Function at 0x541790
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x54207d
sub esp, 0xa0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x60]
test ecx, ecx
jne 0x542006
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 0x20]
mov ebp, dword [eax + 0x24]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call fcn.00541460
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
test eax, eax
jne 0x541f8d
mov edi, dword [esp + 0xa4]
mov dword [edi + 4], ecx
mov ecx, dword [0xa8c6b0]
test ecx, ecx
jne 0x541f81
mov dword [edi], ebx
mov eax, dword [edi + 0x50]
test eax, eax
jne 0x541f45
mov eax, dword [edi + 0x58]
mov ecx, dword [edi + 0x5c]
test eax, eax
jne 0x541e96
mov eax, dword [edi + 0x44]
lea ecx, [0x7da740]
mov dword [esp], ecx
mov dword [esp + 4], 0
add eax, 3
mov dword [esp + 0x40], eax
mov dword [esp + 8], eax
call fcn.004430a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xa4]
mov dword [ecx + 0x70], 0
mov edx, dword [esp + 0x40]
mov dword [ecx + 0x74], edx
lea edi, [ecx + 0x6c]
mov edx, dword [0xa8c6b0]
test edx, edx
jne 0x541e8c
mov dword [ecx + 0x6c], eax
mov dword [esp + 0x64], edi
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
lea ebx, [0x80a20c]
mov dword [esp + 0x70], ebx
lea ebx, [0x80a210]
mov dword [esp + 0x74], ebx
lea ebx, [0x80a208]
mov dword [esp + 0x78], ebx
xor eax, eax
jmp 0x5418c8
mov ebx, dword [esp + 0x40]
lea eax, [ebx + 1]
mov ecx, edx
mov edi, dword [esp + 0x64]
cmp eax, 3
jge 0x541a07
mov dword [esp + 0x40], eax
mov edx, dword [esp + eax*4 + 0x70]
mov dword [esp], ecx
mov ebx, dword [edx]
call ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov ebx, dword [esp + 0xc]
test eax, eax
jne 0x54198e
mov ebx, dword [esp + 0xa4]
mov ebp, dword [ebx + 0x70]
lea esi, [ebp + 1]
mov eax, ebp
mov ebp, dword [ebx + 0x6c]
mov edx, ebx
mov ebx, dword [ebx + 0x74]
cmp esi, ebx
ja 0x541932
lea ebx, [eax + 1]
mov dword [edx + 0x70], ebx
mov ebx, dword [0xa8c6b0]
lea edi, [ebp + eax*4]
test ebx, ebx
jne 0x541929
mov dword [ebp + eax*4], ecx
jmp 0x5418bb
mov eax, ecx
call fcn.0045c330
jmp 0x5418bb
mov dword [esp + 0x48], ecx
lea ecx, [0x7da740]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.004431f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 0x74], edx
mov edx, dword [0xa8c6b0]
test edx, edx
jne 0x541983
mov dword [ebx + 0x6c], eax
mov edx, ebx
mov ebp, eax
mov eax, ecx
mov ecx, dword [esp + 0x48]
jmp 0x54190f
mov edi, dword [esp + 0x64]
call fcn.0045c330
jmp 0x541977
mov dword [esp + 0x54], ebx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x78]
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x84]
mov edx, dword [eax + 0x88]
mov ebx, dword [eax + 0x8c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0x30]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xac], eax
add esp, 0xa0
ret
mov eax, dword [ecx + 0x70]
mov edx, dword [ecx + 0x44]
lea ebx, [eax + edx]
mov dword [esp + 0x40], ebx
mov ebp, dword [ecx + 0x74]
mov esi, dword [ecx + 0x6c]
mov edi, dword [ecx + 0x40]
cmp ebx, ebp
ja 0x541e3e
cmp eax, ebx
ja 0x542075
mov dword [esp + 0x60], esi
mov dword [esp + 0x3c], ebp
lea ecx, [0x7da740]
mov dword [esp], ecx
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl eax, 2
sar ebp, 0x1f
and eax, ebp
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.00410ee0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa4]
mov dword [ecx + 0x70], eax
mov eax, dword [esp + 0x3c]
mov dword [ecx + 0x74], eax
mov eax, dword [0xa8c6b0]
test eax, eax
jne 0x541e2c
mov eax, dword [esp + 0x60]
mov dword [ecx + 0x6c], eax
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
test eax, eax
je 0x541e01
xor ebp, ebp
xor esi, esi
test ebp, ebp
jne 0x541dec
mov ebp, dword [ecx + 0xc]
mov esi, dword [ecx + 8]
mov edi, dword [ecx + 0x10]
test ebp, ebp
jle 0x541db8
mov dword [esp + 0x28], edi
mov dword [esp + 0x44], esi
mov dword [esp + 0x24], ebp
mov byte [esp], 1
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.00543600
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00543930
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x14]
lea edi, [esp + 0x7c]
mov ebx, eax
xor eax, eax
call fcn.0045c5c7
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov ebp, dword [eax + 0x24]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], ebp
mov ecx, dword [eax + 0x6c]
mov ebp, dword [eax + 0x70]
mov esi, dword [eax + 0x74]
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0x84], ebx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], edx
mov ecx, dword [eax + 0x4c]
mov dword [esp + 0x9c], ecx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x44]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x14], ecx
call fcn.004c3ab0
mov eax, dword [0xa8c6b0]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
test eax, eax
jne 0x541da0
mov eax, dword [esp + 0xa4]
mov dword [eax + 0x50], ecx
test ebx, ebx
jne 0x541d2e
mov ecx, dword [eax + 0x78]
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x94]
test ecx, ecx
jle 0x541c8a
lea eax, [0x776f40]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00404780
mov eax, dword [0xa8c6b0]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x541d13
mov eax, dword [esp + 0xa4]
mov dword [eax + 0x9c], ecx
mov ecx, dword [eax + 0x90]
mov dword [esp + 0x5c], ecx
mov edx, dword [eax + 0x94]
mov dword [esp + 0x40], edx
xor ebx, ebx
jmp 0x541c86
mov dword [esp + 0x3c], ebx
mov edx, dword [ecx + ebx*4]
mov dword [esp], 8
lea ebp, [0x80a200]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
call fcn.0043aa90
mov eax, dword [esp + 0x3c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x40]
cmp ebx, edx
jl 0x541c4b
mov ecx, dword [eax + 0x58]
test ecx, ecx
jne 0x541cae
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
add esp, 0xa0
ret
lea eax, [0x7773c0]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00404780
mov eax, dword [0xa8c6b0]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x541cfb
mov eax, dword [esp + 0xa4]
mov dword [eax + 0xa0], ecx
mov dword [esp], 4
lea ecx, [0x80a204]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0043aa90
jmp 0x541c91
mov edx, dword [esp + 0xa4]
lea edi, [edx + 0xa0]
mov eax, ecx
call fcn.0045c330
mov eax, edx
jmp 0x541cdf
mov edx, dword [esp + 0xa4]
lea edi, [edx + 0x9c]
mov eax, ecx
call fcn.0045c330
mov eax, edx
jmp 0x541c33
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x50], edx
mov ecx, dword [eax + 0x78]
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x84]
mov edx, dword [eax + 0x88]
mov ebx, dword [eax + 0x8c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xac], eax
add esp, 0xa0
ret
mov ebp, dword [esp + 0xa4]
lea edi, [ebp + 0x50]
mov eax, ecx
call fcn.0045c330
mov eax, ebp
jmp 0x541bc5
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov ebp, ecx
mov ecx, dword [ecx]
mov esi, ecx
mov ecx, dword [ebp + 4]
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], ecx
mov edi, 1
mov ebp, 1
lea esi, [esp + 0x68]
jmp 0x541abd
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xac], esi
add esp, 0xa0
ret
mov eax, dword [ecx + 0x4c]
mov dword [esp], eax
call fcn.004c2510
mov eax, dword [esp + 4]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0xa4]
jmp 0x541aa4
mov edi, dword [esp + 0x64]
mov eax, dword [esp + 0x60]
call fcn.0045c330
jmp 0x541a8f
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edx
mov dword [esp + 0x58], edi
lea ecx, [0x7da740]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004431f0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x58]
jmp 0x541a25
call fcn.0045c330
jmp 0x54187d
mov eax, dword [eax + 0x14]
mov dword [esp], ecx
call eax
mov dword [esp], 0
call fcn.00405c10
movzx eax, byte [esp + 8]
test al, al
jne 0x541ebf
mov edi, dword [esp + 0xa4]
jmp 0x54182c
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x78]
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x84]
mov edx, dword [eax + 0x88]
mov ebx, dword [eax + 0x8c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x58]
mov eax, dword [eax + 0x5c]
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
add esp, 0xa0
ret
lea eax, [0x799500]
mov dword [esp], eax
call fcn.0040b570
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x7ee0eb]
mov dword [eax], ecx
lea ecx, [0x86c560]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0xa0
ret
mov eax, ebx
call fcn.0045c330
jmp 0x541813
mov dword [esp + 0x4c], edx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x78]
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x84]
mov edx, dword [eax + 0x88]
mov ebx, dword [eax + 0x8c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0x34]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xac], eax
add esp, 0xa0
ret
mov ecx, dword [eax + 0x78]
mov edx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x84]
mov edx, dword [eax + 0x88]
mov ebx, dword [eax + 0x8c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.005413b0
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x60]
mov eax, dword [eax + 0x64]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
add esp, 0xa0
ret
mov ecx, ebx
call fcn.0045c410
nop
call fcn.0045ade0
jmp fcn.00541790