Function at 0x5a9e70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x74]
cmp eax, dword [ecx + 8]
jbe 0x5aa6a0
sub esp, 0xf4
mov eax, 0
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], eax
mov byte [esp + 0x2b], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
call fcn.005a8e80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x10c], eax
mov dword [esp + 0x110], edx
test ebx, ebx
jne 0x5a9fd9
mov dword [esp + 0x64], ecx
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
lea edx, [0x5aa6f0]
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], ecx
lea edx, [esp + 0x90]
mov dword [esp + 0xf0], edx
mov byte [esp + 0x2b], 1
lea edi, [esp + 0xc0]
xor eax, eax
call fcn.00456d55
mov dword [esp + 0xc0], 0x2c
mov ecx, dword [esp + 0xfc]
mov edx, dword [ecx + 0x28]
mov ebx, dword [ecx + 0x24]
test edx, edx
jne 0x5a9fa3
mov dword [esp + 0x4c], 0
mov dword [esp + 0x4c], 1
mov edx, 1
lea ebx, [esp + 0x4c]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x6c], ebx
lea eax, [0x72a1c0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], edx
call fcn.004426a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x6c]
mov ebx, ecx
xor ebp, ebp
xor esi, esi
jmp 0x5aa01c
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
add esp, 0xf4
ret
mov ecx, dword [esp + 0x50]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x6c]
mov ecx, ebx
mov esi, edx
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x2c]
cmp ebp, ebx
jge 0x5aa100
mov edx, dword [edx + ebp*4]
test edx, edx
je 0x5aa0fc
mov dword [esp + 0x50], ebp
mov dword [esp + 0x44], ecx
mov dword [esp + 0x74], eax
mov dword [esp + 0x40], esi
mov eax, dword [0x8da14c]
lea ecx, [0x7359a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0040e050
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
movzx edx, byte [esp + 0x10]
test dl, dl
je 0x5aa0eb
test eax, eax
jbe 0x5aa68a
mov edx, dword [esp + 0x40]
inc edx
mov ebx, dword [esp + 0x44]
cmp ebx, edx
jb 0x5aa088
mov eax, dword [esp + 0x74]
jmp 0x5aa0c4
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x72a1c0]
mov dword [esp + 0x10], eax
call fcn.00442820
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebx, ecx
mov ecx, dword [esp + 0x5c]
mov ebp, dword [0x900e70]
lea edi, [eax + edx*4 - 4]
test ebp, ebp
jne 0x5aa0db
mov dword [eax + edx*4 - 4], ecx
jmp 0x5aa001
mov ebp, eax
mov eax, ecx
call fcn.00456ac0
mov eax, ebp
jmp 0x5aa001
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x44]
mov eax, dword [esp + 0x74]
jmp 0x5aa001
xor esi, esi
xor eax, eax
test eax, eax
je 0x5aa127
mov dword [esp + 0xc4], 1
mov dword [esp + 0xc8], esi
test esi, esi
jbe 0x5aa681
mov dword [esp + 0xcc], eax
jmp 0x5aa148
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov ecx, dword [esp + 0xfc]
lea esi, [ecx + 0x10]
mov dword [esp + 0x84], esi
lea edi, [esp + 0xac]
call fcn.0045723e
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
test edx, 0x80000000
je 0x5aa19f
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
mov edx, ebx
shl ebx, 1
mov ebp, ecx
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
shr ebp, 0x1f
add ebx, 0xd7b17f80
adc ebp, 0xd
jmp 0x5aa1af
mov ebx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb8]
mov edx, ecx
test ebx, ebx
sete cl
test ebp, ebp
sete bl
and ebx, ecx
test bl, bl
je 0x5aa1ca
test edx, 0x3fffffff
sete cl
jmp 0x5aa1cc
xor ecx, ecx
xor ecx, 1
test cl, cl
je 0x5aa29a
lea edi, [esp + 0x98]
mov esi, dword [esp + 0x84]
call fcn.0045723e
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x9c]
test edx, 0x80000000
je 0x5aa224
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or edx, ecx
mov ecx, ebx
shl ebx, 1
mov ebp, edx
shl edx, 1
shr ebx, 0x1f
or ebx, edx
shr ebp, 0x1f
add ebx, 0xd7b17f80
adc ebp, 0xd
jmp 0x5aa232
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0xa4]
mov eax, 0x3b9aca00
mul ebx
imul ebx, ebp, 0x3b9aca00
add edx, ebx
and ecx, 0x3fffffff
mov ebx, ecx
sar ecx, 0x1f
add eax, ebx
adc edx, ecx
add eax, 0x3d1a0000
adc edx, 0xa1b203eb
nop
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x64
call fcn.00450c50
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
add ecx, 0xd53e8000
adc edx, 0x19db1de
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], edx
lea eax, [esp + 0x54]
jmp 0x5aa29c
xor eax, eax
mov dword [esp + 0x68], 0
mov ecx, dword [esp + 0x64]
mov edx, dword [ecx + 0x10]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
lea eax, [esp + 0xc0]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x18], 0
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], eax
call fcn.004628a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x10c], eax
mov dword [esp + 0x110], ecx
test edx, edx
jne 0x5aa491
mov eax, dword [esp + 0x68]
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
lea ecx, [0x5aa6b0]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x88]
mov dword [esp + 0xec], eax
mov byte [esp + 0x2b], 3
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 8], eax
call fcn.005a9a60
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x80], ebp
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x60], esi
test eax, eax
je 0x5aa39b
mov eax, esi
mov edi, ebp
jmp 0x5aa451
mov dword [esp + 0x70], ecx
mov eax, esi
mov esi, dword [esp + 0x104]
inc esi
mov edi, ebp
mov ebp, dword [esp + 0x100]
mov ecx, dword [esp + 0x108]
cmp ecx, esi
jae 0x5aa414
mov dword [esp + 0x34], edx
mov dword [esp + 0x3c], ebx
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x72ad60]
mov dword [esp + 0x10], eax
call fcn.00442820
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
mov dword [esp + 0x100], ebp
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x80]
mov dword [esp + 0x104], esi
lea ecx, [esi + esi*2]
mov dword [ebp + ecx*4 - 8], edx
mov dword [ebp + ecx*4 - 4], ebx
mov ebx, dword [0x900e70]
lea esi, [ebp + ecx*4 - 0xc]
test ebx, ebx
jne 0x5aa43e
mov ebx, dword [esp + 0x70]
mov dword [ebp + ecx*4 - 0xc], ebx
jmp 0x5aa451
mov ecx, edi
mov edi, esi
mov edx, eax
mov eax, dword [esp + 0x70]
call fcn.00456ac0
mov eax, edx
mov edi, ecx
mov ecx, dword [esp + 0x68]
mov ebx, dword [ecx + 0x14]
test ebx, ebx
jbe 0x5aa4c9
jl 0x5aa67c
mov eax, 4
mul ebx
jo 0x5aa66b
mov ebp, dword [ecx + 0x18]
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
cmp eax, ebp
ja 0x5aa66b
mov dword [esp + 0x48], ebx
mov dword [esp + 0x7c], esi
xor eax, eax
jmp 0x5aa57d
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov byte [esp + 0x2b], 0
mov edx, dword [esp + 0xf0]
mov eax, dword [edx]
call eax
add esp, 0xf4
ret
mov ecx, dword [esp + 0x104]
test ecx, ecx
jne 0x5aa52a
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], edi
mov dword [esp + 0x110], eax
mov byte [esp + 0x2b], 1
mov edx, dword [esp + 0xec]
mov eax, dword [edx]
call eax
mov byte [esp + 0x2b], 0
mov edx, dword [esp + 0xf0]
mov eax, dword [edx]
call eax
add esp, 0xf4
ret
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov byte [esp + 0x2b], 1
mov edx, dword [esp + 0xec]
mov eax, dword [edx]
call eax
mov byte [esp + 0x2b], 0
mov edx, dword [esp + 0xf0]
mov eax, dword [edx]
call eax
add esp, 0xf4
ret
mov ecx, dword [esp + 0x50]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x80]
cmp eax, ebx
jge 0x5aa662
mov dword [esp + 0x50], eax
mov ecx, dword [esi + eax*4]
mov edx, dword [esp + 0xf8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 8], ecx
call fcn.005a9a60
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test eax, eax
jne 0x5aa567
mov ebp, dword [esp + 0x104]
inc ebp
mov esi, dword [esp + 0x100]
mov eax, ecx
mov ecx, dword [esp + 0x108]
cmp ecx, ebp
jae 0x5aa62e
mov dword [esp + 0x30], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x78], eax
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x72ad60]
mov dword [esp + 0x10], eax
call fcn.00442820
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
mov dword [esp + 0x100], esi
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x104], ebp
lea ecx, [ebp + ebp*2]
mov dword [esi + ecx*4 - 8], edx
mov dword [esi + ecx*4 - 4], ebx
mov ebx, dword [0x900e70]
lea edi, [esi + ecx*4 - 0xc]
test ebx, ebx
jne 0x5aa658
mov dword [esi + ecx*4 - 0xc], eax
jmp 0x5aa567
call fcn.00456ac0
jmp 0x5aa567
mov eax, dword [esp + 0x60]
jmp 0x5aa4c9
mov eax, dword [ecx + 0x18]
test eax, eax
je 0x5aa677
call fcn.00450480
call fcn.004504c0
call fcn.00450480
xor eax, eax
mov ecx, eax
call fcn.00456b40
xor eax, eax
mov ecx, eax
call fcn.00456b40
nop
call fcn.0042fda0
add esp, 0xf4
ret
call fcn.00455690
jmp fcn.005a9e70