Function at 0x515290
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x85d3cc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x34]
cmp eax, dword [ecx + 8]
jbe 0x515b87
sub esp, 0xb4
lea eax, [0x69160c]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.004ba930
mov eax, dword [esp + 0xc]
test eax, eax
je 0x51532f
mov ecx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004d3d50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, str.___MCO1y_d_:_n37:_3234___s__vsh_ci_____tvrRuUeEaAlLsS01bBoOxX_nNiIfFpP01__ip53__000s__t.iv___:__________n__s__Pn___n__n___n__t__25__idLlLtLuMn__nOUCNST0b0x0X0otcp_v_s_n1.1intnil01__EOFudpdns::1setcgoftpsshSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDecUTC_mStdDltEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614NUL:_keyRSADSAURI_finptrobjgc__:_gp___in__n___n___NaN__P__MPC___end___..._:_n___pc__G125625nanmap_:_TTLMD4MD5adxaesshaavxfmaSET____25nethelpmono____35_131_1_s_strue_n__r_tHOME_n_r_t_e_0muinteEpPreadpipefileopenStat___mdnsdialbind__r_t_n_on_unixicmpigmpftpshttppop3smtpJuneJuly_as_hourEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDT_513.com.exe.bat.cmdpathnullbooljsonquitallgallprootitabsbrkidledead_is_LEAFbase_of___GOGC____pcInf_Inf:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp__m3125Atoiint8chanfunccallkind___bitsNameTypeermssse3avx2bmi1bmi2asn1tag:_nil_false_s_s_ne_31me_0m_valuefloat____sErrorsvqxXchdirwritechmodchowncloseLstathostsfileshttpsimap2imap3imapspop3sMarchAprilmonthLocal053004300545063003300845103012451345_0930_s__dtls:_EarlyECDSAarrayntohsdefersweepschedhchansudoggscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_and__tab_top_...___fp:1562578125int16int32int64uint8slice__at_ClassGreekSHA_1P_224P_256P_384P_521sse41sse42ssse3parsedaemonconfig__monou0026u003cu003e38_5_9getentpasswd_e_35m____s_n__helpstring_n_____tStringFormat__byte_for_removenetdns.localreturnlisten.onionipnetsocketacceptdomaingophertelnetSundayMondayFridayAugustminutesecondUTC_11UTC_02UTC_08UTC_09UTC12UTC13______nexec:_X25519_w_.0w__not_objectnumberhangupkilledsysmontimersefenceselect_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_base_390625uint16uint32uint64structchan____chan_ValueGetACP__val_LengthheaderAnswerCommonrdtscppopcntSTREETcmd_goshowcfgversion38_5_3338_5_2238_5_28Usage:_nbooleanbdoUxXvintegercomplexfloat32float64windowsconsolerunningwsarecvwsasendconnectlookup_TuesdayJanuaryOctoberMUI_StdMUI_DltPATHEXTderivedInitialDES_CBCEd25519MD2_RSAMD5_RSAserial:number_abortedCopySidWSARecvWSASendsignal_forcegccpuprofunknowngctraceIO_waitsyscallwaitingUNKNOWN:events__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_19531259765625invaliduintptrSwapperChanDir_Value_Convert::ffff:nil_keyanswersSHA_224SHA_256SHA_384SHA_5122.5.4.62.5.4.32.5.4.52.5.4.72.5.4.82.5.4.9os_execruntimeinternshow_pid__option__daemon__config38_5_20938_5_20538_5_16638_5_20838_5_124DEK_Infokernel32durationGoString01234567beEfFgGvFullPath_::1_:53continue_gatewayshutdowninvalid_address_readfromwsaioctlunixgramThursdaySaturdayFebruaryNovemberDecember__Month_CurveID_DOWNGRD
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0xffffffff
call fcn.004d2fe0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x28], ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x515a93
lea edi, [esp + 0x94]
xor eax, eax
call fcn.00468278
lea ecx, [0x69107b]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], 4
lea ecx, [0x69107f]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], 4
lea ecx, [0x691083]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], 4
lea ecx, [0x691087]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], 4
mov eax, 4
mov ecx, 4
lea edx, [esp + 0x94]
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x58], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], ebp
lea esi, [0x690f2e]
mov dword [esp + 8], esi
mov dword [esp + 0xc], 3
call fcn.004d2bf0
mov eax, dword [esp + 0x10]
test eax, eax
jge 0x515610
lea eax, [0x69b9f4]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00495870
movzx eax, byte [esp + 0x10]
test al, al
je 0x51541e
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
jmp 0x5155bf
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
lea eax, [0x6f000c]
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], 1
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x90], ecx
lea edx, [esp + 0x84]
mov dword [esp], edx
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.005114a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x10], edx
call fcn.00515110
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x5154de
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
jmp 0x5155bf
mov eax, dword [0x832480]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x40], edx
mov dword [esp], eax
call fcn.004dadc0
cmp dword [esp + 8], 1
jne 0x51554d
mov eax, dword [esp + 4]
cmp byte [eax], 0x30
jne 0x51554d
mov eax, dword [0x832480]
mov dword [esp], eax
call fcn.004dabe0
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
add esp, 0xb4
ret
lea eax, [0x66fbc0]
mov dword [esp], eax
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xbc]
mov dword [eax + 4], ecx
mov edx, dword [0x85d680]
test edx, edx
jne 0x51557c
mov edx, dword [esp + 0xb8]
jmp 0x51558a
call fcn.00468030
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
mov dword [eax], edx
mov ebx, dword [0x832860]
mov ebp, dword [0x832864]
mov dword [eax + 8], ebx
mov ebx, dword [0x85d680]
test ebx, ebx
je 0x5155ac
call fcn.00468030
mov dword [edi], ebp
mov dword [eax + 0xc], ebp
mov ecx, eax
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x68]
lea eax, [0x6f1da0]
mov dword [esp + 0x44], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x40], edx
lea ebp, [0x69108b]
mov dword [esp], ebp
mov dword [esp + 4], 4
call fcn.004ba930
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00511140
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x24], ecx
xor edx, edx
jmp 0x515735
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x58]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x10], edx
call fcn.00515110
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
test eax, eax
je 0x5156f3
mov dword [esp + 0x70], edx
mov dword [esp + 0x5c], ecx
lea eax, [0x66fbc0]
mov dword [esp], eax
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xbc]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x51568d
mov ecx, dword [esp + 0xb8]
jmp 0x51569b
call fcn.00468030
mov ecx, dword [esp + 0xb8]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x70]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x5156b4
mov ecx, dword [esp + 0x5c]
jmp 0x5156bf
call fcn.00468030
mov ecx, dword [esp + 0x5c]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
lea ecx, [0x6f1da0]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], eax
add esp, 0xb4
ret
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
add esp, 0xb4
ret
mov ebx, dword [esp + 0x48]
lea edx, [ebx + 1]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x24]
cmp edx, ecx
jge 0x5159c0
mov dword [esp + 0x48], edx
lea ecx, [eax + edx*8]
mov ebx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x7c], ecx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 0x80], ebx
lea ebp, [esp + 0x74]
mov dword [esp], ebp
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.005114a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x10], edx
call fcn.00515110
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x515726
mov eax, dword [esp + 0x14]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], ecx
mov edx, dword [esp + 0x44]
test edx, edx
je 0x51587e
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
call fcn.004be050
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0x54]
mov dword [esp], ebx
mov ebp, dword [esp + 0x2c]
mov dword [esp + 4], ebp
call fcn.004be050
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x51598d
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x51598d
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.004bf6b0
movzx eax, byte [esp + 0x10]
test al, al
je 0x51598d
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00510cf0
movzx eax, byte [esp + 8]
test al, al
jne 0x51595a
mov eax, dword [0x832480]
mov dword [esp], eax
call fcn.004dadc0
cmp dword [esp + 8], 1
jne 0x5158b9
mov eax, dword [esp + 4]
cmp byte [eax], 0x30
je 0x51594c
lea eax, [0x66fbc0]
mov dword [esp], eax
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xbc]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x5158e8
mov ecx, dword [esp + 0xb8]
jmp 0x5158f6
call fcn.00468030
mov ecx, dword [esp + 0xb8]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [0x832860]
mov edx, dword [0x832864]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
je 0x515918
call fcn.00468030
mov dword [edi], edx
mov dword [eax + 0xc], edx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xc4], ecx
lea ecx, [0x6f1da0]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], eax
add esp, 0xb4
ret
mov eax, dword [0x832480]
mov dword [esp], eax
call fcn.004dabe0
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
add esp, 0xb4
ret
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xcc], eax
add esp, 0xb4
ret
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x515a5f
lea eax, [0x66fbc0]
mov dword [esp], eax
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xbc]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x5159fb
mov ecx, dword [esp + 0xb8]
jmp 0x515a09
call fcn.00468030
mov ecx, dword [esp + 0xb8]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [0x832868]
mov edx, dword [0x83286c]
mov dword [eax + 8], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
je 0x515a2b
call fcn.00468030
mov dword [edi], edx
mov dword [eax + 0xc], edx
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
lea ecx, [0x6f1da0]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], eax
add esp, 0xb4
ret
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xcc], eax
add esp, 0xb4
ret
inc edx
mov eax, dword [esp + 0x50]
cmp edx, ecx
jge 0x515b7c
lea edi, [eax + edx*8]
mov eax, dword [edi + 4]
test eax, eax
je 0x515a8e
mov dword [esp + 0x48], edx
mov edi, dword [edi]
cmp byte [edi], 0x2e
je 0x515afe
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov dword [esp + 0x58], ebp
mov dword [esp], 0
lea ecx, [0x6f000c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.00451270
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x30]
inc esi
cmp ebx, esi
jae 0x515b49
mov dword [esp + 0x38], eax
mov dword [esp + 0x60], edi
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x661ce0]
mov dword [esp + 0x10], eax
call fcn.0044d800
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x48]
mov edi, dword [esp + 0x60]
lea ecx, [ebp + esi*8 - 4]
mov dword [ecx], eax
mov eax, dword [0x85d680]
lea ecx, [ebp + esi*8 - 8]
test eax, eax
je 0x515b71
mov eax, edi
call fcn.00468040
mov dword [edi], eax
mov edx, dword [ecx]
mov dword [edi + 4], edx
mov edx, dword [esp + 0x48]
mov edi, eax
mov dword [ecx], edi
mov ecx, dword [esp + 0x28]
jmp 0x515a8e
mov eax, ebx
mov ecx, esi
mov edx, ebp
jmp 0x5153ae
call fcn.00466c30
jmp fcn.00515290