Function at 0x541dd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c]
cmp eax, dword [ecx + 8]
jbe 0x5428c4
sub esp, 0xac
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x3c]
mov edx, dword [eax]
mov dword [esp + 0x64], edx
mov ebx, dword [eax + 0x40]
mov ecx, dword [ecx + 0x1c]
mov dword [esp], ebx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call ecx
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x3c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x60], ebp
mov esi, dword [eax + 0x40]
mov ecx, dword [ecx + 0x14]
mov dword [esp], esi
call ecx
lea eax, [0x63aa20]
mov dword [esp], eax
call fcn.00409a20
mov eax, dword [esp + 4]
mov ecx, dword [0x6e0ad0]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov byte [eax + 3], cl
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 0x3c]
mov ebp, dword [edx + 0x40]
mov ebx, dword [ebx + 0x20]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], 4
call ebx
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x3c]
mov edx, dword [eax + 0x40]
mov ecx, dword [ecx + 0x20]
mov dword [esp], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x48]
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 4]
mov dword [esp], ecx
call fcn.00547550
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x3c]
mov edx, dword [eax + 0x40]
mov ecx, dword [ecx + 0x20]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 4]
movzx edx, word [ecx + 0x60]
test dx, dx
jne 0x542858
movzx ecx, word [ecx + 0x80]
test cx, cx
je 0x5427f3
mov edx, dword [eax + 8]
mov ebx, dword [edx + 0x50]
mov edx, dword [edx + 0x54]
xor ebp, ebp
jmp 0x541f23
inc ebp
cmp ebp, edx
jge 0x54278e
movzx esi, word [ebx + ebp*2]
cmp si, cx
jne 0x541f22
mov word [esp + 0x32], cx
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
mov ecx, dword [ecx + 0x10]
mov dword [esp], edx
call ecx
movzx eax, word [esp + 0x32]
cmp word [esp + 4], ax
jne 0x541fb8
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov byte [esp + 4], 0x2f
call fcn.00538680
nop
lea eax, [0x64cca0]
mov dword [esp], eax
call fcn.00409a20
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x39
mov eax, dword [0x8a6100]
test eax, eax
jne 0x541fab
lea eax, [0x695b92]
mov dword [edi], eax
lea eax, [0x6e5880]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edi
add esp, 0xac
ret
lea eax, [0x695b92]
call fcn.0044d090
jmp 0x541f90
mov word [esp], ax
call fcn.00558a30
movzx eax, byte [esp + 0xc]
movzx ecx, word [esp + 0x32]
cmp cx, 0x1d
je 0x541fd9
test al, al
je 0x542729
mov eax, dword [esp + 0x64]
mov edx, dword [eax + 0x24]
nop
mov ebx, dword [edx + 4]
mov edx, dword [edx]
test edx, edx
je 0x542718
mov dword [esp], edx
mov dword [esp + 4], ebx
mov word [esp + 8], cx
call fcn.005587d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x18]
test eax, eax
jne 0x5426e2
mov ebx, dword [esp + 0xb0]
mov dword [ebx + 0xc], edx
mov ebp, dword [0x8a6100]
test ebp, ebp
jne 0x5426d3
mov dword [ebx + 0x10], ecx
mov eax, dword [edx + 0x14]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x4c], edx
lea ebx, [0x638220]
mov dword [esp], ebx
call fcn.00409a20
mov eax, dword [esp + 4]
movzx ecx, word [esp + 0x32]
mov word [eax], cx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x8a6100]
test ecx, ecx
jne 0x5426be
mov ecx, dword [esp + 0x70]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0xb0]
mov edx, dword [ecx + 8]
mov dword [edx + 0xcc], 1
mov dword [edx + 0xd0], 1
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x5426ae
mov dword [edx + 0xc8], eax
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
mov ebp, dword [ebx + 0x7c]
mov esi, dword [ebx + 0x78]
mov eax, dword [ebx + 0x74]
mov dword [edx + 0xc0], esi
mov dword [edx + 0xc4], ebp
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x54269e
mov dword [edx + 0xbc], eax
mov edi, dword [ecx + 8]
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov edx, dword [0x8a6100]
test edx, edx
jne 0x542692
mov dword [edi], 0
mov eax, dword [ecx + 8]
mov eax, dword [eax + 0xe8]
test eax, eax
jg 0x542361
mov eax, dword [ecx + 8]
mov dword [esp], eax
call fcn.00545380
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x3c]
mov edx, dword [eax + 0x40]
mov ecx, dword [ecx + 0x20]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 8]
mov dword [esp], ecx
call fcn.00545380
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
mov byte [esp + 4], 0x16
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.00538fe0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x54234c
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.005390b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 4]
mov ebx, dword [esp + 0x10]
test eax, eax
jne 0x542337
lea ebx, [0x64f300]
cmp ebx, edx
jne 0x54232b
mov eax, ecx
jne 0x542236
mov edx, dword [0x8a6100]
test edx, edx
jne 0x542221
mov eax, dword [esp + 0xb0]
mov dword [eax + 4], ecx
mov dword [esp], eax
call fcn.00541900
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
je 0x542204
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
add esp, 0xac
ret
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
add esp, 0xac
ret
mov edx, dword [esp + 0xb0]
lea edi, [edx + 4]
mov eax, ecx
call fcn.0044d090
mov eax, edx
jmp 0x5421db
mov dword [esp + 0x6c], eax
mov dword [esp + 0x34], edx
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov byte [esp + 4], 0xa
call fcn.00538680
nop
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov eax, dword [esp + 0x34]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x78], eax
lea eax, [0x64f300]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x80], eax
nop
lea eax, [0x696ad1]
mov dword [esp], eax
mov dword [esp + 4], 0x49
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.0049f310
mov eax, dword [esp + 0x18]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x58], ecx
nop
lea edx, [0x64cca0]
mov dword [esp], edx
call fcn.00409a20
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x3c]
mov dword [edi + 4], eax
mov eax, dword [0x8a6100]
test eax, eax
jne 0x542320
mov eax, dword [esp + 0x58]
mov dword [edi], eax
lea eax, [0x6e5880]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edi
add esp, 0xac
ret
mov eax, dword [esp + 0x58]
call fcn.0044d090
jmp 0x542305
mov eax, ecx
mov ecx, 0
jmp 0x5421c5
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ebx
add esp, 0xac
ret
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], eax
add esp, 0xac
ret
mov eax, dword [ecx + 0x14]
movzx eax, word [eax + 0xe]
mov word [esp], ax
call fcn.00533610
mov eax, dword [esp + 4]
test eax, eax
je 0x542664
mov ecx, dword [esp + 0xb0]
mov ebx, dword [ecx + 0x38]
mov ebx, dword [ebx + 0xc]
cmp dword [eax + 0xc], ebx
jne 0x5425eb
mov ebx, dword [esp + 0x64]
mov ebp, dword [ebx + 0x24]
lea edi, [esp + 0x84]
xor eax, eax
call fcn.0044d18b
nop
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x5425e0
mov eax, dword [ecx]
mov edx, ecx
call eax
lea edi, [esp + 0x84]
mov esi, esp
call fcn.0044d66e
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x14]
test byte [ecx], al
lea esi, [ecx + 0x34]
lea edi, [esp + 0x98]
call fcn.0044d66e
mov edi, esp
lea esi, [esp + 0x84]
call fcn.0044d66e
lea edi, [esp + 0x14]
lea esi, [esp + 0x98]
call fcn.0044d66e
call fcn.0048c8c0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xf4240
mov dword [esp + 0xc], 0
call fcn.00448530
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 0x14]
mov ebp, dword [esp + 0x10]
mov esi, dword [ecx + 0xe8]
mov ecx, dword [ecx + 0xe4]
add ebp, dword [ebx + 0x68]
test esi, esi
jbe 0x5428bd
mov dword [ecx + 0xc], ebp
mov ecx, dword [eax + 0x38]
mov ecx, dword [ecx + 0xc]
mov dword [esp], ecx
call fcn.004d49c0
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x38], ecx
lea edx, [0x63aa20]
mov dword [esp], edx
call fcn.00409a20
mov eax, dword [esp + 4]
mov ecx, dword [0x6e0ad4]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov byte [eax + 3], cl
mov edx, dword [esp + 0x38]
mov ebx, dword [edx + 0x20]
mov ebp, dword [esp + 0x54]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], 4
call ebx
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x54]
mov dword [esp], edx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 4]
mov dword [esp], ecx
call fcn.00547550
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x54]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 8]
mov dword [esp], ecx
call fcn.00545620
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x54]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x38]
mov edx, dword [eax + 0x2c]
mov ebx, dword [eax + 0x28]
mov ebp, dword [eax + 0x24]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x14], ecx
call fcn.00558510
mov eax, dword [esp + 0x20]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x4c], edx
lea ebx, [0x638160]
mov dword [esp], ebx
call fcn.00409a20
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x4c]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x50]
mov dword [edi + 8], eax
mov eax, dword [0x8a6100]
test eax, eax
jne 0x5425d5
mov eax, dword [esp + 0x70]
mov dword [edi], eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], 1
mov dword [esp + 0xc], 1
call fcn.005456b0
mov ecx, dword [esp + 0xb0]
jmp 0x542126
mov eax, dword [esp + 0x70]
call fcn.0044d090
jmp 0x5425a3
lea ecx, [0x69c614]
jmp 0x5423b4
mov edx, dword [ecx + 8]
mov dword [edx + 0xe8], 0
mov dword [edx + 0xec], 0
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x542655
mov dword [edx + 0xe4], 0
mov edx, dword [ecx + 8]
mov dword [edx + 0xf4], 0
mov dword [edx + 0xf8], 0
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x542643
mov dword [edx + 0xf0], 0
jmp 0x5425c9
lea edi, [edx + 0xf0]
xor eax, eax
call fcn.0044d090
jmp 0x5425c9
lea edi, [edx + 0xe4]
xor eax, eax
call fcn.0044d090
jmp 0x542616
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.00538680
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
add esp, 0xac
ret
xor eax, eax
call fcn.0044d090
jmp 0x542115
lea edi, [edx + 0xbc]
call fcn.0044d090
jmp 0x5420f0
lea edi, [edx + 0xc8]
call fcn.0044d090
jmp 0x5420c1
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x70]
call fcn.0044d090
mov eax, ecx
jmp 0x54208f
lea edi, [ebx + 0x10]
mov eax, ecx
call fcn.0044d090
jmp 0x542032
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], ebx
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.00538680
mov eax, dword [esp + 0x40]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xb8], eax
add esp, 0xac
ret
mov ebx, dword [0x89486c]
mov edx, dword [0x894868]
jmp 0x541fee
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.00538680
nop
lea eax, [0x64cca0]
mov dword [esp], eax
call fcn.00409a20
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x30
mov eax, dword [0x8a6100]
test eax, eax
jne 0x542781
lea eax, [0x693ae8]
mov dword [edi], eax
lea eax, [0x6e5880]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edi
add esp, 0xac
ret
lea eax, [0x693ae8]
call fcn.0044d090
jmp 0x542766
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov byte [esp + 4], 0x2f
call fcn.00538680
nop
lea eax, [0x64cca0]
mov dword [esp], eax
call fcn.00409a20
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x26
mov eax, dword [0x8a6100]
test eax, eax
jne 0x5427e6
lea eax, [0x690e00]
mov dword [edi], eax
lea eax, [0x6e5880]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edi
add esp, 0xac
ret
lea eax, [0x690e00]
call fcn.0044d090
jmp 0x5427cb
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov byte [esp + 4], 0x6d
call fcn.00538680
nop
lea eax, [0x64cca0]
mov dword [esp], eax
call fcn.00409a20
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x36
mov eax, dword [0x8a6100]
test eax, eax
jne 0x54284b
lea eax, [0x69523a]
mov dword [edi], eax
lea eax, [0x6e5880]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edi
add esp, 0xac
ret
lea eax, [0x69523a]
call fcn.0044d090
jmp 0x542830
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov byte [esp + 4], 0x32
call fcn.00538680
nop
lea eax, [0x64cca0]
mov dword [esp], eax
call fcn.00409a20
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x2b
mov eax, dword [0x8a6100]
test eax, eax
jne 0x5428b0
lea eax, [0x6927a6]
mov dword [edi], eax
lea eax, [0x6e5880]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edi
add esp, 0xac
ret
lea eax, [0x6927a6]
call fcn.0044d090
jmp 0x542895
call fcn.00427150
ud2
call fcn.0044b940
jmp fcn.00541dd0