Function at 0x535cf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0xb0
call fcn.005a74b0
mov eax, dword [0x609e44]
xor eax, esp
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xd4]
push ebx
mov dword [esp + 0x68], eax
xor ebx, ebx
mov eax, dword [esp + 0xdc]
push ebp
mov ebp, dword [esp + 0xd0]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0xe4]
push esi
mov esi, dword [esp + 0xc8]
mov dword [esp + 0x20], eax
mov eax, esi
shr eax, 3
push edi
mov dword [esp + 0x54], ecx
xor edi, edi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x38], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x60], eax
call fcn.0053aba0
mov dword [esp + 0x2c], eax
mov ecx, 2
mov dword [esp + 0x34], ecx
test eax, eax
je 0x536573
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x535dcd
cmp esi, 0xa0
jne 0x535db5
call fcn.00526b30
jmp 0x535dc9
cmp esi, 0xe0
jne 0x535dc4
call fcn.00526b40
jmp 0x535dc9
call fcn.00526b50
mov dword [esp + 0x18], eax
push eax
call fcn.004ff280
mov esi, eax
add esp, 4
mov eax, dword [esp + 0x54]
mov dword [esp + 0x30], esi
cmp dword [eax + 8], ebx
je 0x535df3
cmp dword [eax + 0xc], ebx
je 0x535df3
cmp dword [esp + 0xdc], ebx
jl 0x535e53
test ebp, ebp
push 0x159
cmove ebp, esi
push 0x5d373c
push ebp
mov dword [esp + 0x2c], ebp
call fcn.004fd490
mov ebx, eax
add esp, 0xc
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x535e2c
push 0x15e
push 0x5d373c
push ebp
call fcn.004fd490
add esp, 0xc
mov dword [esp + 0x38], eax
test ebx, ebx
je 0x536573
test eax, eax
je 0x536573
mov eax, dword [esp + 0x40]
test eax, eax
je 0x535e53
push ebp
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
call fcn.00571100
mov ebp, eax
mov dword [esp + 0x10], ebp
test ebp, ebp
je 0x536575
call fcn.005332b0
mov dword [esp + 0x44], eax
test eax, eax
je 0x536575
push ebp
call fcn.00571190
push ebp
call fcn.005710a0
push dword [esp + 0x18]
mov ebp, eax
call fcn.005710a0
push dword [esp + 0x1c]
mov dword [esp + 0x68], eax
call fcn.005710a0
push dword [esp + 0x20]
mov dword [esp + 0x60], eax
call fcn.005710a0
push dword [esp + 0x24]
mov dword [esp + 0x88], eax
call fcn.005710a0
push dword [esp + 0x28]
mov dword [esp + 0x58], eax
call fcn.005710a0
add esp, 0x1c
mov dword [esp + 0x14], eax
test eax, eax
je 0x536338
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x535f11
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x28], eax
test eax, eax
je 0x535f11
cmp dword [esp + 0xdc], edi
jl 0x5362e7
push dword [esp + 0x20]
push ebx
push dword [esp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x5362e7
mov esi, dword [esp + 0x10]
push esi
call fcn.005710a0
push esi
mov dword [esp + 0x24], eax
call fcn.005710a0
add esp, 8
mov dword [esp + 0x28], eax
test eax, eax
je 0x536338
mov eax, dword [esp + 0xc8]
dec eax
push eax
mov dword [esp + 0x70], eax
call fcn.00515d80
push eax
push dword [esp + 0x1c]
call fcn.00516a30
add esp, 0xc
test eax, eax
je 0x536338
mov esi, dword [esp + 0x40]
nop
mov edi, dword [esp + 0x20]
push dword [esp + 0x48]
push 0
push dword [esp + 0x2c]
call fcn.00583f60
inc dword [esp + 0x54]
add esp, 0xc
test eax, eax
je 0x536338
test esi, esi
jne 0x535f98
push edi
push ebx
call fcn.004ff2b0
add esp, 8
test eax, eax
jle 0x536338
push 0
push dword [esp + 0x1c]
lea eax, [esp + 0x84]
push 0
push eax
push edi
push ebx
call fcn.0053a670
add esp, 0x18
test eax, eax
je 0x536338
mov ecx, dword [esp + 0x30]
lea esi, [esp + 0x7c]
mov edx, dword [esp + 0x60]
cmp ecx, edx
jle 0x535fd2
mov eax, ecx
sub eax, edx
add esi, eax
cmp ecx, edx
jge 0x535ff1
mov eax, edx
sub eax, ecx
push eax
lea eax, [esp + 0x80]
add eax, ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x6c]
add esp, 0xc
push dword [esp + 0x28]
or byte [esi], 0x80
or byte [esi + edx - 1], 1
push edx
push esi
call fcn.005151d0
add esp, 0xc
test eax, eax
je 0x536338
push dword [esp + 0x24]
mov esi, dword [esp + 0x44]
xor eax, eax
test esi, esi
setne al
push eax
push dword [esp + 0x18]
push 0x40
push dword [esp + 0x38]
call fcn.00584230
add esp, 0x14
test eax, eax
jg 0x536066
jne 0x536338
test esi, esi
je 0x535f64
push 0x1af
push 0x5d373c
push 0x71
push 0x7e
push 0xa
xor esi, esi
call fcn.004fe660
mov ebp, dword [esp + 0x24]
add esp, 0x14
jmp 0x536578
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x536079
push edi
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov esi, dword [esp + 0x24]
push 0
push 2
push esi
call fcn.00583f60
add esp, 0xc
test eax, eax
je 0x536338
push 0
push 3
push esi
call fcn.00583f60
add esp, 0xc
test eax, eax
je 0x536338
mov ecx, dword [esp + 0x30]
xor edi, edi
mov eax, dword [esp + 0xc8]
xor edx, edx
shl ecx, 3
dec eax
div ecx
mov dword [esp + 0x50], edi
mov esi, eax
mov dword [esp + 0x64], esi
test edi, edi
je 0x5360e1
push edi
push 0
push dword [esp + 0x2c]
call fcn.00583f60
add esp, 0xc
test eax, eax
je 0x536338
push 0
push dword [esp + 0x50]
call fcn.00515cd0
add esp, 8
xor edi, edi
test esi, esi
js 0x5361a8
mov ecx, dword [esp + 0x20]
xor esi, esi
lea eax, [ecx - 1]
mov dword [esp + 0x68], eax
test eax, eax
js 0x53611b
nop word [eax + eax]
add byte [eax + ebx], 1
jne 0x53611b
sub eax, 1
jns 0x536110
push 0
push dword [esp + 0x1c]
lea eax, [esp + 0x84]
push 0
push eax
push ecx
push ebx
call fcn.0053a670
add esp, 0x18
test eax, eax
je 0x536338
push ebp
push dword [esp + 0x34]
lea eax, [esp + 0x84]
push eax
call fcn.005151d0
add esp, 0xc
test eax, eax
je 0x536338
push esi
push ebp
push ebp
call fcn.00516a30
add esp, 0xc
test eax, eax
je 0x536338
mov eax, dword [esp + 0x4c]
push ebp
push eax
push eax
call fcn.00571430
add esp, 0xc
test eax, eax
je 0x536338
mov ecx, dword [esp + 0x30]
inc edi
lea eax, [ecx*8]
mov ecx, dword [esp + 0x20]
add esi, eax
mov eax, dword [esp + 0x68]
cmp edi, dword [esp + 0x64]
jle 0x536106
mov esi, dword [esp + 0x64]
push dword [esp + 0x6c]
mov edi, dword [esp + 0x50]
push edi
call fcn.005159f0
add esp, 8
test eax, eax
je 0x536338
push edi
mov edi, dword [esp + 0x74]
push edi
call fcn.00515780
add esp, 8
test eax, eax
je 0x536338
push dword [esp + 0x14]
push edi
push edi
call fcn.00571430
add esp, 0xc
test eax, eax
je 0x536338
push dword [esp + 0x28]
push ebp
call fcn.00516b60
add esp, 8
test eax, eax
je 0x536338
push dword [esp + 0x10]
push ebp
push edi
push dword [esp + 0x48]
push 0
call fcn.00572350
add esp, 0x14
test eax, eax
je 0x536338
call fcn.00515d80
push eax
push dword [esp + 0x40]
push ebp
call fcn.005714c0
add esp, 0xc
test eax, eax
je 0x536338
push ebp
push edi
mov edi, dword [esp + 0x24]
push edi
call fcn.005714c0
add esp, 0xc
test eax, eax
je 0x536338
push dword [esp + 0x14]
push edi
call fcn.00515410
add esp, 8
test eax, eax
js 0x536284
mov edi, dword [esp + 0x24]
push edi
push 1
push dword [esp + 0x18]
push 0x40
push dword [esp + 0x2c]
call fcn.00584230
add esp, 0x14
test eax, eax
jg 0x5362ce
jne 0x536338
mov edi, dword [esp + 0x50]
mov eax, dword [esp + 0xc8]
inc edi
shl eax, 2
mov dword [esp + 0x50], edi
cmp edi, eax
jl 0x5360c6
mov esi, dword [esp + 0x40]
test esi, esi
je 0x535f60
push 0x208
push 0x5d373c
push 0x70
push 0x7e
push 0xa
xor esi, esi
call fcn.004fe660
mov ebp, dword [esp + 0x24]
add esp, 0x14
jmp 0x536578
push 1
push 2
push edi
call fcn.00583f60
add esp, 0xc
test eax, eax
je 0x536338
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x30]
call fcn.00515d80
push eax
push dword [esp + 0x20]
push dword [esp + 0x1c]
call fcn.005714c0
add esp, 0xc
test eax, eax
je 0x536338
push dword [esp + 0x10]
push dword [esp + 0x2c]
push dword [esp + 0x1c]
push 0
push ebp
call fcn.00572350
add esp, 0x14
test eax, eax
je 0x536338
cmp dword [esp + 0xdc], 0
jge 0x536341
push 2
push dword [esp + 0x18]
call fcn.00515cd0
add esp, 8
test eax, eax
jne 0x53634a
mov ebp, dword [esp + 0x10]
jmp 0x536575
mov ecx, 1
mov dword [esp + 0x34], ecx
push dword [esp + 0x10]
push dword [esp + 0x20]
push dword [esp + 0x4c]
call fcn.00533330
add esp, 0xc
test eax, eax
je 0x536338
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0xdc]
nop dword [eax]
test eax, eax
js 0x536438
push 0
push dword [esp + 0x1c]
mov byte [esp + 0x84], al
mov eax, ecx
push dword [esp + 0x34]
shr eax, 8
mov byte [esp + 0x89], al
mov byte [esp + 0x8a], cl
call fcn.0053a860
add esp, 0xc
test eax, eax
je 0x536338
push dword [esp + 0x20]
push dword [esp + 0x3c]
push dword [esp + 0x34]
call fcn.0053aa10
add esp, 0xc
test eax, eax
je 0x536338
push 4
push str.ggencryptodsadsa_gen.c
push dword [esp + 0x34]
call fcn.0053aa10
add esp, 0xc
test eax, eax
je 0x536338
push 3
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x34]
call fcn.0053aa10
add esp, 0xc
test eax, eax
je 0x536338
push 0
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x34]
call fcn.0053a7c0
add esp, 0xc
test eax, eax
je 0x536338
push dword [esp + 0x14]
lea eax, [esp + 0x80]
push esi
push eax
call fcn.005151d0
add esp, 0xc
test eax, eax
je 0x536338
push dword [esp + 0x44]
push dword [esp + 0x14]
push dword [esp + 0x24]
push ebp
push dword [esp + 0x24]
push dword [esp + 0x6c]
call fcn.0056fae0
add esp, 0x18
test eax, eax
je 0x536338
push dword [esp + 0x58]
call fcn.00515990
add esp, 4
test eax, eax
je 0x5364bd
mov eax, dword [esp + 0xdc]
test eax, eax
jns 0x53649b
call fcn.00515d80
push eax
mov eax, dword [esp + 0x18]
push eax
push eax
call fcn.00571430
add esp, 0xc
test eax, eax
je 0x536338
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x34]
inc ecx
mov dword [esp + 0x34], ecx
test eax, eax
js 0x536438
cmp ecx, 0xffff
jbe 0x536370
mov ebp, dword [esp + 0x10]
jmp 0x536575
push 1
push 3
push dword [esp + 0x2c]
call fcn.00583f60
add esp, 0xc
test eax, eax
je 0x536338
mov dword [esp + 0x3c], 1
nop dword [eax]
mov esi, dword [esp + 0x54]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esi + 8]
cmp ebp, eax
je 0x536501
push eax
call fcn.00515890
push ebp
call fcn.00515800
add esp, 8
mov dword [esi + 8], eax
mov eax, dword [esi + 0xc]
mov ebp, dword [esp + 0x28]
cmp ebp, eax
je 0x53651e
push eax
call fcn.00515890
push ebp
call fcn.00515800
add esp, 8
mov dword [esi + 0xc], eax
push dword [esi + 0x10]
call fcn.00515890
push dword [esp + 0x5c]
call fcn.00515800
add esp, 8
mov dword [esi + 0x10], eax
cmp dword [esi + 8], 0
je 0x536338
cmp dword [esi + 0xc], 0
je 0x536338
test eax, eax
je 0x536338
mov eax, dword [esp + 0x74]
test eax, eax
je 0x53655b
mov dword [eax], edi
mov eax, dword [esp + 0x78]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x3c]
test eax, eax
je 0x536578
mov ecx, dword [esp + 0x34]
mov dword [eax], ecx
jmp 0x536578
xor ebp, ebp
or esi, 0xffffffff
push 0x259
push 0x5d373c
push ebx
call fcn.004fd4c0
mov eax, dword [esp + 0x44]
add esp, 0xc
cmp dword [esp + 0x5c], eax
je 0x5365a8
push 0x25b
push 0x5d373c
push eax
call fcn.004fd4c0
add esp, 0xc
test ebp, ebp
je 0x5365b5
push ebp
call fcn.00571020
add esp, 4
push ebp
call fcn.00571060
push dword [esp + 0x48]
call fcn.00533260
push dword [esp + 0x34]
call fcn.0053ab80
mov ecx, dword [esp + 0xc8]
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005a6fed
add esp, 0xb0
ret