Function at 0x5292d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc0]
cmp eax, dword [ecx + 8]
jbe 0x529d31
sub esp, 0x140
xor eax, eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
lea edi, [esp + 0x14c]
xor eax, eax
call fcn.00452043
mov byte [esp + 0x180], 0
lea edi, [esp + 0x14c]
xor eax, eax
call fcn.00452043
xor ebx, ebx
lea ebx, [esp + 0x3c]
cmp ebx, 0
je 0x529d2a
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc4], ebx
xor eax, eax
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], eax
lea eax, [esp + 0x130]
mov ecx, dword [esp + 0x144]
mov dword [eax], ecx
mov dword [esp + 0xb0], 1
mov dword [esp + 0xb4], 1
mov dword [esp + 0xac], eax
mov dword [esp + 0x6c], 0
mov dword [esp], 0x5be400
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0xb0]
cmp ebx, 0
jle 0x529528
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0xc4]
xor edx, edx
mov ebx, dword [esp + 0xac]
mov dword [esp + 0xc4], ebx
mov ebp, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], ecx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x6c], 0
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xc8], ebp
mov ebx, dword [esp + 0xcc]
mov dword [esp + 0xfc], ebx
xor eax, eax
mov dword [esp + 0xf8], ebp
mov dword [esp + 0x50], ebp
mov dword [esp + 0xf4], ecx
mov ebp, dword [esp + 0x50]
cmp eax, ebp
jge 0x52951a
mov dword [esp + 0x84], ecx
cmp ecx, 0
je 0x529d23
mov edi, dword [ecx]
mov esi, dword [ecx + 4]
mov edx, dword [ecx + 8]
mov ebp, dword [ecx + 0xc]
mov dword [esp + 0x54], eax
mov dword [esp + 0x120], edi
mov dword [esp + 0x124], esi
mov dword [esp + 0x104], esi
mov dword [esp + 0x128], edx
mov dword [esp + 0x108], edx
mov dword [esp + 0x12c], ebp
mov dword [esp + 0x10c], ebp
mov dword [esp + 0x100], edi
mov dword [esp + 0x60], edi
mov dword [esp], 0x5be400
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
call fcn.004091c0
mov ebx, dword [esp + 0xc]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0
xchg ebp, eax
je 0x52952f
mov ecx, dword [esp + 0x84]
add ecx, 0x10
mov eax, dword [esp + 0x54]
inc eax
mov ebp, dword [esp + 0x50]
cmp eax, ebp
jl 0x52947e
cmp byte [esp + 0x180], 0
je 0x5293da
add esp, 0x140
ret
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x88], ebx
mov byte [esp + 0x3f], 1
mov dword [esp], 0x5be400
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x88]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x3f]
mov dword [esp + 0xc], ebx
call fcn.00406d30
xor eax, eax
mov ebx, dword [esp + 0x60]
mov ebp, dword [ebx + 0x28]
mov dword [esp + 0x48], ebp
mov ebp, dword [esp + 0x48]
cmp eax, ebp
jge 0x5294ff
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x60]
cmp ebx, 0
je 0x529d1c
mov dword [esp + 0x40], eax
mov ebp, eax
mov esi, dword [ebx + 0x28]
cmp eax, esi
jae 0x529d15
mov esi, dword [ebx + 0x24]
imul ebp, ebp, 0xc
add esi, ebp
mov dword [esp + 0x78], esi
xor ebx, ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x68], 0
mov ebx, dword [esp + 0x78]
cmp ebx, 0
je 0x529d0e
mov ebp, dword [ebx]
xor ebx, ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x70], ebp
xor ebx, ebx
cmp ebp, ebx
jne 0x529ca7
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x94], edx
mov eax, dword [esp + 0x90]
mov dword [esp + 0x98], eax
cmp eax, 0
je 0x529c49
mov ecx, edx
mov dword [esp + 0x9c], ecx
mov dword [esp], ecx
mov dword [esp + 0xa0], eax
mov dword [esp + 4], eax
mov edx, dword [esp + 0x148]
mov ebx, dword [edx]
call ebx
mov ecx, dword [esp + 0x68]
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x529891
mov eax, dword [esp + 0x60]
mov dword [esp], 0x5be440
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004091c0
mov ebx, dword [esp + 0xc]
mov ebp, dword [ebx]
cmp ebp, 1
jg 0x529870
cmp byte [esp + 0x180], 0
jne 0x529870
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 4], ebx
call fcn.00528d80
lea esi, [esp + 8]
lea edi, [esp + 0x14c]
cld
call fcn.004524de
xor ebx, ebx
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], ebx
mov esi, dword [esp + 0x170]
mov ebx, dword [esp + 0x174]
mov dword [esp + 0xec], ebx
mov eax, dword [esp + 0x178]
mov ebx, dword [esp + 0x104]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x108]
mov dword [esp + 0xe0], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], esi
mov edi, dword [esp + 0xec]
mov dword [esp + 0xf0], eax
mov ebx, dword [esp + 0xe0]
mov edx, edi
add edi, ebx
cmp edi, eax
jbe 0x52976b
mov dword [esp], 0x5bca60
mov dword [esp + 0xd0], esi
mov dword [esp + 4], esi
mov dword [esp + 0xd4], edx
mov dword [esp + 8], edx
mov dword [esp + 0xd8], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x10], edi
call fcn.0043b580
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xd8], eax
cmp edi, eax
ja 0x529869
mov dword [esp + 0xd4], edi
mov eax, dword [esp + 0xe0]
mov ebx, dword [esp + 0xec]
mov ebp, esi
mov dword [esp + 0xd0], esi
shl ebx, 2
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xdc]
mov dword [esp + 4], ebx
mov ebx, eax
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.00452750
mov ebx, dword [esp + 0xd0]
mov dword [esp + 0x170], ebx
mov ebx, dword [esp + 0xd4]
mov dword [esp + 0x174], ebx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0x178], ebx
mov ecx, dword [esp + 0x170]
mov ebx, dword [esp + 0x174]
mov edx, dword [esp + 0x178]
mov eax, ebx
inc ebx
cmp ebx, edx
ja 0x529827
mov dword [esp + 0x174], ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 4
add ebx, ebp
mov ebp, dword [esp + 0x40]
mov dword [ebx], ebp
mov byte [esp + 0x180], 1
mov eax, dword [esp + 0x4c]
inc eax
jmp 0x529573
mov dword [esp], 0x5bca60
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043b580
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, ebx
inc ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], edx
mov dword [esp + 0x170], ecx
jmp 0x529806
call fcn.00427a00
ud2
mov esi, 0x612960
lea edi, [esp + 0x14c]
cld
call fcn.004524de
mov byte [esp + 0x180], 0
add esp, 0x140
ret
cmp byte [esp + 0x180], 0
jne 0x52981d
xor ebp, ebp
cmp ecx, ebp
je 0x52981d
movzx ebp, byte [ecx + 0xf]
mov ebx, ebp
and ebx, 0x1f
movzx ebp, bl
cmp ebp, 0x19
jne 0x52981d
mov dword [esp + 0x64], ecx
mov dword [esp], 0x5be440
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004091c0
mov ecx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xc]
mov ebp, dword [ebx]
cmp ebp, 0
jle 0x529920
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x58], 2
mov dword [esp], 0x5be440
mov dword [esp + 4], ecx
lea ebx, [esp + 0x88]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x58]
mov dword [esp + 0xc], ebx
call fcn.00406d30
jmp 0x52981d
xor ebp, ebp
cmp ecx, ebp
jne 0x529956
mov dword [esp], 0x5be440
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x58], 1
mov dword [esp], 0x5be440
mov dword [esp + 0x6c], ecx
mov dword [esp + 4], ecx
lea ebx, [esp + 0x88]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x58]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov eax, dword [esp + 0x60]
mov dword [esp], 0x5be440
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004091c0
mov ebx, dword [esp + 0xc]
mov ebp, dword [ebx]
cmp ebp, 1
jle 0x529c44
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x58], 2
mov dword [esp], 0x5be440
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x88]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x58]
mov dword [esp + 0xc], ebx
call fcn.00406d30
xor eax, eax
mov dword [esp + 0xbc], eax
mov ebx, dword [esp + 0x104]
mov dword [esp + 0xe8], ebx
mov ebx, dword [esp + 0x108]
mov dword [esp + 0xec], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xb8], eax
mov edi, dword [esp + 0xbc]
mov dword [esp + 0xc0], eax
mov esi, eax
mov ebx, dword [esp + 0xec]
mov edx, edi
add edi, ebx
cmp edi, eax
jbe 0x529a93
mov dword [esp], 0x5bca60
mov dword [esp + 0xdc], esi
mov dword [esp + 4], esi
mov dword [esp + 0xe0], edx
mov dword [esp + 8], edx
mov dword [esp + 0xe4], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x10], edi
call fcn.0043b580
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xe4], eax
cmp edi, eax
ja 0x529c3d
mov dword [esp + 0xe0], edi
mov eax, dword [esp + 0xec]
mov ebx, dword [esp + 0xbc]
mov ebp, esi
mov dword [esp + 0xdc], esi
shl ebx, 2
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xe8]
mov dword [esp + 4], ebx
mov ebx, eax
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.00452750
mov ecx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xe0]
mov esi, dword [esp + 0xe4]
mov dword [esp + 0xb8], ecx
mov edi, ecx
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xc0], esi
mov eax, ebx
inc ebx
cmp ebx, esi
ja 0x529c0b
mov edx, ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 4
add ebx, ebp
mov ebp, dword [esp + 0x40]
mov dword [ebx], ebp
xor ebx, ebx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x110], ebx
mov dword [esp + 0xb8], edi
mov dword [esp + 0x114], edi
mov dword [esp + 0xbc], edx
mov dword [esp + 0x118], edx
mov dword [esp + 0xc0], esi
mov dword [esp + 0x11c], esi
mov ecx, dword [esp + 0xac]
mov ebx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov eax, ebx
inc ebx
cmp ebx, edx
ja 0x529bc9
mov dword [esp + 0xb0], ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 0x10
add ebx, ebp
lea ebp, [esp + 0x110]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov ebp, 0x5ca820
mov dword [esp], ebp
call fcn.0040e5e0
jmp 0x52981d
mov dword [esp], 0x5ca820
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043b580
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, ebx
inc ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], edx
mov dword [esp + 0xac], ecx
jmp 0x529b9f
mov dword [esp], 0x5bca60
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043b580
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, edx
inc edx
mov ecx, edi
jmp 0x529b1a
call fcn.00427a00
ud2
jmp 0x5299f5
mov ebx, dword [esp + 0x78]
mov eax, dword [ebx + 4]
movzx ebp, byte [eax + 0xf]
mov ebx, ebp
and ebx, 0x1f
movzx ebp, bl
cmp ebp, 0x16
jne 0x529c8e
mov dword [esp], eax
call fcn.00527a40
mov ecx, dword [esp + 4]
mov eax, dword [esp + 8]
mov dword [esp + 0xa8], eax
mov dword [esp], eax
mov dword [esp + 0xa4], ecx
mov ebx, dword [ecx + 0x88]
call ebx
mov eax, dword [esp + 4]
mov dword [esp + 0x68], eax
mov dword [esp], eax
call fcn.00527860
mov ecx, dword [esp + 4]
mov eax, dword [esp + 8]
jmp 0x529615
mov edx, ebp
lea ebx, [esp + 0x8c]
mov edi, ebx
mov dword [esp + 0x80], ebp
cmp ebp, 0
je 0x529d09
add ebp, 3
mov dword [esp + 0x74], ebx
cmp ebx, 0
je 0x529d05
cmp byte [0x6cfdd8], 0
jne 0x529cec
mov dword [ebx], ebp
movzx esi, byte [edx + 1]
mov ebx, esi
shl ebx, 8
movzx esi, byte [edx + 2]
or ebx, esi
mov dword [edi + 4], ebx
jmp 0x5295ee
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov edi, dword [esp + 0x74]
mov edx, dword [esp + 0x80]
jmp 0x529cd5
mov dword [ebx], eax
jmp 0x529cca
mov dword [ebp], eax
jmp 0x529cbe
mov dword [ebx], eax
jmp 0x5295ce
call fcn.00427990
ud2
mov dword [ebx], eax
jmp 0x52958c
mov dword [ecx], eax
jmp 0x52948e
mov dword [ebx], eax
jmp 0x529336
call fcn.0044ff60
jmp fcn.005292d0