Function at 0x520590
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xd8
mov eax, dword [0xa0b130]
xor eax, esp
mov dword [esp + 0xd4], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x20]
push esi
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push edi
mov edx, dword [eax + 4]
mov edi, ecx
mov ecx, dword [eax]
mov dword [esp + 0x44], eax
xor eax, eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
nop dword [eax]
cmp edx, dword [ebp + 0x28]
ja 0x520c2a
jb 0x5205f4
cmp ecx, dword [ebp + 0x24]
jae 0x520c2a
lea eax, [esp + 0x18]
push eax
push 0
lea eax, [esp + 0x18]
push eax
push 1
lea ecx, [ebp + 0xc]
call fcn.0041562c
mov cl, al
mov eax, dword [esp + 0x18]
mov byte [esp + 0x27], cl
mov byte [esp + 0xc], cl
test eax, eax
jne 0x520c22
mov ch, cl
and ch, 0xc0
mov byte [esp + 0x26], ch
je 0x5207ea
and cl, 0x3f
movzx esi, ch
movzx eax, cl
cdq
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edx
sub esi, 0x40
je 0x520745
sub esi, 0x40
jne 0x520745
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.0040b087
mov cl, byte [esp + 0x26]
mov dword [esp + 0x30], eax
lea eax, [esp + 0xb0]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0x98]
mov byte [esp + 0x98], cl
mov ecx, edi
push eax
mov dword [esp + 0x38], edx
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], 2
mov byte [esp + 0xc4], 0
mov byte [esp + 0xd4], 0
call fcn.00406b9a
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0xb0]
cmp eax, ecx
je 0x5206d4
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
add esp, 4
mov esi, dword [edi + 4]
mov ecx, dword [esi - 0x34]
cmp ecx, dword [esi - 0x30]
jb 0x5206f2
push 8
push 0
lea eax, [esi - 0x28]
push eax
lea ecx, [esi - 0x38]
call fcn.00405e1b
mov ecx, dword [esi - 0x34]
mov eax, dword [esi - 0x38]
mov edx, dword [esp + 0x38]
mov dword [eax + ecx*8], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*8 + 4], edx
inc dword [esi - 0x34]
mov esi, dword [edi + 4]
mov ecx, dword [esi - 0x34]
cmp ecx, dword [esi - 0x30]
jb 0x520725
push 8
push 0
lea eax, [esi - 0x28]
push eax
lea ecx, [esi - 0x38]
call fcn.00405e1b
mov ecx, dword [esi - 0x34]
mov eax, dword [esi - 0x38]
mov edx, dword [esp + 0x30]
mov dword [eax + ecx*8], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*8 + 4], edx
inc dword [esi - 0x34]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x520bbd
lea eax, [esp + 0xb0]
mov byte [esp + 0x98], ch
mov dword [esp + 0xa0], eax
mov ecx, edi
lea eax, [esp + 0x98]
mov dword [esp + 0xa4], 0
push eax
mov dword [esp + 0xac], 2
mov byte [esp + 0xc4], 0
mov byte [esp + 0xd4], 0
call fcn.00406b9a
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0xb0]
cmp eax, ecx
je 0x5207ac
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
add esp, 4
mov esi, dword [edi + 4]
mov ecx, dword [esi - 0x34]
cmp ecx, dword [esi - 0x30]
jb 0x5207ca
push 8
push 0
lea eax, [esi - 0x28]
push eax
lea ecx, [esi - 0x38]
call fcn.00405e1b
mov ecx, dword [esi - 0x34]
mov eax, dword [esi - 0x38]
mov edx, dword [esp + 0x38]
mov dword [eax + ecx*8], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*8 + 4], edx
inc dword [esi - 0x34]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x520bbd
movzx eax, cl
cmp eax, 0x2e
ja case.0x5207fd.23
movzx eax, byte [eax + 0x520c84]
jmp dword [eax*4 + 0x520c54]
lea eax, [esp + 0xb0]
mov byte [esp + 0x98], cl
mov dword [esp + 0xa0], eax
mov ecx, edi
lea eax, [esp + 0x98]
mov dword [esp + 0xa4], 0
push eax
mov dword [esp + 0xac], 2
mov byte [esp + 0xc4], 0
mov byte [esp + 0xd4], 0
call fcn.00406b9a
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0xb0]
cmp eax, ecx
je 0x520bbd
push eax
call esi
add esp, 4
jmp 0x520bbd
lea eax, [esp + 0x18]
push eax
push 0
lea eax, [esp + 0x18]
push eax
movzx eax, byte [ebp + 0x15]
lea ecx, [ebp + 0xc]
push eax
call fcn.0041562c
push edx
push eax
push dword [esp + 0x14]
mov ecx, edi
call fcn.0040d2f1
jmp 0x520bbd
lea eax, [esp + 0x18]
push eax
push 0
lea eax, [esp + 0x18]
push eax
push 1
lea ecx, [ebp + 0xc]
call fcn.0041562c
push edx
push eax
push dword [esp + 0x14]
mov ecx, edi
call fcn.0040d2f1
jmp 0x520bbd
lea eax, [esp + 0x18]
push eax
push 0
lea eax, [esp + 0x18]
push eax
push 2
lea ecx, [ebp + 0xc]
call fcn.0041562c
push edx
push eax
push dword [esp + 0x14]
mov ecx, edi
call fcn.0040d2f1
jmp 0x520bbd
lea eax, [esp + 0x18]
push eax
push 0
lea eax, [esp + 0x18]
push eax
push 4
lea ecx, [ebp + 0xc]
call fcn.0041562c
push edx
push eax
push dword [esp + 0x14]
mov ecx, edi
call fcn.0040d2f1
jmp 0x520bbd
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.0040b087
mov dword [esp + 0x34], eax
mov ecx, edi
mov al, byte [esp + 0x27]
mov byte [esp + 0x98], al
lea eax, [esp + 0xb0]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0x98]
push eax
mov dword [esp + 0x34], edx
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 2
mov byte [esp + 0xc4], 0
mov byte [esp + 0xd4], 0
call fcn.00406b9a
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0xb0]
cmp eax, ecx
je 0x520992
push eax
call esi
add esp, 4
mov esi, dword [edi + 4]
mov ecx, dword [esi - 0x34]
cmp ecx, dword [esi - 0x30]
jb 0x5209b0
push 8
push 0
lea eax, [esi - 0x28]
push eax
lea ecx, [esi - 0x38]
call fcn.00405e1b
mov ecx, dword [esi - 0x34]
mov eax, dword [esi - 0x38]
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*8], edx
mov edx, dword [esp + 0x30]
mov dword [eax + ecx*8 + 4], edx
inc dword [esi - 0x34]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x520bbd
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.0040575e
push edx
push eax
push dword [esp + 0x14]
mov ecx, edi
call fcn.0040d2f1
jmp 0x520bbd
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.0040b087
mov edi, eax
lea ecx, [ebp + 0xc]
lea eax, [esp + 0x18]
mov esi, edx
push eax
lea eax, [esp + 0x14]
push eax
call fcn.0040b087
push edx
push eax
push esi
push edi
push dword [esp + 0x1c]
mov edi, dword [esp + 0x40]
mov ecx, edi
call fcn.00406735
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x520bbd
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.0040b087
mov edi, eax
lea ecx, [ebp + 0xc]
lea eax, [esp + 0x18]
mov esi, edx
push eax
lea eax, [esp + 0x14]
push eax
call fcn.0040575e
jmp 0x520a1c
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.0040b087
mov ecx, dword [esp + 0x2c]
mov edi, eax
push 0
push 0
push dword [esp + 0x14]
mov esi, edx
call fcn.0040d2f1
lea eax, [esp + 0x18]
push eax
push esi
push edi
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x70]
push eax
lea ecx, [ebp + 0xc]
call fcn.00402eaf
mov ecx, dword [esp + 0x64]
cmp byte [ebp + 0x14], 0
mov eax, dword [esp + 0x60]
mov edi, dword [esp + 0x2c]
setne byte [esp + 0x50]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [esp + 0x4c], ecx
mov cl, byte [ebp + 0x15]
mov dword [esp + 0x48], eax
movq xmm0, qword [esp + 0x48]
mov byte [esp + 0x51], cl
mov eax, dword [esp + 0x50]
mov word [esp + 0x28], 0
mov dword [esp + 0x78], eax
mov ax, word [esp + 0x28]
movq qword [esp + 0x70], xmm0
mov byte [esp + 0x7c], cl
mov word [esp + 0x7d], ax
movups xmm0, xmmword [esp + 0x70]
jmp 0x520bac
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.0040b087
push 0
push 0
push edx
push eax
push dword [esp + 0x1c]
mov ecx, edi
call fcn.00406735
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.0040b087
lea ecx, [esp + 0x18]
push ecx
push edx
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x78]
push eax
lea ecx, [ebp + 0xc]
call fcn.00402eaf
mov ecx, dword [esp + 0x6c]
cmp byte [ebp + 0x14], 0
mov eax, dword [esp + 0x68]
mov dword [esp + 0x58], ecx
setne byte [esp + 0x5c]
mov cl, byte [ebp + 0x15]
mov dword [esp + 0x54], eax
movq xmm0, qword [esp + 0x54]
mov byte [esp + 0x5d], cl
mov eax, dword [esp + 0x5c]
mov word [esp + 0x2a], 0
mov dword [esp + 0x88], eax
mov ax, word [esp + 0x2a]
movq qword [esp + 0x80], xmm0
mov byte [esp + 0x8c], cl
mov word [esp + 0x8d], ax
movups xmm0, xmmword [esp + 0x80]
mov eax, dword [edi + 4]
movups xmmword [eax - 0x18], xmm0
cmp byte [eax - 8], 0
jne 0x520bbd
mov byte [eax - 8], 1
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x520c22
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
jmp 0x5205e0
lea eax, [esp + 0xc]
push eax
push str.invalid_extended_CFI_opcode_0x_hhx
sub esp, 8
mov esi, esp
call fcn.00415dfc
mov dword [esi], 0x2a
mov dword [esi + 4], eax
mov esi, dword [esp + 0x50]
push esi
call fcn.0040d684
mov ecx, dword [esp + 0x2c]
add esp, 0x14
test ecx, ecx
je 0x520c39
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0xd4]
xor ecx, esp
call fcn.004087b5
mov esp, ebp
pop ebp
ret 0x24
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x44]
mov dword [esi], ecx
mov dword [esi + 4], edx
mov esi, dword [esp + 0x40]
mov dword [esi], eax
mov ecx, dword [esp + 0xdc]
mov eax, esi
pop edi
pop esi
xor ecx, esp
call fcn.004087b5
mov esp, ebp
pop ebp
ret 0x24