Function at 0x52d610
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6e06e0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x52d928
sub esp, 0x58
mov eax, 0
mov dword [esp + 0x54], eax
mov byte [esp + 0x2f], 0
mov eax, dword [edx + 0xc]
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov ebx, dword [esp + 0x6c]
test ebx, ebx
jne 0x52d90f
mov dword [esp + 0x38], eax
mov dword [esp], ecx
mov dword [esp + 4], edx
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xc], ecx
call sym.path_filepath.Rel
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x52d8fb
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x30], ebx
mov ebp, dword [esp + 0x68]
mov dword [esp], ebp
call ecx
movzx eax, byte [esp + 4]
test al, al
je 0x52d76d
mov dword [esp], 0
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
lea eax, str._a______SCZy__qe_Ciapai_____:_01.__________n__s____Pn___n__n___n__t__000s..:__r_n______::_rwro__25__nLlLtLuMnCcCfCoCsLmLoMcMeNdNlNoPcPdPePfPiPoPsScSkSmSoZlZpZsYiE:__idD_sSwWallcmdnac.7zintnil____NUL:_finptrobjgc__:_gp___in__n___n___NaN__P_m__MPC___end___..._:_npc__GSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDecUTCStdDltEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614____EOFarmGBKSSLUEMLogappmap125625adxaesshaavxfmanet_:_HanLaoMroNkoVaitcpudpdnscgo:_____modehostPath_t7z_mx3__s_eaioxdlp.ziptrueuintreadpipefileopenStat.com.exe.bat.cmdpathallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pcInf_Inf:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp__mJuneJuly_as_hourEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDTnullbooljsonquitbindi386i686ia64logsdumpBYODDump.ini.eni.ejs.cfg.txt.dmp_..._to_.logsoftint8chanfunccallkind_on_3125Atoiermssse3avx2bmi1bmi2AhomChamKawiLisuMiaoModiNewaThaiTotoicmpigmpcap_____fail_d_MB_used_freeStateDate:User:_c:_d_s__sfalsevaluefloat____s_nil_ErrorchdirwritemkdirchmodcloseLstatdefersweepschedhchansudoggscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_and__tab_top_...___fp:MarchAprilmonthLocal053004300545063003300845103012451345_0930.testarrayntohsCountcpu_di_d86Call_.json.conf.coreint16int32int64uint8slice1562578125sse41sse42ssse3GreekAdlamBamumBatakBuhidDograKhmerLatinLimbuNushuOghamOriyaOsageRunicTakriTamilfilesmatchrune_module_total__Level:Event_7z.exeWARN:_INFO:_string_n_____tStringFormat__byteremoveexec:_sysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_base_SundayMondayFridayAugustminutesecondUTC_11UTC_02UTC_08UTC_09UTC12UTC13hangupkilledlistensocketServerx86_64GetAceGetACPsendtoPUBLICaTrustconfigigslogSystemuint16uint32uint64structchan____chan_Value390625rdtscppopcntcmd_gonetdnsCommonArabicBrahmiCarianChakmaCopticGothicHangulHatranHebrewKaithiKhojkiLepchaLycianLydianRejangSyriacTai_LeTangsaTangutTeluguThaanaWanchoYezidiempty_rune1_headerAnswerwindowsapphomeSangfor_.2f___Source:_f:textUnknownunknownERROR:_ingresssys_logUsage:_nfloat32float64readdirconsolePATHEXTforcegccpuprofgctraceIO_waitrunningsyscallwaitingUNKNOWN:events__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_TuesdayJanuaryOctoberMUI_StdMUI_DltDEFAULTBOM:__vabortedCopySidWSARecvWSASendconnectsignal_aarch64FreeSidSleepExGB18030APPDATAsangfordlp_sysdlp_usrIngressAppHomenac_logVersioninvaliduintptrSwapperChanDir_Value_19531259765625os_execruntimeAvestanBengaliBrailleCypriotDeseretElbasanElymaicGranthaHanunooKannadaMakasarMandaicMarchenMultaniMyanmarOsmanyaSharadaShavianSiddhamSinhalaSogdianSoyomboTagalogTibetanTirhuta_v:__xpdh.dllInstAltInstNopalt____nop____any____internlog_sizelog_pathexplorerapp_homewevtutil_rd:truesys_infodurationGoStringFullPathscavengepollDescrwmutexWrwmutexRtraceBufdeadlockraceFinipanicnilcgocheckrunnableeax_____ebx_____ecx_____edx_____edi_____esi_____ebp_____esp_____eip_____eflags__cs______fs______gs_______is_not__pointerBAD_RANK_status_unknown_trigger_npages_nalloc_nfreedruntime._signal_reflect._newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_etypes_ThursdaySaturdayFebruaryNovemberDecember__Month_no_anodeCancelIoReadFileAcceptExWSAIoctlshutdown_NewEnum_02d_02dEqualSidSetEventIsWindowrecvfrombyod_logeaio_logeaio_knlSysWOW64System32.log.bakauditlogworkconfSecurityxdlp_log48828125strconv.parsing_ParseIntwsaioctlnet_httpgo_buildx509sha1bad_instArmenianBalineseBopomofoBugineseCherokeeCyrillicDuployanEthiopicGeorgianGujaratiGurmukhiHiraganaJavaneseKatakanaKayah_LiLinear_ALinear_BMahajaniOl_ChikiPhags_PaTagbanwaTai_ThamTai_VietTifinaghUgariticVithkuqiInstFailInstRune_:word:_ClassANYQuestionEAIO3_LOGcpu_usageEvent_ID
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
call sym.runtime.concatstring2
mov eax, dword [esp + 0x18]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], ecx
lea edx, [0x573ce0]
mov dword [esp], edx
call sym.runtime.newobject
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x34]
mov dword [eax + 4], ecx
mov ecx, dword [0x6e0840]
test ecx, ecx
jne 0x52d71a
mov ecx, dword [esp + 0x44]
jmp 0x52d725
call sym.runtime.gcWriteBarrier1
mov ecx, dword [esp + 0x44]
mov dword [edi], ecx
mov dword [eax], ecx
mov word [eax + 0xe], 8
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call sym.github.com_alexmullins_zip._Writer_.CreateHeader
mov eax, dword [esp + 0x10]
test eax, eax
je 0x52d759
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
add esp, 0x58
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
add esp, 0x58
ret
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call sym.github.com_alexmullins_zip.FileInfoHeader
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x52d8e7
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [0x6e0840]
test ecx, ecx
jne 0x52d7a8
mov ecx, dword [esp + 0x40]
jmp 0x52d7b8
call sym.runtime.gcWriteBarrier2
mov ecx, dword [esp + 0x40]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov word [eax + 0xe], 8
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x38]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
lea eax, [0x587a8b]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0x22
call sym.github.com_alexmullins_zip._Writer_.Encrypt
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x52d8d3
mov dword [esp + 0x3c], edx
mov dword [esp + 0x48], ecx
nop
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call sym.os.OpenFile
mov eax, dword [esp + 0x14]
test eax, eax
je 0x52d848
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
add esp, 0x58
ret
mov eax, dword [esp + 0x10]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
lea ecx, [sym.UEInsight_pkg_common.ZipCompress.func1.1]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x54], ecx
mov byte [esp + 0x2f], 1
nop
mov ecx, dword [esp + 0x48]
mov dword [esp], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
lea ecx, [0x5b6bf8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call sym.io.copyBuffer
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
mov byte [esp + 0x2f], 0
mov edx, dword [esp + 0x54]
mov eax, dword [edx]
call eax
add esp, 0x58
ret
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
add esp, 0x58
ret
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
add esp, 0x58
ret
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
add esp, 0x58
ret
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x70]
mov dword [esp + 0x78], eax
add esp, 0x58
ret
call sym.runtime.morestack
jmp sym.UEInsight_pkg_common.ZipCompress.func1