Function at 0x6568e3c4
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov edx, str.The_command_within_the_transport_is_not_supported.
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x5c
mov al, byte [edx]
sub eax, 0x30
cmp al, 9
ja 0x6568e3de
inc edx
jmp 0x6568e3d2
mov eax, dword [0x656a8f2c]
mov ebx, dword [sym.imp.USER32.dll_GetForegroundWindow]
or eax, 0xd97cc75a
mov dword [0x656a8fc0], eax
call ebx
or eax, 0x65bb32fa
imul eax, eax, 0x8d59d9cd
mov dword [0x656a8fc0], eax
xor eax, eax
cmp byte [eax + str.The_command_within_the_transport_is_not_supported.], 0
je 0x6568e435
inc eax
cmp eax, 0x1534
jne 0x6568e407
mov eax, dword [0x656a8f2c]
or eax, 0xd9feeb24
mov dword [0x656a8fc0], eax
call ebx
or eax, 0x6bc99d4b
mov dword [0x656a8fc0], eax
jmp 0x6568e43c
cmp eax, 0xc44
jle 0x6568e441
call fcn.656926a8
mov eax, dword [0x656a8fc0]
add eax, 0x47c9828b
and eax, 0xee05803f
mov dword [0x656a8fc0], eax
mov dword [esp], str.Getting_ApphelpCheckModule_failed_with_status_0x_08lx
call fcn.6568fc0c
mov edx, str.ProgramFiles
mov al, byte [edx]
test al, al
je 0x6568e487
sub eax, 0x30
cmp al, 9
jbe 0x6568e484
imul eax, dword [0x656a8f2c], 0x550e712c
mov dword [0x656a8f2c], eax
jmp 0x6568e487
inc edx
jmp 0x6568e466
mov eax, dword [0x656a8f2c]
lea edi, [ebp - 0x2c]
mov esi, 0x65695088
xor ebx, ebx
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
xor eax, 0xa195268b
xor esi, esi
mov dword [0x656a8fc0], eax
cmp byte [str.ProgramFiles], 0
je 0x6568e4d7
mov eax, dword [0x656a8fc0]
mov dword [esp + 4], eax
mov eax, dword [0x656a8f2c]
mov dword [esp], eax
call fcn.65690f58
mov eax, dword [0x656a8f2c]
add eax, 0xe93ae9e
mov dword [0x656a8fc0], eax
mov eax, dword [0x656a8fc0]
sub esi, dword [ebp + ebx*4 - 0x2c]
inc ebx
mov dword [ebp - 0x50], esi
mov edx, eax
xor edx, 0x6c43cb90
mov dword [0x656a8f2c], edx
cmp ebx, 5
jne 0x6568e4a9
cmp byte [str.OverlayPackages], 0
je 0x6568e52f
mov dword [esp], eax
mov dword [esp + 0xc], str.DOCUMENTSLIBRARY
mov dword [esp + 8], 0x656ad37c
mov dword [esp + 4], 0x656ad3a0
call fcn.656914a0
mov eax, dword [0x656a8fc0]
and eax, 0x56241d31
mov dword [0x656a8f2c], eax
call fcn.656926a8
mov eax, dword [0x656a8fc0]
and eax, 0x5dd51bc4
mov dword [0x656a8f2c], eax
add eax, 0x5014c532
mov dword [0x656a8fc0], eax
mov dword [esp], str.Home_Automation
call fcn.6568fc0c
cmp byte [str.The_command_within_the_transport_is_not_supported.], 0
je 0x6568e56c
add dword [0x656a8f2c], 0x1534f29e
sub dword [0x656a8f2c], 0x750904c6
xor eax, eax
and dword [0x656a8fc0], 0xd1a3324b
cmp byte [eax + str.ProgramFiles], 0
je 0x6568e598
inc eax
cmp eax, 0x7ae
jne 0x6568e582
call fcn.65690c98
mov eax, dword [0x656a8f2c]
xor eax, 0x4eae44c
and eax, 0x7136cc3d
mov dword [0x656a8fc0], eax
mov dword [esp + 8], str.ProgramFiles
mov dword [esp + 4], str.ProgramFiles
mov dword [esp], str.TrustedInstaller
call fcn.6568f324
xor eax, eax
cmp byte [eax + str.The_command_within_the_transport_is_not_supported.], 0
je 0x6568e5ec
inc eax
cmp eax, 0x2212
jne 0x6568e5ca
call fcn.65690c98
and dword [0x656a8fc0], 0xa65bf926
jmp 0x6568e5f9
mov edx, dword [0x656a8fc0]
cmp eax, 0x83b
jle 0x6568e605
add dword [0x656a8f2c], 0x606e3e9e
jmp 0x6568e610
lea eax, [edx + 0x117e2b46]
mov dword [0x656a8fc0], eax
and dword [0x656a8fc0], 0xce6f9376
call fcn.65690c98
cmp byte [str.OverlayPackages], 0
je 0x6568e637
mov eax, dword [0x656a8f2c]
xor eax, 0x5fba99df
mov dword [0x656a8fc0], eax
mov eax, dword [0x656a8fc0]
sub eax, 0x74354032
mov dword [0x656a8f2c], eax
call fcn.65690c98
mov edx, str.OverlayPackages
sub dword [0x656a8f2c], 0x7ce2b08b
mov al, byte [edx]
test al, al
je 0x6568e67b
sub eax, 0x30
cmp al, 9
jbe 0x6568e678
mov eax, dword [0x656a8fc0]
and eax, 0xc894033e
mov dword [0x656a8f2c], eax
jmp 0x6568e67b
inc edx
jmp 0x6568e65a
mov eax, dword [0x656a8f2c]
add eax, 0x100aca3f
mov dword [0x656a8fc0], eax
mov dword [esp + 8], str.Specified_VidPN_present_path_content_type_is_invalid.
mov dword [esp + 4], eax
mov dword [esp], str.FindResource_API_entry
call fcn.65690e6c
cmp dword [0x656a7aa0], 0
je 0x6568e6bf
sub dword [0x656a8fc0], 0x429f8cd9
mov eax, 1
jmp 0x6568ecfb
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
xor edi, edi
xor ebx, ebx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x50]
cmp dword [eax + 0x18], ecx
je 0x6568e88d
mov dword [ebp - 0x48], 0x42
xor esi, esi
xor edi, edi
mov dword [ebp - 0x44], 0x40
mov dword [ebp - 0x40], 0xffffff7e
mov edx, str.OverlayPackages
mov ecx, 0x74e
movzx eax, byte [edx]
inc edx
test al, al
je 0x6568e742
add ecx, eax
cmp ecx, 0x17d5
jbe 0x6568e704
mov eax, dword [0x656a8f2c]
or eax, 0xcc0b8e85
mov dword [0x656a8f2c], eax
mov dword [esp + 4], eax
mov eax, dword [0x656a8fc0]
mov dword [esp], eax
call fcn.65690f58
mov eax, dword [0x656a8fc0]
or eax, 0x7334292c
jmp 0x6568e74c
imul eax, dword [0x656a8fc0], 0x574118d6
or dword [0x656a8fc0], 0x8b9b7280
mov dword [0x656a8f2c], eax
call fcn.656926a8
sub edi, dword [ebp + esi*4 - 0x48]
inc esi
mov dword [ebp - 0x54], edi
cmp esi, 3
jne 0x6568e6fa
call dword [sym.imp.USER32.dll_GetDesktopWindow]
lea edi, [ebp - 0x3c]
mov esi, 0x6569509c
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
xor esi, esi
mov edi, 0xa
xor eax, eax
cmp byte [eax + str.ProgramFiles], 0
je 0x6568e7b1
inc eax
cmp eax, 0x19d8
jne 0x6568e78b
mov eax, dword [0x656a8fc0]
or eax, 0x37b64cad
mov dword [0x656a8f2c], eax
call dword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
mov eax, dword [0x656a8fc0]
sub eax, 0x63b1341a
mov dword [0x656a8f2c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [esp + 8], str.OverlayPackages
mov dword [esp + 4], str.OverlayPackages
mov dword [esp], str.Fatal_Application_Exit
call fcn.6568f324
add edi, dword [ebp + esi*4 - 0x3c]
inc esi
mov dword [ebp - 0x58], edi
cmp esi, 4
jne 0x6568e789
mov eax, dword [ebp - 0x4c]
mov edi, dword [eax + 0x18]
xor eax, eax
mov esi, dword [edi + 0x3c]
add esi, edi
cmp byte [eax + str.The_command_within_the_transport_is_not_supported.], 0
je 0x6568e821
inc eax
cmp eax, 0x12e3
jne 0x6568e7fc
call fcn.656927b8
imul eax, dword [0x656a8fc0], 0x4ccc7fb4
mov dword [0x656a8f2c], eax
mov eax, dword [0x656a8f2c]
xor eax, 0xf9f799dd
mov dword [0x656a8fc0], eax
mov dword [esp], eax
mov dword [esp + 0xc], str._ImageGamma
mov dword [esp + 8], str.AslpFileMakeStringVersionAttributes
mov dword [esp + 4], str.WER_ReportFault:_u:_WARNING_IsWow64Process2_failed:__u.
call fcn.656914a0
mov eax, dword [esi + 0x78]
cmp dword [ebp - 0x54], eax
je 0x6568e880
lea ebx, [edi + eax]
mov edx, dword [ebx + 0xc]
add edx, edi
mov eax, dword [edx]
or eax, 0x20202020
cmp eax, 0x6c64746e
jne 0x6568e880
mov eax, dword [ebp - 0x58]
mov eax, dword [edx + eax]
or eax, 0x20202020
cmp eax, 0x6c642e6c
je 0x6568e8ac
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
jmp 0x6568e6d2
test ebx, ebx
jne 0x6568e8ac
imul eax, dword [0x656a8fc0], 0xea6cc3c9
and eax, 0x35ca5fe8
mov dword [0x656a8f2c], eax
xor eax, eax
jmp 0x6568ecfb
mov eax, dword [ebx + 0x20]
mov edx, dword [ebx + 0x1c]
mov dword [0x656aa5e4], edi
mov esi, dword [ebx + 0x18]
add eax, edi
add edx, edi
mov dword [ebp - 0x50], eax
mov eax, dword [ebx + 0x24]
xor ebx, ebx
add eax, edi
mov dword [ebp - 0x54], eax
xor eax, eax
cmp byte [eax + str.OverlayPackages], 0
je 0x6568e8ee
inc eax
cmp eax, 0x16ed
jne 0x6568e8ce
mov eax, dword [0x656a8f2c]
sub eax, 0x2d4d5048
mov dword [0x656a8fc0], eax
mov eax, dword [0x656a8fc0]
dec esi
mov ecx, eax
sub eax, 0x63f06628
and ecx, 0x923e53e0
mov dword [0x656a8fc0], eax
mov dword [ebp - 0x4c], ecx
mov dword [0x656a8f2c], ecx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ecx + esi*4]
add eax, edi
cmp word [eax], 0x775a
jne 0x6568e965
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x58], edx
add ecx, 0x32ba9cea
mov dword [0x656a8fc0], ecx
lea ecx, [ebx*8 + 0x656a7aa4]
mov dword [ebp - 0x4c], ecx
mov dword [esp], eax
call fcn.6568e310
mov edx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x4c]
mov dword [ebx*8 + 0x656a7aa4], eax
mov eax, dword [ebp - 0x54]
inc ebx
movzx eax, word [eax + esi*2]
mov eax, dword [edx + eax*4]
mov dword [ecx + 4], eax
cmp ebx, 0x226
je 0x6568e96d
test esi, esi
jne 0x6568e8cc
mov dword [0x656a7aa0], ebx
xor ebx, ebx
mov eax, dword [0x656a7aa0]
dec eax
cmp ebx, eax
jae 0x6568e6b5
mov edx, str.The_command_within_the_transport_is_not_supported.
mov ecx, 0xde9
movzx eax, byte [edx]
inc edx
test al, al
je 0x6568e9a4
add ecx, eax
cmp ecx, 0x1ea0
jbe 0x6568e98d
call fcn.65690c98
imul eax, dword [0x656a8f2c], 0x123a1d21
mov dword [0x656a8fc0], eax
or eax, 0xb25bc7b3
mov dword [0x656a8f2c], eax
call fcn.65690c98
mov dl, byte [str.The_command_within_the_transport_is_not_supported.]
mov eax, dword [0x656a8f2c]
test dl, dl
je 0x6568e9d6
and eax, 0x72272a77
xor eax, 0x5d000bf6
test dl, dl
jne 0x6568e9eb
and eax, 0x31821e19
or eax, 0x49fd6c7f
jmp 0x6568e9f5
and eax, 0x30020a11
or eax, 0x40252877
xor eax, 0x5d000bf6
mov ecx, str.FindResource_API_entry
mov esi, 0x824
and eax, 0x31821e19
add eax, 0x44d49d79
mov dword [0x656a8f2c], eax
or eax, 0x55e790bf
mov dword [0x656a8fc0], eax
movsx edx, byte [ecx]
inc ecx
test dl, dl
je 0x6568ea4f
add esi, edx
cmp esi, 0x206a
jbe 0x6568ea1d
call fcn.65690c98
mov eax, dword [0x656a8fc0]
add eax, 0x6615fef9
mov dword [0x656a8fc0], eax
xor eax, 0x30f73e7a
mov dword [0x656a8f2c], eax
jmp 0x6568ea67
add eax, 0x5f093af2
mov dword [0x656a8f2c], eax
mov dword [esp], 0x178d
call dword [sym.imp.USER32.dll_IsIconic]
push edx
mov esi, dword [0x656a8fc0]
xor esi, 0x706e6a36
mov dword [0x656a8fc0], esi
mov dword [esp], str.FindResource_API_entry
call fcn.65693bc0
xor eax, eax
cmp byte [eax + str.FindResource_API_entry], 0
je 0x6568eac7
inc eax
cmp eax, 0x1d0
jne 0x6568ea87
mov dword [esp + 0xc], str.ServerSessionId
mov dword [esp + 8], str._MSEPS_Preamble__Softek
mov dword [esp + 4], str.ExecuteOptions
mov dword [esp], esi
call fcn.656914a0
mov eax, dword [0x656a8f2c]
and eax, 0x50940b41
mov dword [0x656a8fc0], eax
imul eax, dword [0x656a8f2c], 0xe696d984
xor dword [0x656a8fc0], 0x2e077510
mov dword [0x656a8f2c], eax
mov dword [esp + 4], eax
mov dword [esp + 8], str.SaferIdentifyLevel
mov dword [esp], str.ProgramFiles
call fcn.65690e6c
xor eax, eax
cmp byte [eax + str.The_command_within_the_transport_is_not_supported.], 0
je 0x6568eb26
inc eax
cmp eax, 0x9c3
jne 0x6568eafa
mov dword [esp], str.FindResource_API_entry
call fcn.65693bc0
mov eax, dword [0x656a8fc0]
add eax, 0x65107ea2
mov dword [0x656a8f2c], eax
mov eax, dword [0x656a8f2c]
mov dword [ebp - 0x3c], 0x3a
xor edi, edi
mov dword [ebp - 0x38], 0x1c
mov edx, eax
add eax, 0x622b042e
mov dword [ebp - 0x34], 0xffffffa2
mov dword [0x656a8f2c], eax
and edx, 0x9d1bf156
mov dword [0x656a8fc0], edx
mov edx, 9
cmp byte [str.ProgramFiles], 0
je 0x6568eb73
mov dword [ebp - 0x4c], edx
call fcn.65690c98
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x656a8fc0]
mov esi, dword [ebp + edi*4 - 0x3c]
inc edi
imul ecx, eax, 0x1d729eb7
add esi, edx
or eax, 0x50e44d80
mov dword [0x656a8fc0], eax
mov edx, esi
mov dword [0x656a8f2c], ecx
cmp edi, 3
jne 0x6568eb5f
xor edi, edi
mov eax, dword [0x656a7aa0]
sub eax, ebx
sub eax, esi
cmp edi, eax
jae 0x6568ecf5
mov eax, dword [edi*8 + 0x656a7aa8]
inc edi
cmp dword [edi*8 + 0x656a7aa8], eax
jae 0x6568eb9e
mov eax, dword [0x656a8fc0]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetTopWindow]
mov ecx, str.The_command_within_the_transport_is_not_supported.
push eax
mov al, byte [ecx]
test al, al
je 0x6568ebf0
sub eax, 0x30
cmp al, 9
jbe 0x6568ebed
and dword [0x656a8f2c], 0x669e0067
jmp 0x6568ebf0
inc ecx
jmp 0x6568ebd4
xor dword [0x656a8fc0], 0x5d0ed435
mov dword [esp + 8], str.ProgramFiles
mov dword [esp + 4], str.ProgramFiles
mov dword [esp], str.Indicates_the_SECURITY_DESCRIPTOR_structure_is_not_valid.
call fcn.6568f324
cmp byte [str.OverlayPackages], 0
je 0x6568ec29
sub dword [0x656a8fc0], 0x3059207c
mov eax, dword [0x656a8fc0]
xor eax, 0xfef6247d
lea ecx, [eax - 0x62b8549f]
sub eax, 0x169dd2ea
cmp byte [str.ProgramFiles], 0
mov dword [0x656a8f2c], ecx
mov ecx, dword [edi*8 + 0x656a7a9c]
mov dword [0x656a8fc0], eax
mov dword [ebp - 0x4c], ecx
je 0x6568ec8c
mov dword [esp + 0xc], str.Network_interface_is_not_ready_to_complete_this_operation.
mov dword [esp + 8], str.ResourceFileName
mov dword [esp + 4], str.Industry_Other
mov dword [esp], eax
call fcn.656914a0
xor dword [0x656a8fc0], 0xa22816f
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov eax, dword [0x656a8f2c]
sub eax, 0x4afc44b2
xor eax, 0x893f1f1
mov dword [0x656a8f2c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp], str.FindResource_API_entry
call fcn.65693bc0
mov ecx, dword [edi*8 + 0x656a7aa4]
mov eax, dword [edi*8 + 0x656a7aa0]
or dword [0x656a8f2c], 0x8a90e883
mov dword [edi*8 + 0x656a7a9c], ecx
mov ecx, dword [edi*8 + 0x656a7aa8]
mov dword [edi*8 + 0x656a7aa8], eax
mov dword [edi*8 + 0x656a7aa0], ecx
mov ecx, dword [ebp - 0x4c]
mov dword [edi*8 + 0x656a7aa4], ecx
jmp 0x6568eb9e
inc ebx
jmp 0x6568e975
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret