Function at 0x61514a90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ecx, 0x11
push edi
push esi
mov esi, eax
push ebx
sub esp, 0x4c
mov dword [esp + 0x18], edx
add edx, 0x48
mov edi, edx
mov dword [esp + 0x1c], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [esi + 0x68], 0
mov dword [esi + 0x50], 0
mov edx, dword [esi + 0x4c]
test edx, edx
je 0x61514e61
mov esi, dword [esp + 0x1c]
lea eax, [esi + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esi + 0x60]
mov dword [esp + 0x20], eax
shr eax, 0x1f
lea eax, [edx + eax - 1]
mov dword [esp], eax
call fcn.61517520
test eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
je 0x61514e20
mov eax, dword [eax + 0x5c]
mov esi, dword [esp + 0x18]
mov dword [esi + 0x70], eax
mov esi, dword [esp + 0x20]
lea eax, [esi + 4]
sub eax, dword [esi + 4]
lea edi, [eax + 9]
mov esi, eax
mov dword [esp + 0x28], eax
mov dword [esp], edi
mov dword [esp + 0x24], edi
call sub.msvcrt.dll_strlen
cmp byte [esi + 9], 0x65
lea eax, [edi + eax + 1]
je 0x61514d60
mov esi, dword [esp + 0x28]
movzx edx, byte [eax]
movzx ecx, byte [esi + 8]
mov byte [esp + 0x2f], cl
cmp cl, 3
ja 0x61514f18
xor esi, esi
xor ecx, ecx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or esi, edx
test bl, bl
js 0x61514b50
mov ebx, dword [esp + 0x18]
xor ecx, ecx
mov dword [ebx + 0x7c], esi
xor ebx, ebx
lea esi, [esi]
mov ebp, eax
movzx edx, byte [eax]
add eax, 1
mov edi, edx
and edi, 0x7f
shl edi, cl
add ecx, 7
or ebx, edi
test dl, dl
js 0x61514b78
mov edi, ebp
mov ebp, edx
mov edx, edi
cmp ecx, 0x1f
ja 0x61514ba9
and ebp, 0x40
je 0x61514ba9
mov edi, 0xffffffff
shl edi, cl
or ebx, edi
mov ecx, dword [esp + 0x18]
xor edi, edi
mov ebp, ebx
mov dword [ecx + 0x78], ebx
xor ecx, ecx
cmp byte [esp + 0x2f], 1
je 0x61514d90
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or edi, edx
test bl, bl
js 0x61514bc8
mov ebx, ebp
mov ecx, dword [esp + 0x18]
xor ebp, ebp
mov dword [ecx + 0x80], edi
mov edi, dword [esp + 0x24]
mov byte [ecx + 0x85], 0xff
movzx edx, byte [edi]
cmp dl, 0x7a
je 0x61514e70
test dl, dl
je 0x615150e0
mov edi, dword [esp + 0x24]
add edi, 1
sub edx, 0x42
cmp dl, 0x11
ja case.0x61514c1d.1
movzx edx, dl
jmp dword [edx*4 + 0x615f93ac]
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
mov byte [ecx + 0x85], dl
movzx edx, byte [edi]
add edi, 1
test dl, dl
jne 0x61514c12
test ebp, ebp
jne 0x61514c58
mov ebp, eax
lea esi, [esi]
nop
test ebp, ebp
je 0x61514f1d
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
lea edx, [ecx + eax + 4]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebp
cmp ebx, 0xfffffffc
jne 0x61514c7d
cmp esi, 1
je 0x61514f4f
call fcn.61514290
mov eax, dword [esp + 0x18]
movzx eax, byte [eax + 0x84]
cmp al, 0xff
je 0x61514f30
and eax, 7
cmp al, 2
je 0x61514f08
jbe 0x61514ec0
cmp al, 3
je 0x61514ec8
cmp al, 4
jne 0x615e7d9c
mov ebx, 0x18
mov eax, dword [esp + 0x20]
add ebx, eax
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x86], 0
movzx edx, byte [eax + 0x85]
je 0x61514ed8
xor esi, esi
xor ecx, ecx
mov edi, edx
nop
movzx edx, byte [ebx]
add ebx, 1
mov eax, edx
and eax, 0x7f
shl eax, cl
add ecx, 7
or esi, eax
test dl, dl
js 0x61514ce0
mov edx, edi
cmp dl, 0xff
je 0x61514d1b
lea eax, [esp + 0x3c]
mov edi, dword [esp + 0x1c]
movzx edx, dl
mov ecx, ebx
mov dword [esp], eax
mov eax, edi
call fcn.61512fc0
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x50], eax
add ebx, esi
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
lea edx, [esi + eax + 4]
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x78], 0xfffffffc
jne 0x61514d3b
cmp dword [eax + 0x7c], 1
je 0x61514f3a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebx
call fcn.61514290
xor eax, eax
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp byte [esi + 0xa], 0x68
jne 0x61514b30
mov edx, dword [eax]
mov esi, dword [esp + 0x18]
add eax, 4
mov dword [esi + 0x88], edx
mov esi, dword [esp + 0x28]
add esi, 0xb
mov dword [esp + 0x24], esi
jmp 0x61514b30
movzx edi, byte [eax]
lea eax, [edx + 2]
jmp 0x61514be0
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
add edi, 1
mov byte [ecx + 0x84], dl
movzx edx, byte [edi - 1]
test dl, dl
jne 0x61514c12
jmp 0x61514c42
movzx edx, byte [eax]
lea ecx, [eax + 1]
lea eax, [esp + 0x3c]
add edi, 1
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
call fcn.61512fc0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x74], edx
movzx edx, byte [edi - 1]
test dl, dl
jne 0x61514c12
jmp 0x61514c42
mov ecx, dword [esp + 0x18]
add edi, 1
mov byte [ecx + 0x87], 1
movzx edx, byte [edi - 1]
test dl, dl
jne 0x61514c12
jmp 0x61514c42
mov ecx, dword [eax + 0x48]
mov eax, dword [eax + 0x4c]
cmp byte [eax - 2], 0xff
movzx edx, byte [eax - 5]
je 0x61515081
cmp dl, 0xe8
je 0x615150a8
cmp dl, 0x8b
jne 0x61514e4c
cmp byte [eax - 4], 0x4d
je 0x61514fd3
cmp byte [eax - 1], 0x83
jne 0x61514e61
cmp byte [eax], 9
jne 0x61514e61
cmp byte [eax + 1], 0
je 0x61514f67
add esp, 0x4c
mov eax, 5
pop ebx
pop esi
pop edi
pop ebp
ret
xor ecx, ecx
mov edi, ebx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or ebp, edx
test bl, bl
js 0x61514e78
mov ebx, edi
mov edi, dword [esp + 0x18]
add ebp, eax
mov byte [edi + 0x86], 1
mov edi, dword [esp + 0x24]
movzx edx, byte [edi + 1]
lea ecx, [edi + 1]
test dl, dl
je 0x61514c58
mov dword [esp + 0x24], ecx
jmp 0x61514c0b
test al, al
jne 0x615150ee
mov ebx, 0x10
jmp 0x61514cbb
cmp dl, 0xff
je 0x61514d1d
lea eax, [esp + 0x3c]
mov esi, dword [esp + 0x1c]
mov ecx, ebx
mov dword [esp], eax
mov eax, esi
call fcn.61512fc0
mov ebx, eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x50], eax
jmp 0x61514d1d
mov ebx, 0xc
jmp 0x61514cbb
cmp dl, 4
je 0x61514f59
add esp, 0x4c
mov eax, 3
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, 8
jmp 0x61514cbb
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov eax, ebx
call fcn.61513b30
xor eax, eax
jmp 0x61514d4f
call fcn.61513b30
jmp 0x61514c82
cmp byte [eax + 1], 0
jne 0x61514f1d
add eax, 2
jmp 0x61514b48
cmp byte [eax + 2], 0x2d
jne 0x61514e61
cmp byte [eax + 3], 0
jne 0x61514e61
cmp byte [eax + 4], 0x10
jne 0x61514e61
cmp byte [eax + 5], 0
jne 0x61514e61
mov eax, dword [esp + 0x18]
mov byte [eax + 0x5c], 1
mov dword [eax + 0x68], 4
mov dword [eax + 0x64], 4
mov byte [eax + 0x49], 1
mov dword [eax + 4], 0xfffffffc
mov dword [eax + 0x80], 8
mov byte [eax + 0x50], 1
mov dword [eax + 0x20], 0
mov byte [eax + 0x87], 1
xor eax, eax
jmp 0x61514d4f
cmp byte [eax], 0x64
jne 0x61514e4c
cmp byte [eax + 1], 0x8b
jne 0x61514e61
mov eax, dword [ecx + 8]
mov edx, dword [eax + 0xc4]
mov esi, dword [esp + 0x18]
mov ebx, edx
mov byte [esi + 0x5c], 1
sub ebx, ecx
lea ecx, [eax + 0xb0]
mov dword [esi + 0x68], 4
sub ecx, edx
mov dword [esi + 0x64], ebx
mov dword [esi], ecx
lea ecx, [eax + 0xa4]
sub ecx, edx
mov dword [esi + 0x48], 0x1010101
mov dword [esi + 0xc], ecx
lea ecx, [eax + 0xac]
sub ecx, edx
mov dword [esi + 0x4d], 0x1010101
mov dword [esi + 4], ecx
lea ecx, [eax + 0xa8]
sub ecx, edx
mov byte [esi + 0x87], 1
mov dword [esi + 8], ecx
lea ecx, [eax + 0xa0]
mov dword [esi + 0x80], 8
sub ecx, edx
mov dword [esi + 0x18], ecx
lea ecx, [eax + 0x9c]
sub ecx, edx
mov dword [esi + 0x1c], ecx
lea ecx, [eax + 0xb4]
add eax, 0xb8
sub eax, edx
sub ecx, edx
mov dword [esi + 0x20], eax
xor eax, eax
mov dword [esi + 0x14], ecx
jmp 0x61514d4f
cmp byte [eax - 1], 0xd0
jne 0x61514e34
cmp byte [eax], 0x83
jne 0x61514e34
cmp byte [eax + 1], 0xf8
jne 0x61514e34
mov eax, dword [ecx]
mov eax, dword [eax + 4]
jmp 0x61514fe9
cmp byte [eax - 4], 0x68
movzx edx, byte [eax]
je 0x615150e7
cmp dl, 0x83
jne 0x61514e4c
cmp byte [eax + 1], 0xc4
jne 0x61514e61
cmp byte [eax + 3], 0xb8
jne 0x61514e61
mov eax, dword [ecx + 0x38]
jmp 0x61514fe9
mov ebp, eax
jmp 0x61514c58
cmp dl, 0xc3
jne 0x615150b1
jmp 0x6151509e
jmp 0x615e7d9c
ud2