Function at 0x529530
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc0]
cmp eax, dword [ecx + 8]
jbe 0x529f91
sub esp, 0x140
xor eax, eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
lea edi, [esp + 0x14c]
xor eax, eax
call fcn.004522a3
mov byte [esp + 0x180], 0
lea edi, [esp + 0x14c]
xor eax, eax
call fcn.004522a3
xor ebx, ebx
lea ebx, [esp + 0x3c]
cmp ebx, 0
je 0x529f8a
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc4], ebx
xor eax, eax
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], eax
lea eax, [esp + 0x130]
mov ecx, dword [esp + 0x144]
mov dword [eax], ecx
mov dword [esp + 0xb0], 1
mov dword [esp + 0xb4], 1
mov dword [esp + 0xac], eax
mov dword [esp + 0x6c], 0
mov dword [esp], 0x5be6a0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406380
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0xb0]
cmp ebx, 0
jle 0x529788
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0xc4]
xor edx, edx
mov ebx, dword [esp + 0xac]
mov dword [esp + 0xc4], ebx
mov ebp, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], ecx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x6c], 0
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xc8], ebp
mov ebx, dword [esp + 0xcc]
mov dword [esp + 0xfc], ebx
xor eax, eax
mov dword [esp + 0xf8], ebp
mov dword [esp + 0x50], ebp
mov dword [esp + 0xf4], ecx
mov ebp, dword [esp + 0x50]
cmp eax, ebp
jge 0x52977a
mov dword [esp + 0x84], ecx
cmp ecx, 0
je 0x529f83
mov edi, dword [ecx]
mov esi, dword [ecx + 4]
mov edx, dword [ecx + 8]
mov ebp, dword [ecx + 0xc]
mov dword [esp + 0x54], eax
mov dword [esp + 0x120], edi
mov dword [esp + 0x124], esi
mov dword [esp + 0x104], esi
mov dword [esp + 0x128], edx
mov dword [esp + 0x108], edx
mov dword [esp + 0x12c], ebp
mov dword [esp + 0x10c], ebp
mov dword [esp + 0x100], edi
mov dword [esp + 0x60], edi
mov dword [esp], 0x5be6a0
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
call fcn.00409420
mov ebx, dword [esp + 0xc]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0
xchg ebp, eax
je 0x52978f
mov ecx, dword [esp + 0x84]
add ecx, 0x10
mov eax, dword [esp + 0x54]
inc eax
mov ebp, dword [esp + 0x50]
cmp eax, ebp
jl 0x5296de
cmp byte [esp + 0x180], 0
je 0x52963a
add esp, 0x140
ret
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x88], ebx
mov byte [esp + 0x3f], 1
mov dword [esp], 0x5be6a0
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x88]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x3f]
mov dword [esp + 0xc], ebx
call fcn.00406f90
xor eax, eax
mov ebx, dword [esp + 0x60]
mov ebp, dword [ebx + 0x28]
mov dword [esp + 0x48], ebp
mov ebp, dword [esp + 0x48]
cmp eax, ebp
jge 0x52975f
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x60]
cmp ebx, 0
je 0x529f7c
mov dword [esp + 0x40], eax
mov ebp, eax
mov esi, dword [ebx + 0x28]
cmp eax, esi
jae 0x529f75
mov esi, dword [ebx + 0x24]
imul ebp, ebp, 0xc
add esi, ebp
mov dword [esp + 0x78], esi
xor ebx, ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x68], 0
mov ebx, dword [esp + 0x78]
cmp ebx, 0
je 0x529f6e
mov ebp, dword [ebx]
xor ebx, ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x70], ebp
xor ebx, ebx
cmp ebp, ebx
jne 0x529f07
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x94], edx
mov eax, dword [esp + 0x90]
mov dword [esp + 0x98], eax
cmp eax, 0
je 0x529ea9
mov ecx, edx
mov dword [esp + 0x9c], ecx
mov dword [esp], ecx
mov dword [esp + 0xa0], eax
mov dword [esp + 4], eax
mov edx, dword [esp + 0x148]
mov ebx, dword [edx]
call ebx
mov ecx, dword [esp + 0x68]
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x529af1
mov eax, dword [esp + 0x60]
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00409420
mov ebx, dword [esp + 0xc]
mov ebp, dword [ebx]
cmp ebp, 1
jg 0x529ad0
cmp byte [esp + 0x180], 0
jne 0x529ad0
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 4], ebx
call fcn.00528fe0
lea esi, [esp + 8]
lea edi, [esp + 0x14c]
cld
call fcn.0045273e
xor ebx, ebx
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], ebx
mov esi, dword [esp + 0x170]
mov ebx, dword [esp + 0x174]
mov dword [esp + 0xec], ebx
mov eax, dword [esp + 0x178]
mov ebx, dword [esp + 0x104]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x108]
mov dword [esp + 0xe0], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], esi
mov edi, dword [esp + 0xec]
mov dword [esp + 0xf0], eax
mov ebx, dword [esp + 0xe0]
mov edx, edi
add edi, ebx
cmp edi, eax
jbe 0x5299cb
mov dword [esp], 0x5bcd00
mov dword [esp + 0xd0], esi
mov dword [esp + 4], esi
mov dword [esp + 0xd4], edx
mov dword [esp + 8], edx
mov dword [esp + 0xd8], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x10], edi
call fcn.0043b7e0
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xd8], eax
cmp edi, eax
ja 0x529ac9
mov dword [esp + 0xd4], edi
mov eax, dword [esp + 0xe0]
mov ebx, dword [esp + 0xec]
mov ebp, esi
mov dword [esp + 0xd0], esi
shl ebx, 2
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xdc]
mov dword [esp + 4], ebx
mov ebx, eax
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.004529b0
mov ebx, dword [esp + 0xd0]
mov dword [esp + 0x170], ebx
mov ebx, dword [esp + 0xd4]
mov dword [esp + 0x174], ebx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0x178], ebx
mov ecx, dword [esp + 0x170]
mov ebx, dword [esp + 0x174]
mov edx, dword [esp + 0x178]
mov eax, ebx
inc ebx
cmp ebx, edx
ja 0x529a87
mov dword [esp + 0x174], ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 4
add ebx, ebp
mov ebp, dword [esp + 0x40]
mov dword [ebx], ebp
mov byte [esp + 0x180], 1
mov eax, dword [esp + 0x4c]
inc eax
jmp 0x5297d3
mov dword [esp], 0x5bcd00
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043b7e0
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, ebx
inc ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], edx
mov dword [esp + 0x170], ecx
jmp 0x529a66
call fcn.00427c60
ud2
mov esi, 0x612c40
lea edi, [esp + 0x14c]
cld
call fcn.0045273e
mov byte [esp + 0x180], 0
add esp, 0x140
ret
cmp byte [esp + 0x180], 0
jne 0x529a7d
xor ebp, ebp
cmp ecx, ebp
je 0x529a7d
movzx ebp, byte [ecx + 0xf]
mov ebx, ebp
and ebx, 0x1f
movzx ebp, bl
cmp ebp, 0x19
jne 0x529a7d
mov dword [esp + 0x64], ecx
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00409420
mov ecx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xc]
mov ebp, dword [ebx]
cmp ebp, 0
jle 0x529b80
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x58], 2
mov dword [esp], 0x5be6e0
mov dword [esp + 4], ecx
lea ebx, [esp + 0x88]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x58]
mov dword [esp + 0xc], ebx
call fcn.00406f90
jmp 0x529a7d
xor ebp, ebp
cmp ecx, ebp
jne 0x529bb6
mov dword [esp], 0x5be6e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406380
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x58], 1
mov dword [esp], 0x5be6e0
mov dword [esp + 0x6c], ecx
mov dword [esp + 4], ecx
lea ebx, [esp + 0x88]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x58]
mov dword [esp + 0xc], ebx
call fcn.00406f90
mov eax, dword [esp + 0x60]
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00409420
mov ebx, dword [esp + 0xc]
mov ebp, dword [ebx]
cmp ebp, 1
jle 0x529ea4
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x58], 2
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x88]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x58]
mov dword [esp + 0xc], ebx
call fcn.00406f90
xor eax, eax
mov dword [esp + 0xbc], eax
mov ebx, dword [esp + 0x104]
mov dword [esp + 0xe8], ebx
mov ebx, dword [esp + 0x108]
mov dword [esp + 0xec], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xb8], eax
mov edi, dword [esp + 0xbc]
mov dword [esp + 0xc0], eax
mov esi, eax
mov ebx, dword [esp + 0xec]
mov edx, edi
add edi, ebx
cmp edi, eax
jbe 0x529cf3
mov dword [esp], 0x5bcd00
mov dword [esp + 0xdc], esi
mov dword [esp + 4], esi
mov dword [esp + 0xe0], edx
mov dword [esp + 8], edx
mov dword [esp + 0xe4], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x10], edi
call fcn.0043b7e0
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xe4], eax
cmp edi, eax
ja 0x529e9d
mov dword [esp + 0xe0], edi
mov eax, dword [esp + 0xec]
mov ebx, dword [esp + 0xbc]
mov ebp, esi
mov dword [esp + 0xdc], esi
shl ebx, 2
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xe8]
mov dword [esp + 4], ebx
mov ebx, eax
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.004529b0
mov ecx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xe0]
mov esi, dword [esp + 0xe4]
mov dword [esp + 0xb8], ecx
mov edi, ecx
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xc0], esi
mov eax, ebx
inc ebx
cmp ebx, esi
ja 0x529e6b
mov edx, ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 4
add ebx, ebp
mov ebp, dword [esp + 0x40]
mov dword [ebx], ebp
xor ebx, ebx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x110], ebx
mov dword [esp + 0xb8], edi
mov dword [esp + 0x114], edi
mov dword [esp + 0xbc], edx
mov dword [esp + 0x118], edx
mov dword [esp + 0xc0], esi
mov dword [esp + 0x11c], esi
mov ecx, dword [esp + 0xac]
mov ebx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov eax, ebx
inc ebx
cmp ebx, edx
ja 0x529e29
mov dword [esp + 0xb0], ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 0x10
add ebx, ebp
lea ebp, [esp + 0x110]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov ebp, 0x5caac0
mov dword [esp], ebp
call fcn.0040e840
jmp 0x529a7d
mov dword [esp], 0x5caac0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043b7e0
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, ebx
inc ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], edx
mov dword [esp + 0xac], ecx
jmp 0x529dff
mov dword [esp], 0x5bcd00
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043b7e0
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, edx
inc edx
mov ecx, edi
jmp 0x529d7a
call fcn.00427c60
ud2
jmp 0x529c55
mov ebx, dword [esp + 0x78]
mov eax, dword [ebx + 4]
movzx ebp, byte [eax + 0xf]
mov ebx, ebp
and ebx, 0x1f
movzx ebp, bl
cmp ebp, 0x16
jne 0x529eee
mov dword [esp], eax
call fcn.00527ca0
mov ecx, dword [esp + 4]
mov eax, dword [esp + 8]
mov dword [esp + 0xa8], eax
mov dword [esp], eax
mov dword [esp + 0xa4], ecx
mov ebx, dword [ecx + 0x88]
call ebx
mov eax, dword [esp + 4]
mov dword [esp + 0x68], eax
mov dword [esp], eax
call fcn.00527ac0
mov ecx, dword [esp + 4]
mov eax, dword [esp + 8]
jmp 0x529875
mov edx, ebp
lea ebx, [esp + 0x8c]
mov edi, ebx
mov dword [esp + 0x80], ebp
cmp ebp, 0
je 0x529f69
add ebp, 3
mov dword [esp + 0x74], ebx
cmp ebx, 0
je 0x529f65
cmp byte [0x6cfdd8], 0
jne 0x529f4c
mov dword [ebx], ebp
movzx esi, byte [edx + 1]
mov ebx, esi
shl ebx, 8
movzx esi, byte [edx + 2]
or ebx, esi
mov dword [edi + 4], ebx
jmp 0x52984e
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e740
mov edi, dword [esp + 0x74]
mov edx, dword [esp + 0x80]
jmp 0x529f35
mov dword [ebx], eax
jmp 0x529f2a
mov dword [ebp], eax
jmp 0x529f1e
mov dword [ebx], eax
jmp 0x52982e
call fcn.00427bf0
ud2
mov dword [ebx], eax
jmp 0x5297ec
mov dword [ecx], eax
jmp 0x5296ee
mov dword [ebx], eax
jmp 0x529596
call fcn.004501c0
jmp fcn.00529530