Function at 0x1015fd50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1f0
mov eax, dword [0x112e6e00]
xor eax, esp
mov dword [esp + 0x1ec], eax
push ebx
mov ebx, dword [esp + 0x1fc]
push ebp
push esi
mov esi, dword [esp + 0x200]
push edi
push esi
mov dword [esp + 0x48], esi
mov ebp, dword [esi + 8]
mov edi, dword [ebp + 0x1c]
call fcn.10144200
push ebx
push esi
mov dword [esp + 0x4c], eax
call fcn.101441e0
push 1
push 2
push 0
push 1
push 5
mov dword [esp + 0x38], eax
mov dword [esp + 0x30], 0
call fcn.1017e8e0
add esp, 0x20
test al, al
je 0x1015fdc1
push 0x111758a8
push ebx
call fcn.1014b5c0
add esp, 8
cmp dword [ebp + 0x18], 0
je 0x1015fdfb
push 0x11175920
push 0x11175934
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x1015fdfb
push 3
push 2
push eax
push 3
push 6
call fcn.1017e8e0
add esp, 0x14
test al, al
je 0x1015fdfb
mov al, 1
jmp 0x1015fdfd
xor al, al
mov byte [edi + 0x47], al
mov eax, dword [esp + 0x40]
cmp dword [eax + 4], 0
jne 0x1015fe14
cmp dword [eax + 0x24], 0
jne 0x1015fe14
xor al, al
jmp 0x1015fe30
push 3
push 2
push 0
push 1
push 6
call fcn.1017e8e0
add esp, 0x14
test al, al
je 0x1016016b
mov al, 1
mov byte [edi + 0x48], al
mov eax, dword [esp + 0x18]
mov dword [edi], 0
cmp byte [eax + 0x3c], 0
je 0x1015fe79
push ebx
call fcn.10144e90
push 0
lea eax, [esp + 0x18]
push eax
push ebx
push esi
call fcn.10144860
add esp, 0x14
test al, al
jne 0x1015fe6b
mov eax, dword [esp + 0x10]
mov dword [edi], eax
mov eax, dword [esp + 0x10]
inc dword [eax + 0x18]
push ebx
call fcn.10144ec0
add esp, 4
cmp dword [edi], 0
jne 0x1015feb4
push ebx
push esi
call fcn.1015ebe0
add esp, 8
mov dword [esp + 0x14], eax
test eax, eax
jne 0x1016017e
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x1015fe99
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov ecx, dword [edi]
add esp, 4
mov dword [ecx + 0x10], eax
mov eax, dword [edi]
cmp dword [eax + 0x10], 0
je 0x101600ed
cmp dword [ebp + 0x14], 0
je 0x1015fec8
push 0x111759a8
push ebx
call fcn.1014b5c0
add esp, 8
cmp byte [edi + 0x47], 0
je 0x1015ff93
mov dword [esp + 0x80], 2
lea eax, [esp + 0x54]
push dword [ebp + 0x18]
push eax
call fcn.10143790
add esp, 8
mov dword [esp + 0x14], eax
test eax, eax
je 0x1015ff0a
push 0x111759e0
push ebx
call fcn.1014b4f0
mov eax, 0x23
jmp 0x1016017b
mov esi, dword [esp + 0x78]
lea eax, [esp + 0x54]
push esi
push eax
lea eax, [esp + 0x8e]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esi, 0xa
lea eax, [esi - 0xa]
push eax
call fcn.10137710
mov word [esp + 0x94], ax
movzx eax, ax
add eax, 6
mov dword [esp + 0x2c], esi
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x8c]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x64]
mov dword [esp + 0x30], 0x12
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 1
push dword [ebp + 0x18]
push eax
call fcn.10143830
lea eax, [esp + 0x6c]
push eax
push 0x111759f4
push ebx
call fcn.1014b5c0
add esp, 0x24
jmp 0x1015ffc3
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], 1
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x28]
mov dword [esp + 0x50], eax
mov edx, 0x819c
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 1
mov dword [edi + 0x38], 0x811c
cmp byte [ecx + 0x67], 0
mov eax, dword [edi + 0x38]
cmove eax, edx
push 0x10
push 1
mov dword [edi + 0x38], eax
call dword [0x112e6e60]
mov edx, eax
add esp, 8
mov dword [edi + 4], edx
test edx, edx
jne 0x1016003b
push 0x11175570
push ebx
call fcn.1014b4f0
mov eax, 0x1b
jmp 0x1016017b
mov ecx, dword [edi]
lea eax, [edx + 8]
push eax
lea eax, [edi + 0x3c]
push eax
lea eax, [esp + 0x50]
push eax
push edx
xor edx, edx
lea eax, [esp + 0x44]
cmp byte [edi + 0x47], dl
push 0
cmove eax, edx
push eax
mov eax, dword [0x113281d4]
push edx
push edx
push dword [edi + 0x38]
mov eax, dword [eax + 0x18]
push dword [ecx + 0x10]
push edx
push ecx
call eax
mov esi, eax
cmp esi, 0x90312
je 0x101600f7
push dword [edi + 4]
call dword [0x112e6e54]
add esp, 4
mov dword [edi + 4], 0
lea eax, [esp + 0xfc]
push 0x100
push eax
push esi
call fcn.10133260
push eax
cmp esi, 0x80090300
je 0x101600df
cmp esi, 0x80090322
je 0x101600c7
push 0x11175a0c
push ebx
call fcn.1014b4f0
add esp, 0x18
mov eax, 0x23
jmp 0x1016017e
push 0x11175a44
push ebx
call fcn.1014b4f0
add esp, 0x18
mov eax, 0x3c
jmp 0x1016017e
push 0x11175a0c
push ebx
call fcn.1014b4f0
add esp, 0x18
mov eax, 0x1b
jmp 0x1016017e
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x2c]
mov eax, dword [esp + 0x4c]
push dword [esp + 0x38]
push ebx
push dword [eax + 4]
call fcn.1014ab60
mov ecx, dword [0x113281d4]
add esp, 0x14
mov esi, eax
push dword [esp + 0x30]
mov ecx, dword [ecx + 0x40]
call ecx
cmp dword [esp + 0x14], 0
mov eax, dword [esp + 0x28]
jne 0x10160154
cmp eax, esi
jne 0x10160154
mov dword [edi + 0x40], 0
xor eax, eax
mov word [edi + 0x44], 0
mov byte [edi + 0x46], 0
mov byte [edi + 0x34], 0
mov dword [ebp + 4], 1
jmp 0x1016017e
push eax
push esi
push 0x11175a78
push ebx
call fcn.1014b4f0
add esp, 0x10
mov eax, 0x23
jmp 0x1016017e
push 0x11175940
push ebx
call fcn.1014b4f0
mov eax, 0x4d
add esp, 8
mov ecx, dword [esp + 0x1fc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10132a53
add esp, 0x1f0
ret