73a4dff8
mov dword [0x656a8ea8], eax
mov eax, dword [0x656a8ea8]
mov edx, eax
or eax, 0x66dcb88
imul eax, eax, 0xb2866b7
and edx, 0x4b1e15f6
or edx, 0x20c0180
mov dword [0x656a9024], edx
mov dword [0x656a8ea8], eax
mov dword [esp + 8], str.Critical_error_detected__lx
mov dword [esp + 4], eax
mov dword [esp], str.AVRF:_AVrfDllUnloadNotification_called_for_a_provider___p_
call fcn.65690454
add esi, dword [ebp + ebx*4 - 0x28]
inc ebx
cmp ebx, 4
jne 0x6568d1eb
lea eax, [ebp - 0x40]
xor edx, edx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x3c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov eax, dword [0x65695064]
call dword [eax + 8]
sub esp, 0x10
cmp eax, esi
jge 0x6568d2ec
jmp 0x6568d365
xor eax, eax
cmp byte [eax + str.originCallerModule], 0
je 0x6568d28a
inc eax
cmp eax, 0x84c
jne 0x6568d26a
mov eax, dword [0x656a8ea8]
and eax, 0x6aaa08ec
mov dword [0x656a9024], eax
mov eax, dword [0x656a8ea8]
or eax, 0xb1426e85
mov dword [0x656a8ea8], eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetParent]
mov ecx, str.Extended_error_information_is_available.
push eax
imul edx, dword [0x656a9024], 0xdc2ff2f2
mov dword [0x656a9024], edx
mov al, byte [ecx]
test al, al
je 0x6568d2d6
sub eax, 0x30
cmp al, 9
jbe 0x6568d2d3
and edx, 0x1aefd0a5
mov dword [0x656a9024], edx
jmp 0x6568d2d6
inc ecx
jmp 0x6568d2b8
imul eax, dword [0x656a9024], 0x7fc81818
mov dword [0x656a8ea8], eax
call fcn.65694280
jmp 0x6568d365
mov eax, dword [ebp - 0x40]
jmp 0x6568d367
inc dword [ebp - 0x4c]
jmp 0x6568d070
cmp byte [str.Extended_error_information_is_available.], 0
je 0x6568d326
mov dword [esp + 0xc], str.AVRF:_AVrfDllUnloadNotification_called_for_a_provider___p_
mov dword [esp + 8], str.originCallerModule
mov dword [esp + 4], str.Extended_error_information_is_available.
mov dword [esp], str.Extended_error_information_is_available.
call fcn.65694038
mov eax, dword [0x656a8ea8]
mov edx, eax
and edx, 0xec6beb46
mov dword [0x656a9024], edx
mov dword [esp + 8], str.The_buffer_lengths_do_not_match.
mov dword [esp + 4], eax
mov dword [esp], str.AVRF:_AVrfDllUnloadNotification_called_for_a_provider___p_
call fcn.65690454
xor dword [0x656a9024], 0x7a7e24dd
or dword [0x656a8ea8], 0x58b1da86
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret