Function at 0x525af0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1c]
cmp eax, dword [ecx + 8]
jbe 0x5262b1
sub esp, 0x9c
mov ecx, dword [esp + 0xb0]
test ecx, ecx
je 0x525da2
cmp ecx, 1
jne 0x525b86
mov ebx, dword [esp + 0xac]
mov eax, dword [ebx]
mov ebx, dword [esp + 0xa8]
cmp ebx, 2
jl 0x525b42
mov ecx, dword [esp + 0xa0]
jmp 0x525b73
mov dword [esp + 0x78], eax
lea eax, [0x68d1c0]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 6
call fcn.0044b3e0
mov eax, dword [esp + 0xc]
mov ecx, eax
mov ebx, 6
mov eax, dword [esp + 0x78]
mul eax
nop
nop
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov eax, 2
jmp 0x526267
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x525bb8
mov ebx, dword [esp + 0xa0]
lea ebp, [ebx + eax*4 - 4]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
lea edi, [esi + edx*4 - 4]
cmp edi, ebp
jne 0x525bcd
xor eax, eax
xor ebx, ebx
jmp 0x525bcd
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov ebx, dword [esp + 0xa0]
cmp dword [0x8c1888], ecx
jg 0x525cc6
mov ebp, dword [0x8c188c]
cmp ecx, ebp
jl 0x525bf3
nop
mov edi, ecx
xor ecx, ecx
mov dword [esp + 0x74], ecx
mov ecx, edi
jmp 0x525e82
mov ebp, ecx
shl ecx, 1
cmp eax, ecx
jl 0x525c06
jae 0x525c82
jmp 0x525e69
cmp ecx, 1
jne 0x525c47
lea eax, [0x68d1c0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044b3e0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, 1
mov ecx, 1
jmp 0x525c82
mov dword [esp + 0x68], ecx
lea eax, [0x68d1c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [ecx + 4]
mov dword [esp + 0x3c], eax
mov dword [esp + 8], eax
call fcn.0044b3e0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x84], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov esi, dword [esp + 0xac]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
call fcn.005253e0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x84]
mov edx, eax
jmp 0x525e22
mov ebp, ecx
shl ecx, 1
cmp eax, ecx
jl 0x525cd9
jae 0x525d55
jmp 0x525e19
cmp ecx, 1
jne 0x525d1a
lea eax, [0x68d1c0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044b3e0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, 1
mov ecx, 1
jmp 0x525d55
mov dword [esp + 0x6c], ecx
lea eax, [0x68d1c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [ecx + 4]
mov dword [esp + 0x40], eax
mov dword [esp + 8], eax
call fcn.0044b3e0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x40], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x88], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov esi, dword [esp + 0xac]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], edx
call fcn.00523b40
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x88]
mov edx, eax
jmp 0x525dd2
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xc0], eax
add esp, 0x9c
ret
mov eax, ebx
test eax, eax
jle 0x525de5
lea ebx, [eax - 1]
cmp edx, ebx
jbe 0x525e10
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x525dd0
mov edx, dword [esp + 0x40]
cmp eax, edx
ja 0x525e09
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], edx
add esp, 0x9c
ret
mov ecx, eax
call fcn.00462f90
mov eax, ebx
mov ecx, edx
call fcn.00462f50
mov edx, eax
call fcn.00462f90
mov eax, ebx
test eax, eax
jle 0x525e35
lea ebx, [eax - 1]
cmp edx, ebx
jbe 0x525e60
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x525e20
mov edx, dword [esp + 0x3c]
cmp eax, edx
ja 0x525e59
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], edx
add esp, 0x9c
ret
mov ecx, eax
call fcn.00462f90
mov eax, ebx
mov ecx, edx
call fcn.00462f50
mov edx, eax
call fcn.00462f90
sar ecx, 1
mov esi, dword [esp + 0x74]
inc esi
mov dword [esp + 0x74], esi
mov esi, dword [esp + 0xac]
cmp ecx, ebp
jg 0x525e70
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x64], ecx
mov ebp, dword [esp + 0x74]
cmp ebp, 0x20
sbb esi, esi
mov ecx, ebp
mov ebx, dword [esp + 0x64]
shl ebx, cl
and esi, ebx
cmp edx, esi
jb GetConsoleMode
lea ebx, [esi + esi*2]
shl ebx, 1
mov ebp, edi
shl edi, 1
cmp edi, ebx
jl 0x525ebb
mov ebx, edi
mov dword [esp + 0x48], esi
mov dword [esp + 0x50], edi
cmp ebx, eax
jg 0x525ed6
ja 0x526255
mov ecx, dword [esp + 0x8c]
jmp 0x525f50
cmp ebx, 1
jne 0x525f16
lea eax, [0x68d1c0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044b3e0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0x48]
mov eax, 1
mov ecx, ebx
mov ebx, 1
jmp 0x525f50
mov dword [esp + 0x44], ebx
lea eax, [0x68d1c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [ebx + 4]
mov dword [esp + 0x38], eax
mov dword [esp + 8], eax
call fcn.0044b3e0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0x48]
mov eax, dword [esp + 0x38]
mov ecx, ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x4c], eax
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov ebx, dword [esp + 0xac]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edx
call fcn.005256d0
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
cmp edx, ecx
jb 0x526250
mov eax, dword [esp + 0x48]
mov ebx, eax
shl eax, 1
cmp eax, ecx
ja 0x52624b
mov dword [esp + 0x7c], eax
mov ebp, ecx
sub ecx, eax
mov esi, edx
sub edx, eax
neg edx
mov edi, ebx
shl ebx, 3
sar edx, 0x1f
and ebx, edx
mov edx, esi
mov esi, dword [esp + 0x80]
add ebx, esi
test ecx, ecx
je 0x525feb
mov dword [esp], ebx
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.00463670
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x48]
mov ebx, dword [esp + 0xb0]
cmp ebx, edi
jle 0x5261f0
mov dword [esp], eax
call fcn.005262c0
mov eax, dword [esp + 4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov dword [esp + 0x60], ebx
nop
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0x48]
mov edi, esi
jmp 0x526028
mov esi, ebx
mov ebx, dword [esp + 0x60]
test esi, esi
jle 0x52604b
lea ebx, [esi - 1]
cmp edi, ebx
jbe WriteFile
mov dword [esp + 0x70], esi
mov esi, dword [ebp + esi*4 - 4]
test esi, esi
je WriteConsoleW
mov ebx, dword [esp + 0x60]
mov esi, dword [esp + 0x70]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xb4]
cmp eax, esi
jb 0x526239
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
sub eax, edi
mov dword [esp + 0x58], eax
mov ecx, eax
neg eax
mov edx, edi
shl edi, 2
sar eax, 0x1f
and edi, eax
lea eax, [ebp + edi]
mov dword [esp + 0x90], eax
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0xb0]
sub ebx, edx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ecx
call fcn.00524a10
mov eax, dword [esp + 0x24]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x50]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x48]
mov dword [esp + 0x18], edi
call fcn.00524900
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x98]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x60]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x18], edi
call fcn.00524900
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x14], eax
call fcn.00525af0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x50]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x18], eax
call fcn.00524900
lea eax, [0x8f8210]
mov dword [esp], eax
lea eax, [0x6c4080]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 8], eax
call fcn.0046c870
mov edx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x80]
mov eax, ebp
jmp 0x5261f6
mov ebp, ebx
test ebp, ebp
jle 0x526209
lea ebx, [ebp - 1]
cmp eax, ebx
jbe 0x526230
mov edi, dword [esi + ebp*4 - 4]
test edi, edi
je 0x5261f4
cmp ebp, edx
ja 0x526229
mov dword [esp + 0xb8], esi
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xc0], edx
add esp, 0x9c
ret
mov ecx, ebp
call fcn.00462f90
mov ecx, eax
mov eax, ebx
call fcn.00462f50
mov ecx, esi
mov edx, eax
call fcn.00462f90
mov eax, ebx
mov ecx, edi
call fcn.00462f50
call fcn.00462fb0
call fcn.00462f90
mov ecx, ebx
mov edx, eax
call fcn.00462f90
mov ecx, esi
call fcn.00462f90
mov eax, ebp
test eax, eax
jle 0x52627b
lea ebp, [eax - 1]
cmp ebp, 2
jae 0x5262a4
mov esi, dword [ecx + eax*4 - 4]
test esi, esi
je 0x526265
cmp eax, ebx
ja DuplicateHandle
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ebx
add esp, 0x9c
ret
mov ecx, eax
mov edx, ebx
call fcn.00462f90
mov eax, ebp
mov ecx, 2
call fcn.00462f50
nop
call fcn.00461ac0
jmp fcn.00525af0